Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: dw9Yyh0D7RIAPMhtXteH1qcxf4cC999KlWHb3HzkpFg=
Subject key identifier: 52:B2:AF:67:93:B1:5B:B6:76:DF:04:89:58:3E:53:55:4D:C1:09:30
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 01A0CE91B446C2DD65F3161033558E1A5EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 139A
Signing time: Wed 23 Sep 2026 14:00:50 +0000
Manifest this update: Wed 23 Sep 2026 14:00:50 +0000
Manifest next update: Thu 24 Sep 2026 14:00:50 +0000
Files and hashes: 1: GPFcG47nIYBiH_vSd-Zet9HInTY.asa (hash: HNMbYsk9UfUyN+47iHB5pyXq6stkZEZHOhwEC4uh0DQ=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: a/rNymRhyWdqk2rKhlyT5vOzRZi3QQy08ah/HZwO2dU=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:b4:46:c2:dd:65:f3:16:10:33:55:8e:1a:5e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Sep 23 14:00:50 2026 GMT
Not After : Sep 24 14:00:50 2026 GMT
Subject: CN=52b2af6793b15bb676df0489583e53554dc10930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:44:67:09:0f:9b:49:e6:79:8b:5e:46:d5:
8f:d5:8e:3c:90:4b:1d:70:22:5c:27:58:1f:aa:ed:
a8:f0:54:9a:32:07:41:8c:9a:d8:9e:c5:5c:f5:5c:
3c:d4:40:ab:c8:fb:66:2c:6c:4a:38:11:7f:f9:5c:
7e:64:d2:0d:a5:03:52:9d:b2:5c:d1:b2:d7:a0:6f:
13:15:b2:a0:56:6d:f7:05:cf:02:1f:54:c4:75:a1:
99:42:54:fb:10:74:af:21:f0:26:f2:40:f9:90:6d:
0e:31:33:01:57:dc:8a:29:40:19:85:49:6d:65:9b:
0c:66:75:67:4c:ca:c1:67:5a:82:27:3b:2a:18:89:
df:b2:84:be:04:1c:80:81:be:b3:de:a3:f9:7b:46:
62:3f:bc:37:dc:88:81:ff:a0:bc:f5:ad:8d:ad:49:
e4:4e:41:d2:19:04:4e:cb:16:9b:f7:3c:c0:1e:d4:
7d:71:14:60:a5:99:c7:22:de:1a:13:6c:3d:0a:c3:
17:bd:3e:94:44:b4:48:91:67:6a:33:e6:b8:07:6f:
cc:35:e4:55:53:22:96:9e:e7:de:9f:18:3f:cb:34:
ea:9b:52:d3:91:9c:48:d4:23:86:74:56:e5:c0:3d:
97:b2:87:1a:0e:3f:9c:61:bc:0a:44:59:27:6d:61:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:AF:67:93:B1:5B:B6:76:DF:04:89:58:3E:53:55:4D:C1:09:30
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6b:48:c0:3a:9c:99:8f:ee:57:49:29:eb:c3:ad:95:4b:c6:
86:ba:19:99:f6:42:c5:88:bc:1f:5c:e5:4b:39:05:af:57:3f:
09:54:65:29:d1:df:f1:6e:fd:c5:2b:ec:15:45:42:08:74:97:
63:69:b0:7c:21:b6:be:b1:57:ea:c3:a0:43:6d:de:ee:28:89:
e3:23:ff:51:7c:2d:1b:59:d8:ad:0b:a9:5d:b6:70:74:c2:45:
e5:a6:9c:92:d9:0f:3e:d1:fd:f5:4a:ab:11:49:71:a1:d0:a8:
11:cd:f7:e1:a8:77:c4:49:63:be:1c:ff:28:bd:a1:ba:63:86:
57:d2:64:0a:32:be:5d:2d:42:7e:76:33:2d:50:3e:6b:6f:56:
b8:08:46:9f:94:32:de:79:9a:b6:ee:9e:48:10:a4:1e:dc:2f:
bd:82:63:82:20:6c:60:d7:06:c8:cf:a3:59:c8:bb:91:fa:01:
10:b6:07:8b:b1:6d:44:ca:73:66:38:b2:c5:60:0a:31:48:fd:
25:38:54:ae:20:dd:57:53:c4:04:48:4a:8e:db:e9:e5:34:e4:
88:e2:0f:54:74:50:a3:30:25:d5:be:80:de:54:41:4c:91:d5:
f8:5f:4b:a7:ee:c8:c6:7d:1a:49:90:37:53:84:89:19:ac:29:
01:20:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:19:45 2026 by rpki-client