Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier: xMOB86cvvuhjQPomep2XioXZssmGAwyv8v5bM2kXMDQ=
Subject key identifier: 3D:E1:53:C2:EA:B7:D6:F3:42:0D:04:18:7F:11:C7:91:1E:57:EC:E6
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial: 019D29970A176F076966A35B1E6E3799F002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number: 0A97
Signing time: Thu 26 Mar 2026 10:00:57 +0000
Manifest this update: Thu 26 Mar 2026 10:00:57 +0000
Manifest next update: Fri 27 Mar 2026 10:00:57 +0000
Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: cs81OOwfEtrxLP0iezMNVEDQpIaJz7TUa5csJtabqAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0a:17:6f:07:69:66:a3:5b:1e:6e:37:99:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d26a5146996d220461081072c76396582fca84
Validity
Not Before: Mar 26 10:00:57 2026 GMT
Not After : Mar 27 10:00:57 2026 GMT
Subject: CN=3de153c2eab7d6f3420d04187f11c7911e57ece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:1b:ed:77:3c:cd:21:0e:39:be:0b:ba:d4:
61:e8:7b:97:ed:40:a5:59:d6:c5:8f:e8:97:f8:12:
fe:25:81:ef:d9:fe:23:fa:20:d0:20:fb:83:aa:70:
36:7e:b1:d8:6b:80:b0:39:73:f2:b5:67:82:d7:d5:
8c:c1:5b:eb:82:67:24:df:54:3d:52:d9:82:ee:f3:
aa:c4:99:74:15:6a:4f:c1:46:5a:19:07:9c:d0:50:
62:7b:aa:cc:19:d6:e5:26:6e:31:91:b1:d6:80:fb:
ef:67:4f:25:57:7a:16:90:7b:ef:9d:2b:9f:36:78:
8f:e0:2b:f2:0c:9a:0e:5e:d4:66:37:fc:23:a5:bd:
eb:c9:7a:4e:f7:8c:b3:06:6a:06:06:be:97:02:ab:
88:df:29:7e:e6:2d:8d:30:a9:cc:b3:d5:50:4b:93:
e4:9e:21:61:e6:51:e9:07:a8:7f:4f:cc:b0:b2:19:
9d:91:37:43:65:2c:86:93:ff:a6:59:2a:9f:86:0f:
fe:f0:6f:fd:cc:ad:2e:c7:7e:15:71:a5:5f:a7:40:
72:0e:4b:9d:7b:2f:30:61:5b:f0:d1:2c:22:30:86:
49:7c:af:7a:ef:91:e9:b1:ca:81:23:99:ed:d9:c7:
f7:44:c4:c8:1b:93:8d:95:78:30:56:0d:36:44:a2:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:53:C2:EA:B7:D6:F3:42:0D:04:18:7F:11:C7:91:1E:57:EC:E6
X509v3 Authority Key Identifier:
keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:58:a7:3e:c9:de:9d:96:be:d7:19:66:fb:6b:06:9d:e8:9e:
f4:14:e8:c8:e1:7c:1e:7e:1e:b3:c4:4a:0d:20:d2:c4:99:3d:
e2:c1:48:30:7b:b0:9f:9c:f2:41:ab:63:fb:19:9c:7f:24:e9:
00:da:fa:ba:89:ff:60:65:20:3a:5b:dd:85:db:6d:63:67:c2:
09:00:ce:17:0e:d5:0a:f6:b7:b5:6c:9e:03:ff:a7:66:80:62:
44:29:6e:0d:8e:81:dd:17:53:f5:14:42:9f:27:9b:49:ff:50:
e6:86:59:80:5e:3e:65:29:9f:06:35:9b:69:ae:c3:7f:26:3b:
93:27:39:75:cb:08:e0:b8:e2:5e:e5:83:8b:00:bf:74:ff:bd:
cf:15:49:e2:56:0c:a8:51:98:f7:eb:ed:f9:92:59:59:58:4f:
a5:d3:9a:5d:9f:74:15:39:f2:60:2b:90:4a:cc:20:09:36:bb:
ca:46:cf:86:4c:5e:73:45:c9:5a:57:20:e1:56:b9:59:76:89:
f6:69:3f:11:a5:30:5f:e1:1c:09:6d:3b:c4:ee:0e:9a:4b:91:
0c:1b:ce:5f:40:36:f2:3d:54:03:7a:20:d5:93:b3:0f:d7:d9:
11:8f:fb:29:ae:41:a7:59:17:1b:85:70:6c:ac:33:70:ff:6b:
09:9e:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:22 2026 by rpki-client