Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: acGE9bOeVR/pkXpVhErK6PGVEAw8kPb3PV8hmxtoAfI=
Subject key identifier: 17:2A:9A:E1:CB:3D:E8:23:04:65:59:A1:48:C1:27:AE:A8:46:10:57
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019F386055DFD94E08402F79BADCEA97459B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0C24
Signing time: Mon 06 Jul 2026 17:01:05 +0000
Manifest this update: Mon 06 Jul 2026 17:01:05 +0000
Manifest next update: Tue 07 Jul 2026 17:01:05 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: FYVBVXYs9KatSRxW0ui0BGhB1Oilxu92TBPTon0IkQM=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:60:55:df:d9:4e:08:40:2f:79:ba:dc:ea:97:45:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jul 6 17:01:05 2026 GMT
Not After : Jul 7 17:01:05 2026 GMT
Subject: CN=172a9ae1cb3de823046559a148c127aea8461057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:43:95:86:b4:ca:11:44:f8:35:65:79:8d:
4c:a7:04:3d:f5:d9:59:df:7d:af:95:c1:26:86:09:
62:7d:66:0d:0d:7e:00:d0:3b:eb:91:78:52:a1:5b:
36:30:5b:4a:8a:e7:79:94:52:9f:2f:86:0a:6b:97:
00:16:73:90:70:bd:e7:87:a0:0b:40:b0:38:66:7b:
15:9b:d6:08:89:b5:a3:8a:c3:8c:8f:d8:ea:38:38:
09:c2:0f:21:fc:1f:52:de:aa:da:8c:ee:76:32:b0:
21:22:06:b8:25:ca:19:86:44:63:34:8b:62:80:27:
b9:14:f6:f3:b4:33:09:c0:0e:88:25:f1:df:50:ed:
91:56:7e:d8:46:87:3e:78:b7:f1:ea:f5:2f:cc:ca:
c9:8d:5d:23:e6:bc:6a:99:2f:c7:94:34:52:91:c6:
c3:33:fa:2a:f4:c9:53:06:9b:e4:ce:d9:d6:67:78:
de:f4:eb:3a:9c:02:8f:87:94:2c:61:5a:9a:82:08:
4d:ab:f5:2b:8f:4f:47:79:9b:d8:81:b3:74:be:f9:
5d:b7:c0:0c:f6:9e:39:03:35:27:76:45:a3:99:a3:
cb:70:eb:c1:48:8a:e1:70:16:ab:d5:b1:3a:74:92:
fb:52:22:a3:66:74:22:56:09:95:f1:7e:f2:9e:a1:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2A:9A:E1:CB:3D:E8:23:04:65:59:A1:48:C1:27:AE:A8:46:10:57
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3c:3a:ce:71:a8:22:6d:e9:67:64:e8:76:a0:36:d3:8c:07:
e6:58:85:fc:3a:ca:d7:61:9b:ce:0e:d4:b7:d3:c9:8b:04:e1:
d2:b5:f2:58:57:b0:da:8e:0c:19:8a:71:9e:4b:f6:74:41:e7:
f3:72:c1:b4:d2:14:a2:ab:54:db:ee:3b:9b:5a:00:7d:3f:21:
68:90:46:7e:7b:c3:d4:64:63:03:6a:7d:52:43:ef:36:d6:f9:
64:a4:19:96:fa:12:a9:b0:6b:13:c3:c8:01:25:51:f7:d0:16:
22:e8:d7:2d:44:da:06:dd:f4:87:0d:c6:4d:e3:c2:45:8e:e4:
fb:0b:ef:97:12:2e:28:40:58:20:c1:a4:cb:08:05:70:c1:2c:
1e:6a:1d:bb:73:38:cf:cb:e2:7c:01:f5:18:02:bf:20:6c:de:
3d:af:36:30:f5:5b:7d:79:05:f0:f4:25:c0:01:72:65:55:d0:
ab:d5:70:f8:32:ba:5a:72:0c:d9:6c:35:81:67:a9:f5:d0:9f:
1d:30:f5:96:5a:0d:bb:fd:bd:18:f9:35:bd:37:cc:8b:7e:ab:
d0:da:0a:0e:56:49:4a:2b:98:19:43:50:f1:10:51:84:ae:d0:
58:01:b5:0f:06:7a:0e:76:d4:e3:bd:ab:53:22:98:33:1b:5a:
cf:dc:f3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:06:52 2026 by rpki-client