Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: sdXUJqci4lRvqtR7F9e6Ud7Ij6aS00Sq7Ek1ohnr3EI=
Subject key identifier: 52:12:D4:B7:5A:BC:FF:D1:82:0E:3D:1F:2F:1D:6A:06:AB:0C:A7:86
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 01A114F3D429D5419CA7ACD51599788FFE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1A8D
Signing time: Wed 07 Oct 2026 06:01:26 +0000
Manifest this update: Wed 07 Oct 2026 06:01:26 +0000
Manifest next update: Thu 08 Oct 2026 06:01:26 +0000
Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: jLH4n2ZuCq3446hA3w6ueIS68PZE4D8MmPvb6YrDA+0=)
2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:f3:d4:29:d5:41:9c:a7:ac:d5:15:99:78:8f:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Oct 7 06:01:26 2026 GMT
Not After : Oct 8 06:01:26 2026 GMT
Subject: CN=5212d4b75abcffd1820e3d1f2f1d6a06ab0ca786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:bf:3f:72:3d:e4:c6:94:8d:a9:9a:46:d6:
3b:58:63:d8:4c:ac:33:81:9a:bd:65:fe:9d:59:a3:
ae:29:6e:5c:87:d0:cc:66:bf:a3:f8:05:c7:66:04:
68:9f:16:12:2f:69:61:45:7e:10:73:f3:7f:81:aa:
1c:16:dd:40:c7:30:8c:36:4d:3c:86:0d:cc:98:e9:
a0:56:d8:0a:6c:2f:16:4a:99:f8:c4:bb:41:89:f0:
53:4e:12:c6:6b:6c:28:01:d7:ab:b6:79:e1:07:00:
c4:08:2f:4f:13:18:6b:34:7f:bb:55:cf:2b:ce:ec:
51:01:8f:dc:43:7f:44:15:ee:eb:ac:7c:4a:9b:c3:
19:a7:c1:ff:80:3c:eb:2e:58:78:7d:f3:b3:4e:71:
a7:72:05:de:34:4b:00:39:ad:21:7e:ef:7e:9e:71:
fc:d6:a3:2f:35:a9:77:01:6f:1a:e1:44:b6:ac:3e:
87:b0:31:c7:0a:4b:4a:29:a6:a0:5c:5c:47:a3:b0:
83:ed:32:8f:20:31:13:4b:a8:6e:fc:f1:77:e4:5b:
d0:7c:90:f0:d6:02:32:ad:b1:41:0e:20:5d:36:d5:
ba:b3:31:09:27:ae:ee:a7:10:d7:5a:bc:73:f0:36:
b7:ba:9c:fa:21:27:44:b1:36:9b:b5:ec:35:40:34:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:12:D4:B7:5A:BC:FF:D1:82:0E:3D:1F:2F:1D:6A:06:AB:0C:A7:86
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a4:cf:cc:63:95:89:4f:97:c3:26:c1:1e:af:9a:17:ed:19:
f6:14:1c:17:e1:2e:18:f2:5e:98:1c:70:4d:18:1c:4c:5c:c2:
a4:9c:49:4e:8c:8c:0f:23:b7:29:3c:33:e8:21:40:aa:32:c7:
c6:6f:c4:28:bf:04:6e:85:2e:66:5e:d6:c2:15:45:4d:02:6d:
71:71:5c:21:12:bd:d7:ad:f4:9b:6a:9b:8e:43:68:fc:f5:15:
48:50:78:73:3c:da:ed:23:df:f9:0e:5a:17:66:69:48:6e:7d:
eb:b2:ad:80:a6:bc:fa:0b:50:c6:16:b3:32:c0:82:40:b6:83:
c9:75:ec:a7:c5:99:38:aa:18:00:b7:9b:bf:46:fd:39:ea:ce:
e3:d5:74:14:06:0f:af:e3:92:e7:53:c5:f2:0f:dc:1d:84:e2:
e1:aa:94:42:11:6e:59:8f:f8:b0:87:66:f3:25:3a:4e:65:3b:
14:1e:14:a4:2a:ab:cf:59:51:99:a0:22:8f:ef:18:3d:79:e1:
1a:fc:61:49:5a:50:05:ce:77:62:ff:0a:8c:3e:29:5b:52:bd:
44:35:49:a1:c3:5a:22:3a:b0:00:fc:30:7a:bb:e4:77:3d:2b:
53:28:0f:cd:bb:14:96:5b:3d:17:d9:20:ac:ca:f1:a0:2f:a2:
a5:ed:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:14:52 2026 by rpki-client