Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: jYaRxAqHYBmyHYdbgc4gGO+ker6AafotlrLIiQcsIFQ=
Subject key identifier: EF:90:D1:CF:F5:D4:AE:B8:BA:2B:23:C4:52:60:BD:62:B3:C9:BA:52
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 01A08E3257EC51F52D54A71F65A97BB91FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 19DC
Signing time: Fri 11 Sep 2026 02:00:58 +0000
Manifest this update: Fri 11 Sep 2026 02:00:58 +0000
Manifest next update: Sat 12 Sep 2026 02:00:58 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: Zz3iGwFL8kJARvbHfYqwyYEwMfS1PXheU2oUa6Vj6uA=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:57:ec:51:f5:2d:54:a7:1f:65:a9:7b:b9:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Sep 11 02:00:58 2026 GMT
Not After : Sep 12 02:00:58 2026 GMT
Subject: CN=ef90d1cff5d4aeb8ba2b23c45260bd62b3c9ba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:65:51:52:d7:a3:8a:93:af:66:64:8e:c0:
cd:5d:16:c5:ae:cd:5d:6d:51:d0:ce:00:31:ac:f3:
2e:dc:74:6b:17:00:53:3c:9f:2f:8a:d2:2b:aa:0c:
2e:94:0a:9a:e0:c6:4e:22:b4:39:63:ac:48:21:e4:
f6:5d:bf:dd:98:6f:a4:82:80:17:91:2f:a8:88:93:
e2:75:5c:cb:09:f1:58:88:6b:fe:60:68:64:d9:4a:
c7:fe:1f:28:15:76:34:a6:4e:15:68:13:ab:3a:71:
8d:82:b2:09:f5:b2:45:ec:36:6a:51:fb:06:b1:df:
1e:c9:3e:f7:47:61:2c:a2:99:0b:11:ab:0c:67:fa:
08:52:ca:1c:b4:9e:b7:69:4e:6b:0b:a8:a7:54:38:
36:34:3c:31:a6:cb:8d:1d:8b:42:be:95:29:b4:ae:
e3:4c:35:8e:62:6f:0b:f2:7b:18:aa:00:91:70:93:
78:f0:45:90:2b:d2:4b:cb:b3:a3:27:28:30:6d:61:
c5:34:5c:b3:77:20:54:fb:f1:ef:eb:46:b1:13:39:
a2:33:8b:6a:80:b3:32:f0:f3:90:42:65:42:a5:e6:
44:7b:70:5f:bf:08:e8:b4:1c:1b:aa:e1:de:14:b9:
87:13:fd:ab:e1:3b:9c:7d:b2:44:c7:7e:1e:c0:bd:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:90:D1:CF:F5:D4:AE:B8:BA:2B:23:C4:52:60:BD:62:B3:C9:BA:52
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:44:e6:4f:b4:f7:c8:03:07:fb:fe:ce:a7:5a:29:7f:c7:8e:
9d:59:64:87:bd:7e:03:53:fa:47:78:11:2b:22:82:5f:00:a4:
45:cb:23:0f:0e:9d:7d:d5:e1:72:f7:4d:ff:b5:c0:e9:81:32:
ba:7b:db:68:4e:1b:1a:2b:4f:1b:a5:05:b6:f9:91:5b:46:00:
a2:3e:b9:fe:04:e8:de:b4:25:9e:04:04:c5:f4:6d:b7:3a:02:
1b:df:9a:ff:d3:88:cc:31:d0:15:ce:6d:43:22:85:b9:07:bc:
c6:28:ee:ef:8a:0b:91:0c:e3:1f:b8:a2:2e:4a:2f:12:1e:88:
62:07:a2:c2:ed:e0:11:83:97:c4:d8:02:46:d3:37:7f:a3:1b:
ac:a2:49:78:84:8d:50:28:2c:7f:77:3d:ef:47:cb:dc:d9:61:
47:46:04:a5:7e:45:9c:9f:50:3a:33:81:ef:47:3d:d4:0d:52:
a5:a5:07:92:27:ce:a3:1d:d6:4c:75:31:97:67:84:dd:44:a4:
bc:5b:63:6f:65:6e:3e:17:b2:e4:3c:c9:e3:e6:48:d3:b1:1b:
8d:84:53:f2:5e:f5:f8:6e:ae:49:56:aa:c9:ea:15:ed:0d:90:
a7:3f:30:70:02:7f:b8:a9:1d:a1:6a:d4:df:a9:1f:2b:cf:c9:
6d:58:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:39:34 2026 by rpki-client