Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: jr46WCacEVr1PRjKK0aDD7rWilHDS0Z9lIiFLfLAIqU=
Subject key identifier: D7:BF:4C:1D:12:2B:2A:5F:69:6B:62:79:E6:99:BC:98:AA:AD:9B:EA
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01A11184C436ECDF7C539EA0276191505A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0D1A
Signing time: Tue 06 Oct 2026 14:01:15 +0000
Manifest this update: Tue 06 Oct 2026 14:01:15 +0000
Manifest next update: Wed 07 Oct 2026 14:01:15 +0000
Files and hashes: 1: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (hash: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: fV6IYuofeFoB/iYLaHMrFw4Dipd6Sa3dJ7JLXJqbUgU=)
3: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (hash: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:c4:36:ec:df:7c:53:9e:a0:27:61:91:50:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Oct 6 14:01:15 2026 GMT
Not After : Oct 7 14:01:15 2026 GMT
Subject: CN=d7bf4c1d122b2a5f696b6279e699bc98aaad9bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:9c:92:70:57:a0:54:8b:03:8f:81:9d:55:
de:9f:f0:b7:22:e1:e4:7f:ba:86:6f:bc:d3:6e:9e:
71:17:4a:f4:05:f8:f2:b9:8e:3e:ef:20:8c:1f:92:
6b:c7:e5:8b:53:d7:42:ef:50:cb:08:84:c3:a3:2d:
01:f4:0f:ad:b3:c5:d9:8d:9a:45:0a:f4:8f:97:be:
9b:f2:4e:6a:66:60:5f:ee:9a:fa:ff:56:25:d6:ac:
50:b1:01:27:7f:1c:15:87:b3:ea:b2:2e:38:de:20:
39:c4:78:03:77:1a:ca:07:24:5b:7e:09:3b:cb:8b:
9c:e5:34:52:5c:f3:cc:b8:88:e9:08:8e:68:d6:d3:
d7:07:5b:95:57:ee:90:85:85:15:0a:01:84:13:c3:
b1:e5:49:bc:fb:08:39:55:7b:c3:73:93:7e:ea:97:
b8:2a:46:45:00:1c:06:6a:a4:92:b6:56:76:47:13:
8d:6a:ae:b4:a2:a2:eb:4d:ee:35:0e:95:56:16:39:
ab:36:9f:e2:47:8a:ba:82:20:e8:05:27:10:72:37:
e7:95:80:e4:a1:76:89:c5:11:cf:84:ee:0a:04:11:
d3:31:8d:d9:4c:df:a9:3f:31:5f:fe:12:98:1b:8b:
29:11:18:68:d9:e9:92:17:0b:b8:e7:5d:ae:b4:7f:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:4C:1D:12:2B:2A:5F:69:6B:62:79:E6:99:BC:98:AA:AD:9B:EA
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:12:be:ad:b7:88:ef:28:35:86:3c:53:b7:c5:53:65:05:51:
2e:a7:87:09:33:1e:3e:2f:b7:cf:42:20:1c:f3:d2:74:a8:6b:
e2:c0:48:53:70:85:eb:6e:59:fc:3a:aa:3d:f9:1e:ec:9d:b6:
73:bb:f1:9e:ac:df:d4:29:02:d5:cd:11:19:12:20:97:0d:b4:
2e:a9:b4:ff:c4:ec:b7:d7:91:09:78:08:4b:f4:39:77:44:52:
46:e1:40:ab:29:ce:da:39:83:aa:79:45:26:7d:f6:2a:04:9e:
3a:a4:41:9a:f5:df:26:fa:df:37:21:09:52:44:16:d5:4e:92:
94:c6:04:3c:7c:18:12:73:41:5a:8f:17:5e:6c:5e:3b:6a:e6:
28:41:12:13:86:94:92:ef:62:0c:59:6e:6e:4a:d7:4e:e5:f7:
39:b3:07:27:cf:15:86:e9:dc:f7:af:5e:f7:d4:b1:28:2f:5e:
9e:45:48:01:cd:7a:cd:c9:a4:5b:93:b9:ae:4d:ad:b1:07:89:
c2:de:78:ba:ff:33:26:3e:ae:40:48:73:58:ba:c1:8c:cc:3c:
d4:cd:e6:2b:cd:2b:21:06:45:c4:3c:82:1a:27:87:2e:10:76:
76:47:c5:81:e9:6d:1a:bc:60:9c:ea:80:ef:fa:3b:46:53:77:
44:b0:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:04 2026 by rpki-client