Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: 5F7CkwTgWaU99KfTV6CAjslBuzgHgTolMHtJTFPpstU=
Subject key identifier: 6E:01:B5:74:82:6B:16:C5:C2:F5:2E:0D:6C:06:34:8D:7C:9E:5E:E1
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 01A0E709EF807D0EF2667ABF449D5BF45324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0C32
Signing time: Mon 28 Sep 2026 08:03:02 +0000
Manifest this update: Mon 28 Sep 2026 08:03:02 +0000
Manifest next update: Tue 29 Sep 2026 08:03:02 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: dsK9AvicXnDlnpp1DiVfTEZ1+Ghg7fgsdls6440FEcc=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:ef:80:7d:0e:f2:66:7a:bf:44:9d:5b:f4:53:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Sep 28 08:03:02 2026 GMT
Not After : Sep 29 08:03:02 2026 GMT
Subject: CN=6e01b574826b16c5c2f52e0d6c06348d7c9e5ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:a5:5c:80:25:b0:36:ee:0c:6f:d9:94:44:
a3:ae:a8:ec:9b:a6:96:d9:c2:47:5c:8c:47:4f:8f:
5f:ca:c7:fd:db:4a:68:25:1c:7b:41:16:b0:61:ad:
8c:81:ba:e6:9d:5d:63:e8:43:e7:16:ba:9c:3e:bc:
21:ba:22:90:79:97:f3:02:a7:ed:87:fd:c9:72:22:
34:dd:ca:89:53:39:d7:e3:69:ad:ed:38:8a:0c:d0:
6c:b9:98:01:9e:b7:b9:2a:79:f1:2c:01:d5:9b:33:
d3:87:61:72:8b:79:73:b8:ff:2e:9c:b3:a7:17:b0:
b8:99:cd:d1:57:39:b4:1c:b2:e6:d2:c9:ee:dd:f4:
d3:78:2c:d0:b3:4d:f6:07:d2:ee:51:2c:15:ee:15:
a5:d2:4a:86:9b:47:b1:27:6c:ed:8d:8d:2d:bc:60:
a7:85:c5:13:f2:04:04:4d:26:d9:ee:db:3b:35:2c:
63:02:df:e1:d0:5b:66:af:9e:6c:22:64:bd:1d:1c:
d7:9e:34:10:58:77:8e:f0:5d:dd:6b:e3:23:c8:fb:
f7:5d:53:fc:ba:c3:29:47:22:12:4f:ba:42:84:29:
5e:f8:b2:78:01:97:38:cd:46:17:93:5f:b9:e2:47:
dd:d7:fb:c7:98:4c:d5:55:b5:2a:84:35:ed:fa:a2:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:01:B5:74:82:6B:16:C5:C2:F5:2E:0D:6C:06:34:8D:7C:9E:5E:E1
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0e:a3:ca:b8:ca:34:07:3a:bd:6f:e0:6f:2f:8e:79:86:a3:
5d:46:9f:51:00:02:25:5a:31:e0:fa:1c:33:dd:da:66:2d:7a:
52:9f:3d:ca:98:d9:03:f4:0a:15:65:84:4a:2a:e0:44:ec:cf:
9f:e7:a6:4e:50:87:25:39:af:d8:51:56:12:a7:0d:53:18:da:
bd:a6:6b:d9:67:d8:31:6a:37:3e:56:38:0d:64:db:a2:ff:80:
3d:8b:d2:f2:35:91:bd:36:93:e2:ca:28:1f:c3:dc:67:58:a6:
b3:48:6b:db:36:b7:68:07:42:01:0a:e8:8c:4d:3b:b0:ed:87:
f0:f6:19:63:47:e6:6c:55:2c:d4:4a:45:55:db:4d:37:01:9b:
47:e0:95:60:fa:04:85:3e:aa:69:54:4c:be:9e:99:ab:56:34:
e4:0a:f4:de:93:ac:a0:93:1e:a2:91:86:d3:ba:5a:be:e0:4e:
54:f5:ef:10:9a:18:df:65:56:5d:d7:4e:3e:c3:dd:03:0c:77:
3d:0f:8d:7f:7e:d2:70:ea:68:b0:ff:25:c4:07:55:da:0d:68:
93:b4:7c:0a:ad:b4:23:5f:63:54:ae:f5:22:80:7b:93:19:04:
d2:62:7b:f7:c4:d5:f7:7c:d7:35:65:86:a8:2b:0a:ae:89:6f:
f7:db:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:14:59 2026 by rpki-client