Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: hQM4PKCKhnqGlebF1It0T2UAxFJ3cJUq6qqmJ7eXhGk=
Subject key identifier: F6:E8:59:96:E9:2F:2A:23:E7:43:D3:71:69:C3:79:7A:6D:71:0F:87
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 01A192E8426817CDD2198A2650986F5F1CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 1A63
Signing time: Sat 31 Oct 2026 17:00:57 +0000
Manifest this update: Sat 31 Oct 2026 17:00:57 +0000
Manifest next update: Sun 01 Nov 2026 17:00:57 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: 5xMzvsiWc/IKJ1VU74nSoEa0mCRK7CV38Mkadz42G00=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:42:68:17:cd:d2:19:8a:26:50:98:6f:5f:1c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Oct 31 17:00:57 2026 GMT
Not After : Nov 1 17:00:57 2026 GMT
Subject: CN=f6e85996e92f2a23e743d37169c3797a6d710f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:97:74:8b:36:9f:bf:cd:62:dd:f5:fa:82:
0e:e3:ae:09:43:d5:30:cd:1f:85:88:6c:bc:45:92:
1b:99:8b:2f:ad:78:a9:02:ec:d7:3b:0a:bf:86:d3:
48:59:a2:33:49:ff:40:43:02:9a:fa:64:63:da:3e:
a2:fb:e3:07:a8:6b:ca:88:57:e4:14:92:c8:a2:de:
73:75:d1:d9:a0:a8:c6:25:e1:85:0f:0b:4c:1a:5d:
10:05:da:6f:34:86:cf:75:66:ba:cd:68:15:7a:75:
3b:50:e5:bd:61:73:ad:f0:53:8a:ab:26:34:19:8a:
a8:55:6b:2e:35:0e:6b:c2:31:6b:3a:fd:77:c8:d6:
95:1b:a2:3d:ac:94:64:39:4b:9a:db:34:f2:74:9e:
fc:ca:cd:0e:7e:88:47:40:80:ac:8a:ea:f4:2d:dd:
18:38:8d:8a:58:f8:69:5f:80:79:7b:6e:9e:d3:d8:
3b:f7:9f:46:1a:34:6b:bc:3f:c5:97:1e:c3:8b:b4:
39:51:f2:76:11:56:bd:69:5c:df:f6:40:12:98:90:
03:b6:8f:66:8f:8f:6e:c6:d0:b3:40:22:58:12:ac:
7e:2c:2b:c8:b5:dd:67:62:7f:89:b3:c6:b3:73:47:
6c:06:7f:7e:c5:de:5c:b0:da:78:94:99:77:5f:57:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E8:59:96:E9:2F:2A:23:E7:43:D3:71:69:C3:79:7A:6D:71:0F:87
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:17:b4:34:9a:ea:19:b3:0c:03:2a:15:e0:7c:68:77:f2:a8:
fc:70:99:42:a5:8c:24:a9:3e:a0:da:91:57:68:da:c3:20:05:
2b:d0:58:d1:80:c2:c5:b7:b0:4c:7b:62:6b:bc:05:f6:fc:64:
02:f1:a0:93:86:d7:57:3c:24:4d:1d:10:b6:86:68:36:d4:1a:
c7:87:80:a9:c8:57:55:41:db:1e:76:73:2f:ea:0a:8e:76:b7:
10:74:cb:01:72:96:42:8c:04:14:0b:00:62:a5:6d:30:f5:0a:
6d:c1:69:2f:c6:f2:5d:e3:72:da:bd:04:97:19:18:80:26:79:
4a:44:60:79:b9:24:58:0e:dc:53:c6:c2:6c:51:f1:d7:79:14:
57:5c:08:ae:51:c5:c8:39:df:25:86:ee:47:84:0e:81:4b:9b:
dd:18:fc:11:d2:c5:da:03:96:b0:7d:d2:d9:62:6c:18:18:fe:
d8:f0:dd:e6:ab:d6:bf:3e:d8:46:36:e8:5e:ab:b7:60:da:60:
1b:51:4e:ca:1c:0e:38:de:32:15:c5:81:1d:99:5e:19:71:c8:
1e:7c:5a:85:cc:73:3f:f1:d6:ff:f0:0c:80:92:37:b1:f3:fb:
54:7d:19:8b:ec:d1:64:7d:64:7c:7c:91:df:2f:45:46:61:7b:
c1:fe:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:07:52 2026 by rpki-client