Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: PlDN3tMgu4orykoT/vVUHc/sXCgInf3++pEpbtRh4Lk=
Subject key identifier: 07:BB:D5:8B:8C:52:1D:FA:33:ED:E6:2C:88:4C:27:C0:A5:6A:68:FB
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 019D38663BB2474262DB6B8928582FE69E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 0BE7
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: ReUJvhmpFx0y+05dTGSW7L712ACNSA/T2jRMkm/1bQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3b:b2:47:42:62:db:6b:89:28:58:2f:e6:9e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=07bbd58b8c521dfa33ede62c884c27c0a56a68fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:b8:e4:0c:c8:08:ca:ae:41:18:91:a0:34:
11:a3:b2:e9:23:ad:c8:7f:0f:e8:06:4b:f7:e7:68:
07:25:32:22:bc:f6:6f:a0:3d:6e:f2:28:d4:a5:55:
bb:36:50:d4:7b:39:e6:f6:aa:c5:6e:e4:5e:c0:fc:
81:6a:73:8b:16:65:67:4f:83:b5:4d:d7:b8:56:45:
2c:6d:9f:fc:3f:f1:f6:bf:3a:c8:62:f6:70:af:40:
b4:60:7e:99:a5:c0:ff:55:98:9a:f3:53:5f:e7:f7:
3f:38:26:19:c8:d0:e2:aa:fc:ad:5a:f1:04:09:2c:
52:05:15:c3:67:ba:67:e9:7f:2a:be:7f:55:fa:62:
d4:7e:43:b2:8f:cb:25:2b:20:89:0f:83:c7:7c:95:
0b:89:34:f7:f9:69:8c:ea:3f:07:b8:ca:64:03:53:
c4:03:47:07:80:d8:93:3b:8f:31:8f:d5:0a:82:52:
3a:eb:7d:69:47:d6:54:20:cd:1f:a8:01:85:d8:8c:
27:4c:b0:29:b4:a5:99:d2:f9:0e:6f:e5:97:8c:47:
f8:31:62:52:c2:62:e5:bd:d3:ce:c1:7c:cc:17:c5:
91:3f:90:0e:85:5a:4d:48:3d:f1:2e:d9:d2:5d:3e:
32:a3:bd:24:1a:92:89:42:78:e4:79:9c:69:cc:62:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BB:D5:8B:8C:52:1D:FA:33:ED:E6:2C:88:4C:27:C0:A5:6A:68:FB
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:29:d8:c7:29:b3:a5:4d:d7:60:27:69:84:ee:36:f4:99:df:
5c:65:9b:e1:9f:6e:b4:94:bc:19:85:69:f7:f6:c9:55:17:dd:
ed:d7:a3:e8:b1:a9:29:ce:6e:b6:2b:47:1e:0a:ba:9f:53:90:
e3:47:47:4e:01:48:eb:13:fc:1b:8a:a4:a3:cf:cb:c2:7f:d5:
9a:1f:34:45:52:94:f0:97:4f:ba:28:fc:1d:bc:df:26:c5:2c:
4d:c1:b6:08:86:7d:62:1a:e0:59:fc:18:5f:c5:ba:63:a1:ff:
8c:fb:30:84:24:2a:f0:82:85:75:a7:e1:8e:63:14:7f:e1:b4:
f0:b8:d0:b5:76:47:91:c5:b0:57:07:f8:7e:91:9d:d4:72:de:
72:d9:72:e9:38:21:df:af:69:cd:8b:c1:04:f5:82:ba:b1:e6:
81:1c:85:1b:bf:1c:98:66:85:f4:0a:72:45:6a:ff:40:46:0d:
1b:a5:1d:0a:cd:c1:25:2e:a7:63:70:ee:eb:3f:a9:46:9f:e1:
4c:87:d7:4a:dd:b5:49:ba:b7:97:6a:46:fe:b0:08:f1:db:55:
b7:87:bd:a9:e0:32:0b:6b:44:23:00:67:03:ff:d1:80:84:56:
97:d3:7b:b6:24:a6:13:93:16:70:97:50:cf:38:c8:0e:88:6d:
a0:de:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:57 2026 by rpki-client