Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: jTNwAeg9T9Tp7VypZBsTm7sgucE7hR/tpe+KrUAv7zA=
Subject key identifier: DD:46:3D:9E:E1:1E:36:7A:7F:3A:A4:B6:AE:20:69:19:96:B0:3F:00
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019E4EB412476CF70D2E5F0D09472BF28BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0BAB
Signing time: Fri 22 May 2026 08:01:24 +0000
Manifest this update: Fri 22 May 2026 08:01:24 +0000
Manifest next update: Sat 23 May 2026 08:01:24 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: 4NOzh3xFbQFsi5f3+PDhKgkb7ackuNhQXQrn2FKvr2c=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:b4:12:47:6c:f7:0d:2e:5f:0d:09:47:2b:f2:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: May 22 08:01:24 2026 GMT
Not After : May 23 08:01:24 2026 GMT
Subject: CN=dd463d9ee11e367a7f3aa4b6ae20691996b03f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:5a:33:d4:50:cb:76:32:fd:54:4f:43:4e:
7e:fa:a2:b3:ed:0a:1c:d8:84:ac:21:5e:0a:fc:a1:
c9:98:97:b3:2c:de:5b:05:67:27:30:9f:05:48:0e:
c3:51:bd:8a:02:b5:51:a0:70:cf:98:f4:7a:a5:70:
4e:4d:9b:14:d4:10:38:5c:54:a6:ba:ef:d6:9f:81:
ba:68:e8:5b:2f:85:4b:8d:86:88:a7:c9:86:18:71:
b4:5a:e6:8e:2b:1c:54:09:2d:23:f3:c6:45:65:7e:
c1:77:30:c3:dd:25:3c:ce:ab:81:c7:ae:4c:67:dd:
d5:79:2e:ff:07:79:fc:d6:af:05:89:ee:e1:d3:d8:
2a:64:1e:09:02:a3:90:7a:53:18:b2:a4:d9:6c:fe:
60:10:c6:6f:9a:e6:7d:7c:77:91:82:3b:54:02:97:
54:9e:e0:f5:00:d8:c7:94:46:a4:b4:84:01:fb:c3:
3c:0f:7a:6c:12:40:2a:72:c0:1a:ae:a3:a0:5a:7e:
3e:37:8f:07:d5:f9:66:fd:9c:ed:84:8f:e5:60:e1:
1e:2f:62:b8:d6:7d:23:29:0d:7f:50:f1:a6:af:b5:
3e:c1:41:ec:08:41:11:ee:9f:4c:52:3c:66:b9:0d:
af:fa:d9:42:a8:e4:0a:29:66:7b:4d:14:f5:9f:81:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:46:3D:9E:E1:1E:36:7A:7F:3A:A4:B6:AE:20:69:19:96:B0:3F:00
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:88:c1:44:ad:8c:9e:5d:84:ed:61:bb:ef:0b:36:f8:03:6e:
c8:f5:f1:2a:91:da:ff:48:09:42:4e:ec:1b:70:d4:fd:a4:44:
30:ff:03:12:e2:b4:37:07:3b:23:13:f5:ef:df:03:71:e9:c8:
a2:42:15:55:88:e7:62:de:5e:ee:66:44:b1:80:9b:2b:3d:f0:
03:64:40:29:73:42:43:90:b5:5b:eb:65:de:ba:1a:2b:d1:7d:
54:42:ff:b1:b0:c5:49:dc:d4:d5:01:4f:e9:2c:a5:ed:73:4e:
db:66:1d:48:39:52:d0:1b:bf:60:ab:41:43:0a:af:43:ba:c6:
41:69:80:f2:a7:1a:94:07:5a:bb:65:43:fa:3a:bd:8e:34:0e:
51:70:54:f0:23:98:9c:e0:ce:ef:d7:f7:89:77:2f:e5:8c:67:
19:0c:d4:57:8d:50:8a:72:28:f1:7a:c9:20:82:15:c0:52:cc:
f0:65:8b:fd:d6:b5:2e:ec:8d:b3:e8:a7:b5:de:cb:20:8b:77:
fb:b2:6d:ef:35:0d:2b:40:81:9a:bb:1c:f0:15:9f:db:9c:e8:
6f:6e:6e:61:39:eb:a8:a1:b4:b0:60:e0:43:ab:86:22:84:8e:
c3:49:e7:b4:07:32:cf:e1:32:35:26:33:8f:c1:a3:42:8f:4f:
5c:af:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:03 2026 by rpki-client