Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: SHyp5fkiTPNRXoOqLrsl6wtPdYQaixEaxPdD5bEWB48=
Subject key identifier: 79:CE:B3:CD:5A:77:D1:5B:45:7C:9C:56:0B:43:2C:5E:F6:51:33:B1
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019EB8EA506CF97B5FAC3527D5D3ABF3D70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 18E9
Signing time: Thu 11 Jun 2026 23:00:24 +0000
Manifest this update: Thu 11 Jun 2026 23:00:24 +0000
Manifest next update: Fri 12 Jun 2026 23:00:24 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: hvpx50FwbwO+A70RZzwzPVl3aNzVho4Us+Bndhbgdww=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:50:6c:f9:7b:5f:ac:35:27:d5:d3:ab:f3:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Jun 11 23:00:24 2026 GMT
Not After : Jun 12 23:00:24 2026 GMT
Subject: CN=79ceb3cd5a77d15b457c9c560b432c5ef65133b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:71:5a:6c:2c:6f:ba:3b:4b:5c:8c:e5:2f:
d7:20:1f:50:94:57:d8:ce:10:ea:56:e5:6a:8d:7d:
f7:7a:82:19:5d:fd:96:1d:0d:55:ea:76:e2:b6:01:
08:c1:ec:ae:d3:a8:59:24:1d:ab:98:96:9a:e0:51:
20:18:63:66:a0:82:47:7b:9b:40:54:0a:66:6c:6c:
b6:33:fc:c6:b2:da:c0:1d:01:2c:59:a8:e6:0a:08:
bb:db:b2:3d:cf:02:ca:01:50:03:cc:1e:c4:2f:37:
f2:bf:b6:be:af:ae:89:6a:bc:35:ff:75:1d:3e:69:
63:31:a2:3a:fa:7a:f1:44:1a:96:98:e2:35:98:88:
7e:ad:00:7f:10:62:2d:c8:0c:5a:2b:ad:e9:ad:55:
9e:32:58:be:99:de:8d:a7:6f:ff:55:93:58:85:4a:
56:1c:35:d6:5c:27:1f:00:71:19:0f:e9:ea:67:dc:
74:59:34:5f:b4:62:3c:1b:cc:82:24:b0:61:91:07:
dc:7e:97:1c:06:47:90:89:1a:e3:fe:0d:c6:d7:77:
07:3e:87:b4:f5:db:17:0a:ec:47:26:9b:96:19:3e:
f8:c4:55:50:16:b7:44:d9:ef:35:b4:d4:5b:76:86:
c8:53:9f:e3:1d:9a:8b:0e:b4:f1:cd:65:ed:fc:42:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CE:B3:CD:5A:77:D1:5B:45:7C:9C:56:0B:43:2C:5E:F6:51:33:B1
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:98:12:bf:35:41:34:4c:5a:61:36:e5:3c:d1:ff:07:fc:c6:
6e:e1:60:8a:66:2c:44:07:5d:91:a1:33:cb:11:32:8f:11:7d:
53:d6:78:1a:af:c1:1d:9e:a3:91:b9:11:21:84:fa:1f:5c:93:
99:2e:1b:b9:63:7d:52:38:8b:cc:b2:72:9b:f9:db:30:a4:a0:
7e:72:59:3b:8c:7c:3c:d3:20:6e:be:4c:d7:c5:1a:4c:d2:fd:
08:e5:aa:68:0b:c4:e6:b3:e3:a5:a8:98:0f:8f:3d:3e:7f:85:
70:58:e8:bd:8e:06:d1:9b:5a:77:45:75:b7:b8:ae:fc:13:36:
82:8a:a4:4b:b9:d6:7b:6a:b5:97:53:f3:92:3e:ea:9a:03:7e:
4c:ca:49:b6:0f:72:23:3b:9a:14:79:0e:e7:ff:26:5f:68:27:
d5:6b:c4:f1:5b:ea:7f:f8:b0:8e:c7:11:8a:03:9d:22:6e:5b:
41:69:84:fb:7b:f1:15:9d:e0:2b:08:0e:2d:1b:4c:0c:2b:61:
5b:6f:db:46:b0:96:92:73:b8:47:21:03:56:22:e0:4e:88:31:
a0:de:bf:5f:87:4c:b8:26:27:34:9b:bf:46:76:6b:bc:c3:a8:
6b:f4:19:64:9e:56:75:58:a0:df:7a:89:c3:5c:25:ff:15:12:
89:80:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:41 2026 by rpki-client