Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: Hf+x/xL3uqLgZWVS/GsZ5zldn4uoWc5ETvIDPp9iIrA=
Subject key identifier: B4:80:B4:94:42:32:DF:A1:DE:9A:19:0A:B4:35:35:3C:06:A8:EA:AE
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 01A1DCEFD112C8A3F42376551532FD9142A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1426
Signing time: Sun 15 Nov 2026 02:01:06 +0000
Manifest this update: Sun 15 Nov 2026 02:01:06 +0000
Manifest next update: Mon 16 Nov 2026 02:01:06 +0000
Files and hashes: 1: GPFcG47nIYBiH_vSd-Zet9HInTY.asa (hash: HNMbYsk9UfUyN+47iHB5pyXq6stkZEZHOhwEC4uh0DQ=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: HA9ZhbHkGO85NuGU83WkYJPloM485HBNTtmGyT1veeM=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:d1:12:c8:a3:f4:23:76:55:15:32:fd:91:42:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Nov 15 02:01:06 2026 GMT
Not After : Nov 16 02:01:06 2026 GMT
Subject: CN=b480b4944232dfa1de9a190ab435353c06a8eaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:a3:92:e0:28:9e:03:0b:dd:ae:18:8c:5d:
29:9a:27:2e:03:0a:14:a3:c2:8b:ea:b7:90:48:c8:
72:73:4f:f7:3d:91:59:a1:14:49:1a:fe:dc:ef:b0:
c0:1b:5e:e5:7e:ff:cb:97:0b:a0:eb:95:00:eb:e2:
18:1b:b5:f0:11:0f:1a:3c:bd:92:13:14:6d:96:f6:
a1:cf:08:f2:ee:a3:8d:69:0b:f5:d8:c8:18:8b:c9:
18:a7:8d:a8:85:89:10:09:c6:2e:4d:64:bb:4a:27:
3a:15:01:28:ee:08:3d:20:36:50:f9:b6:02:1b:f7:
c5:99:2f:5b:d1:f0:18:76:c9:71:60:cd:93:6e:fc:
3b:7c:f2:64:b2:9b:25:96:dc:1f:f8:46:6e:bf:e9:
d3:1b:56:e0:1c:5a:bf:3c:10:b1:4a:98:85:e5:fc:
a8:7c:54:d0:53:cd:15:51:3b:10:97:f6:97:51:ce:
51:11:a1:8f:84:32:b7:b7:8c:be:72:90:8c:66:f2:
cd:7a:0a:20:20:14:af:89:7d:e9:56:de:e8:88:61:
cb:0c:bc:6a:91:59:06:c9:f3:77:65:c0:29:89:54:
89:ff:8b:0f:cf:74:37:26:66:1f:e6:81:62:1f:29:
b9:ba:72:e9:6e:b0:ff:5b:99:87:9e:1e:b3:c4:a0:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:B4:94:42:32:DF:A1:DE:9A:19:0A:B4:35:35:3C:06:A8:EA:AE
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f3:20:06:c8:6f:d6:d3:d0:55:78:94:56:8a:76:61:0f:71:
54:67:94:f3:28:67:ee:e8:ce:71:49:a0:18:ce:19:00:3e:77:
9b:a2:9e:6a:1c:c4:5d:af:88:e8:69:99:6f:be:ef:b9:74:6d:
56:ba:9c:c2:34:92:35:18:0b:76:d1:75:d8:c0:ef:0d:e3:d1:
53:67:ad:df:01:24:36:be:e3:2d:5a:cf:30:40:ca:46:7f:87:
de:f5:54:dc:16:1b:48:f2:31:9f:6d:18:86:c3:7c:8d:de:89:
a5:62:f5:a4:c2:84:0f:3a:96:7b:dd:0b:dc:16:03:f6:b0:f6:
56:06:70:6f:6f:14:c5:01:02:e3:41:8a:3d:d7:a0:9a:5f:07:
c6:bf:df:5b:0f:62:14:12:e9:2c:9e:25:47:f9:8c:eb:3a:11:
f2:05:52:58:7c:6d:12:b3:e3:5f:58:7a:33:05:9d:84:6b:ff:
a6:12:a6:29:38:f8:c5:b8:e4:ea:2b:fa:7e:da:bb:35:24:b4:
70:cd:cc:83:93:82:f3:83:26:ff:91:a6:02:d8:2b:1b:87:cb:
f0:80:90:c4:04:33:b4:4a:dc:09:6d:b2:f1:85:6d:74:a9:ee:
5c:b8:3b:b3:cc:8a:3d:27:eb:f8:58:69:12:c8:ee:f7:00:f3:
ca:ff:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:29:05 2026 by rpki-client