Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: +xT+wWrMvyAj/q66QzRrn5A0mvgWmd5Q97DAaBXswyY=
Subject key identifier: 60:8F:DC:2B:68:3E:E4:15:9B:E7:B4:0C:5B:A7:B6:96:EA:FA:28:17
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019D273A916359C9135A21EB773E5CB59146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0A41
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: m5MgqC+CAQ0fTktz5MS8yv9Ed8fcqXY15PMoYrlPBnE=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:91:63:59:c9:13:5a:21:eb:77:3e:5c:b5:91:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=608fdc2b683ee4159be7b40c5ba7b696eafa2817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:93:ed:69:d4:8e:50:63:1a:f2:ab:27:cd:
cc:f1:54:7c:05:1f:80:08:28:65:4e:ff:33:e0:4a:
c8:57:3c:78:ba:67:d7:b6:7f:79:ab:31:b2:e9:05:
f9:7b:37:5f:8e:d4:e7:e5:bd:23:76:ef:9e:1e:a9:
88:9e:00:42:5c:f4:3f:43:10:52:b4:e7:b5:ca:8e:
32:60:a4:7c:97:e2:3f:f3:c1:5e:78:c5:11:db:ad:
aa:3f:52:cc:20:5a:79:b6:e0:0f:2c:11:fb:81:ea:
80:54:5f:18:4a:96:f3:c9:d9:03:c5:9c:19:64:4b:
6f:f9:e7:ee:7d:8f:f7:c1:ef:0a:dd:f4:71:9d:fb:
4d:cf:20:b7:e5:32:3f:97:ba:72:b0:b6:66:08:99:
da:e8:22:66:3c:42:0f:4d:3b:64:e0:7a:2f:19:32:
c4:13:9f:1e:3f:9e:b9:e1:e7:ad:96:c7:a3:cc:2a:
94:ec:96:03:14:0b:b3:1c:79:f5:7d:42:49:9e:ea:
66:2e:a5:1c:52:f1:48:14:8b:52:bc:84:56:18:25:
a6:ae:fa:f5:9c:8b:49:ee:b7:44:47:7d:5d:d9:6f:
62:ce:28:37:11:69:1c:1f:04:08:88:c1:57:59:da:
ec:7c:0e:6c:68:fb:64:32:87:25:2b:6b:7b:3a:59:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8F:DC:2B:68:3E:E4:15:9B:E7:B4:0C:5B:A7:B6:96:EA:FA:28:17
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:92:ee:e5:3b:a1:07:16:ea:ad:51:9a:28:8e:6c:d7:41:47:
fc:39:86:f1:a2:d8:df:5f:91:c9:0d:c2:57:ac:ec:f2:50:a6:
ee:d4:a2:fa:f9:7f:fa:9c:41:c6:92:6a:3e:72:22:e2:21:8f:
bf:bb:ee:da:b9:a7:f7:9e:11:d8:f9:ba:65:2d:f8:8b:b8:be:
08:0f:25:90:01:c9:b4:c2:6d:a3:93:d5:03:8c:58:be:16:5c:
d4:ee:79:00:06:97:dc:ae:8a:df:87:90:19:1a:ca:75:d4:06:
9c:3e:85:fd:5e:92:92:2e:34:7a:d3:99:de:e1:c0:e6:c9:7e:
d8:29:11:1c:c7:59:ab:8f:da:52:b2:e8:09:12:98:92:77:95:
4f:a3:30:d4:fe:d8:af:0f:ed:fc:a6:52:dd:74:82:b1:13:b2:
c4:56:93:d3:5b:e2:3f:49:23:3b:e3:5e:0c:2c:83:33:3a:72:
42:91:d7:eb:2e:90:c8:98:22:53:f5:37:4b:c7:ef:ac:0c:62:
3e:3b:4d:4e:1c:ff:07:97:f0:cd:aa:ea:a4:34:2d:7d:dc:23:
e8:42:36:ed:bb:48:91:9f:6b:6c:98:7c:10:6d:a7:2c:c3:d9:
44:39:ab:2d:4e:67:cd:27:79:b6:5f:3f:75:cb:98:f8:39:7b:
07:e7:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:30 2026 by rpki-client