Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
File: JNoGgkj2hKWuXZeclngr2iYZpmQ.mft (raw, json)
Hash identifier: dYTuM/FSUnzDeZO/D/YS6lpWX+mNAMfk1TKdhivWWvg=
Subject key identifier: B2:A7:10:E6:E5:4A:FB:96:C5:94:F7:2A:D2:61:7B:10:9D:EE:AD:3B
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 01A0D5A73B5ED8A2A351245289A6ED32F768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
Manifest number: 0136
Signing time: Thu 24 Sep 2026 23:01:41 +0000
Manifest this update: Thu 24 Sep 2026 23:01:41 +0000
Manifest next update: Fri 25 Sep 2026 23:01:41 +0000
Files and hashes: 1: 4dV_FEknf2673xUudEJgMK9SaSM.roa (hash: EFpUpjcuql5pAjeM5M3YVguPsMbWl4b3xSNvyRfGxlc=)
2: 5pUb4usxoUemY0cKiAWilNYbvzU.roa (hash: FJ+d9SQFx/yVW7NXXyFNRSHBza0C2OJNmGoQVEd++aY=)
3: JNoGgkj2hKWuXZeclngr2iYZpmQ.crl (hash: +tndv6XAi8o2jhc01vU/Bxashpl/isaa/sHLrM3AuOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:3b:5e:d8:a2:a3:51:24:52:89:a6:ed:32:f7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Sep 24 23:01:41 2026 GMT
Not After : Sep 25 23:01:41 2026 GMT
Subject: CN=b2a710e6e54afb96c594f72ad2617b109deead3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:f9:ca:5e:8e:92:65:0e:ea:10:c0:8f:7b:
ba:eb:6d:7b:12:c8:a4:e6:86:70:38:5d:62:46:06:
e4:ab:0b:0c:0e:c8:39:dc:42:ab:c6:84:bf:ee:c8:
16:ba:13:aa:80:65:ef:95:71:00:f5:de:e1:bb:f0:
df:bf:e2:fd:d3:d3:e0:8e:1b:ac:08:8e:93:30:45:
08:06:93:30:22:87:5e:c2:cd:ae:8e:33:c2:80:ac:
2d:a6:58:1b:ee:12:5a:5a:b3:61:d7:a4:45:83:99:
32:f1:7e:a5:4c:3a:a6:66:bd:fe:13:c5:3e:da:05:
9f:0c:4a:bb:25:16:bb:45:0d:23:c7:fd:48:1d:24:
ad:38:d3:96:5e:3e:fc:ca:e6:1a:f2:b9:79:fb:79:
76:6c:c9:51:ca:94:d6:dd:d7:18:1e:65:e8:3b:ea:
16:cc:77:f6:dc:24:a7:47:6a:5b:14:69:4c:93:10:
44:b5:5b:45:99:21:fd:6e:0f:21:5d:0c:95:3e:de:
b5:7b:df:97:d2:ef:58:6f:22:95:f6:f9:6e:ba:9c:
21:60:a5:cf:2e:6d:1a:51:4f:ca:16:f8:5c:c1:28:
2f:af:1d:7a:ab:31:7b:00:a1:61:d9:22:60:e8:47:
fb:db:13:e4:f7:66:39:2c:9e:21:35:34:b5:0d:3c:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:10:E6:E5:4A:FB:96:C5:94:F7:2A:D2:61:7B:10:9D:EE:AD:3B
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:1c:d6:2b:63:76:e6:46:55:ec:a5:8c:77:44:f2:e9:9d:
3e:db:60:6a:f9:f2:b0:de:b0:b0:88:36:90:55:91:e0:ec:29:
79:ac:c5:ef:18:dd:4a:c5:57:16:02:7a:eb:72:f3:ba:8f:4a:
ca:42:d2:8b:ce:de:84:a2:f9:79:4a:bc:29:99:b8:a4:c6:52:
d4:21:b1:c0:ff:f6:4b:5f:e3:e9:28:64:83:d7:70:9b:9d:67:
55:b3:a2:64:7f:88:01:13:a9:29:84:5d:f4:a0:dc:9d:fd:bb:
a4:08:76:70:b4:b8:98:78:4f:91:20:6b:44:ea:30:64:10:73:
53:7e:2a:e7:74:6b:39:24:f9:0a:f8:72:82:5f:90:6b:6b:4c:
12:db:e2:df:3f:ec:7d:6b:e5:58:e6:c3:e6:3b:64:4b:c6:89:
86:13:f8:b2:d4:3f:98:f9:ba:2d:1f:0d:26:55:88:65:c7:73:
4b:a4:64:15:ad:69:b3:12:fb:66:c4:28:1a:ed:53:ba:20:f5:
1a:82:75:92:28:03:f7:c2:fd:65:7f:ff:d3:db:a7:21:31:ea:
73:79:a3:ce:38:3e:71:31:1f:98:ae:f4:51:0e:17:94:74:f0:
7d:8d:c6:d2:e8:2b:65:23:19:c8:ab:15:ae:2e:3a:77:dd:f5:
f5:01:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:11:39 2026 by rpki-client