Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: UVTwGr6knOQ+VCiO/NnxFUXYYWExoMfa+/Xx9gPn/Hg=
Subject key identifier: 8A:9B:F5:28:BB:93:A7:E1:50:8D:72:D8:C7:7C:C1:41:AC:06:DD:4A
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01A0201E5A34F13A4E9B5156DA75F3963A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0C9D
Signing time: Thu 20 Aug 2026 17:00:55 +0000
Manifest this update: Thu 20 Aug 2026 17:00:55 +0000
Manifest next update: Fri 21 Aug 2026 17:00:55 +0000
Files and hashes: 1: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (hash: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: lsV1VLwhFaZrmImFL0NmXhK5VABIQ7Mh1nHYodRaKyA=)
3: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (hash: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:5a:34:f1:3a:4e:9b:51:56:da:75:f3:96:3a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Aug 20 17:00:55 2026 GMT
Not After : Aug 21 17:00:55 2026 GMT
Subject: CN=8a9bf528bb93a7e1508d72d8c77cc141ac06dd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:8e:10:41:b6:3b:f0:08:4e:c3:14:cb:a7:
19:34:aa:cb:96:94:11:51:39:7b:2e:da:0e:97:04:
e0:bd:b1:f8:09:3c:c0:54:56:fd:28:4c:dc:04:cb:
db:98:09:2f:40:c0:8d:11:15:a0:53:8a:c0:99:88:
fe:e1:bc:cf:4e:73:e9:a8:ac:73:73:2e:38:a5:17:
ae:92:e2:02:b1:97:72:ee:de:09:ef:b3:b3:c3:77:
43:ad:1f:98:94:7c:7f:4f:77:09:a4:ca:78:0a:3b:
7c:c2:7d:76:2e:e5:ff:9d:84:99:14:e0:71:3c:4b:
c7:a5:68:96:2f:08:0b:e8:10:52:c8:29:2d:00:c8:
05:63:68:83:2d:33:c4:52:18:7a:5d:9c:7a:7f:80:
8f:b8:d9:f2:b3:6d:f5:02:fc:44:91:bc:f0:af:18:
d5:43:4b:86:96:d2:bf:04:02:17:ac:d9:db:ec:80:
49:bf:6e:5c:c8:a4:db:d4:e3:aa:27:9d:01:3b:f1:
2e:12:e5:7f:d6:39:ae:d2:a3:c6:ee:e8:0b:79:6f:
2c:a9:2e:de:1f:50:ae:09:13:f1:6d:11:9e:e0:8d:
ed:0a:6f:f3:49:05:c4:4c:be:4b:8d:c8:3b:6d:f2:
13:28:9c:7f:49:76:23:92:96:72:a8:36:b1:69:9c:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:F5:28:BB:93:A7:E1:50:8D:72:D8:C7:7C:C1:41:AC:06:DD:4A
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:20:fb:30:7c:af:a7:55:bd:4d:2e:0b:2a:7c:c1:3c:1f:7a:
22:22:45:88:d4:40:9e:d3:74:47:91:e2:35:5a:1c:15:88:ff:
ec:7b:43:18:e2:58:a9:ee:66:6e:a2:7f:ad:44:0d:c0:44:78:
e5:ef:e9:7c:49:7e:e7:e5:ca:27:b7:b1:06:b8:26:28:31:c3:
eb:95:bd:f8:4c:3a:f1:04:29:27:cd:aa:97:33:62:50:6f:b9:
db:49:58:cf:1c:54:3d:47:58:25:95:0d:5a:b9:dc:84:40:8c:
6d:7c:29:30:25:19:1f:f6:f0:d3:2f:a6:c5:37:dc:92:0d:88:
e2:af:87:42:09:aa:1f:9a:e2:67:28:95:06:e5:95:21:d4:25:
27:c2:ec:aa:71:f0:83:a7:2f:bd:95:7e:e3:91:b9:e4:2a:ba:
97:93:eb:b7:bf:8b:14:e3:6c:af:a2:7c:97:bc:12:e5:87:f1:
1d:5c:a2:3f:c6:ea:10:ae:d4:fe:5b:2c:95:fc:52:a9:f3:f7:
c3:fa:6f:21:25:16:05:61:7b:1f:6e:29:b4:84:11:c7:20:9f:
f8:d5:cf:45:d8:4b:21:89:07:a3:92:56:8d:4d:46:61:72:52:
ba:37:1b:4c:e2:27:af:82:33:b4:74:f3:3d:74:83:7e:c9:60:
2d:2f:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:47 2026 by rpki-client