Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: FpXSagLCpqFeAkFHcc7hhtVnTRxTmOhddVSRGQsLdyk=
Subject key identifier: 31:2C:05:0F:76:9D:31:89:DF:2E:2F:72:37:1B:BA:F4:AC:24:77:DE
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 01A17ADF9CC5C3E32CF80B15B47041423784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 01:00:37 +0000
Manifest this update: Tue 27 Oct 2026 01:00:37 +0000
Manifest next update: Wed 28 Oct 2026 01:00:37 +0000
Files and hashes: 1: 30ysbftw_D4n6jWsjQTM0UTzylo.asa (hash: 6Se9XkdxHIZE7HtdPW3EYh1bEmfcbzom2szFR4ZRIdU=)
2: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: nvZDjw3KDJenByJKqc2N6OfrlDH51yeFBjCqklXfcXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:9c:c5:c3:e3:2c:f8:0b:15:b4:70:41:42:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Oct 27 01:00:37 2026 GMT
Not After : Oct 28 01:00:37 2026 GMT
Subject: CN=312c050f769d3189df2e2f72371bbaf4ac2477de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:e1:95:ee:3c:2f:7a:88:85:5f:99:96:ba:
96:00:7a:94:95:3a:3e:1a:1d:79:f7:f1:a9:19:f8:
32:09:be:39:e4:47:7d:75:de:94:c0:38:fe:07:d6:
f1:61:51:68:53:b1:b3:7f:96:d7:63:e8:0b:41:ae:
83:c0:95:b0:91:2e:87:1c:8d:77:ba:28:99:1f:99:
5f:cb:6b:d9:f2:65:16:f3:a0:93:d7:54:71:3c:6b:
74:18:9d:fd:b4:12:ec:77:80:a7:0f:56:6a:0f:51:
a2:76:b5:49:85:ad:5e:c6:2d:71:5b:85:6a:f3:99:
f5:e2:15:2b:52:56:58:c0:db:da:9d:f9:f6:af:31:
4c:c4:65:c4:11:a7:3f:9f:33:25:ca:4e:8f:f6:38:
a4:5e:d4:e8:f3:cf:2b:49:90:d1:51:ac:46:9b:69:
a0:66:7a:22:5e:01:90:1d:9a:c2:2a:e7:9a:87:95:
29:bb:9c:7e:3c:fc:61:eb:b7:1d:80:03:ba:54:7c:
a9:e7:93:f3:02:e0:c6:45:51:b9:de:5b:00:f5:96:
f6:b9:df:4d:a8:cf:5f:a0:7c:75:f4:94:81:06:64:
88:a2:bb:93:a4:c7:d0:64:e4:56:5b:6c:f4:93:84:
12:a5:0c:2d:f5:1d:96:89:0e:84:27:71:ba:d1:12:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2C:05:0F:76:9D:31:89:DF:2E:2F:72:37:1B:BA:F4:AC:24:77:DE
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:16:20:77:2f:ea:32:00:1f:56:c5:4c:e2:cc:65:d8:11:5e:
6d:f4:ef:79:74:db:a7:82:03:04:0c:17:97:f0:0e:93:b1:1b:
d3:02:51:05:86:86:ad:00:08:48:b8:2a:f2:a0:72:12:4f:8d:
db:04:96:63:20:40:56:0f:39:f6:b5:e9:cd:1a:d5:ad:cd:5c:
04:76:ba:43:76:d8:ef:f8:cc:b8:8f:6b:87:e9:6a:bb:56:e7:
7b:c3:92:7f:c3:59:ed:01:14:c6:80:c7:77:ab:95:fb:86:02:
78:c0:cb:c0:6a:c4:60:83:7f:f4:ec:24:3b:62:ac:fc:2e:82:
0a:95:19:f4:08:67:ff:c9:f9:59:3a:21:6c:b1:54:8c:70:f5:
90:6e:93:0f:f1:55:dd:70:5d:04:04:2e:ec:c2:e4:d3:14:dd:
c0:5a:b5:f0:4d:a5:17:a0:fe:fc:26:84:72:9f:7c:b5:52:dd:
4c:b0:bf:08:a4:20:af:42:f3:07:5d:f8:9c:7b:aa:9e:13:0d:
39:fe:0e:ef:0a:94:6b:6b:22:83:3e:60:89:b7:b5:72:48:86:
ad:26:40:8c:2d:c2:f6:5a:2f:d2:ca:1b:cc:87:83:7a:9c:65:
de:09:16:04:54:12:bb:41:67:de:6a:90:b4:c7:08:c4:57:3d:
9f:c9:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:39 2026 by rpki-client