Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: gwT6jUAwRR4uEmuA5GVQz8AKU6H29Q0X8DlbztOd+c0=
Subject key identifier: 8F:AB:88:A7:96:FF:9D:EC:B4:FE:76:88:FE:19:51:72:8D:14:E7:84
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019D3A8A7231528C749C847AD65D27A3FCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 17:00:44 +0000
Manifest this update: Sun 29 Mar 2026 17:00:44 +0000
Manifest next update: Mon 30 Mar 2026 17:00:44 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: 684n9QQB8Vm6nbFifWUqueo47faoNZBVMhy9rdpMJ4Y=)
2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:72:31:52:8c:74:9c:84:7a:d6:5d:27:a3:fc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Mar 29 17:00:44 2026 GMT
Not After : Mar 30 17:00:44 2026 GMT
Subject: CN=8fab88a796ff9decb4fe7688fe1951728d14e784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:0d:db:c3:ad:c0:ba:ac:00:f7:3a:c2:f0:
10:80:90:ad:a5:f5:88:27:85:16:2f:d2:27:30:ef:
74:c8:68:83:28:4b:a9:e8:bd:7d:31:11:a9:a2:28:
e1:6a:f8:76:e3:7d:df:5a:c6:36:8a:53:01:db:66:
7e:f4:76:a1:ac:39:6b:05:72:40:be:e9:0c:fc:24:
b9:0d:69:d0:ae:05:09:72:33:53:ed:12:25:99:80:
f6:69:fd:ba:41:db:fa:d5:bb:38:f4:c9:66:28:75:
b1:ab:1c:97:e4:d5:41:ab:a7:b3:c2:31:e9:de:dc:
58:b3:91:8f:1e:99:34:66:9a:0f:9c:f6:10:b8:e8:
ce:9d:a1:45:3c:d0:e0:07:e2:ce:4b:e8:d6:9c:7a:
0a:c5:38:db:2e:54:de:5f:f6:d5:99:d1:96:09:b5:
b2:1a:9e:dd:8e:4d:c0:ce:3a:2e:67:ce:d7:54:55:
db:58:5d:90:8a:88:6a:2f:b8:a7:d0:26:97:09:6f:
e7:1b:d2:74:bc:d2:04:1e:4d:6c:0a:8a:b2:ce:a5:
14:06:4c:55:43:a1:c3:17:3f:b7:eb:57:62:b1:9d:
de:5d:1e:06:27:6e:1f:b2:9a:dd:d4:f4:83:9f:e5:
9e:78:8e:b9:33:32:f7:49:11:c0:de:13:08:c9:2c:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:88:A7:96:FF:9D:EC:B4:FE:76:88:FE:19:51:72:8D:14:E7:84
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:97:5f:00:7b:f2:3e:c0:b3:67:0d:de:8a:66:1d:e9:e1:c6:
4c:19:49:91:97:19:dc:a2:fc:ea:5e:d9:21:1b:a1:2e:4c:70:
d7:e9:6b:c1:d2:a5:f3:60:ec:99:be:ed:b1:f3:68:08:49:ae:
0f:ba:02:fb:da:fb:c5:ed:87:34:d5:e1:db:80:d8:fd:b4:85:
a5:59:85:df:07:3a:1a:72:cf:82:fb:e4:f6:4d:f0:ea:c6:90:
76:1a:fd:12:ee:5e:a6:59:05:0c:be:8f:2b:86:1d:4f:82:f0:
96:30:14:32:44:58:72:e4:45:37:5e:4f:75:8f:88:0a:03:a4:
50:15:95:f9:f4:e2:ae:74:b1:84:8c:57:e7:e7:2e:7e:b7:c8:
5c:70:20:ed:6f:53:88:b4:de:1c:61:b2:45:4b:9c:f1:3e:39:
c7:d2:33:1d:07:80:25:9b:d0:d7:10:66:1d:c8:af:f7:e2:67:
3c:00:9e:c9:5e:1f:a6:7b:47:ca:58:f3:02:d7:16:66:dd:2d:
b9:73:93:3a:ef:03:0e:b3:14:60:f5:07:aa:a0:bb:9b:3f:b1:
83:36:fb:ae:24:94:2e:0e:f2:ff:3d:ac:a0:6f:03:cd:98:77:
05:aa:64:14:72:63:d8:89:07:d7:53:93:4f:95:9d:0a:8b:b8:
3f:bb:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:16 2026 by rpki-client