Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: t0QSgQPmKlJC3dDdrOGuNo6zGJUqnWy/Eml72HsSbeg=
Subject key identifier: F5:FD:72:D9:A6:DA:33:A9:DB:64:11:C8:CD:F2:E1:BB:83:DA:97:64
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01A11373013F357A79565661891CBE4FD864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0D1B
Signing time: Tue 06 Oct 2026 23:01:06 +0000
Manifest this update: Tue 06 Oct 2026 23:01:06 +0000
Manifest next update: Wed 07 Oct 2026 23:01:06 +0000
Files and hashes: 1: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (hash: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: F4dUYiQabW7cM7HZMgV7o1ro7gMSBb8MDuhw4cMCHOs=)
3: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (hash: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:73:01:3f:35:7a:79:56:56:61:89:1c:be:4f:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Oct 6 23:01:06 2026 GMT
Not After : Oct 7 23:01:06 2026 GMT
Subject: CN=f5fd72d9a6da33a9db6411c8cdf2e1bb83da9764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:d5:bb:6d:ab:d2:ae:de:de:5d:69:6e:3b:
61:92:47:d9:6f:4a:70:c9:65:86:e3:b5:3e:dc:ce:
0d:c4:c1:cc:79:5e:30:4d:cf:76:e6:dc:e8:53:8e:
89:7a:36:8d:17:9f:de:0d:be:44:a7:b6:26:81:7c:
ae:42:7b:72:75:92:a9:8a:f2:f2:48:9b:3f:95:cd:
a5:06:f9:35:be:c2:98:79:51:ac:53:15:17:7e:33:
eb:c0:7e:2b:03:00:42:6b:a3:c1:d5:e1:7b:4e:24:
fe:5a:c6:27:05:fd:25:48:5d:94:f6:47:59:6a:b2:
48:cd:8d:93:86:04:9f:4c:45:df:c9:96:7e:33:b6:
4b:a9:ee:74:c8:d6:30:ef:a8:76:81:57:df:56:be:
46:b1:bf:10:2e:63:16:a7:39:b6:8b:de:88:fb:86:
ad:cd:48:64:08:3e:bf:46:8d:4f:c5:e2:de:5b:e0:
d9:08:ee:80:3a:1e:ce:25:d1:8e:23:09:b8:e9:5f:
f6:7c:54:25:76:ed:bc:14:7c:be:64:5d:a6:75:1a:
d3:8f:1d:13:84:a8:3c:f5:9f:0f:87:00:4d:47:6f:
15:8f:fc:40:95:16:6a:1d:d6:a5:94:86:c3:92:cb:
e1:2d:ec:25:74:39:73:b7:ff:6d:7d:dc:2f:a1:26:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:72:D9:A6:DA:33:A9:DB:64:11:C8:CD:F2:E1:BB:83:DA:97:64
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:2a:d5:30:27:f3:9c:bb:c3:b2:f7:fb:14:fa:a7:31:c7:
85:a7:8b:90:d5:c3:b6:58:37:b2:50:87:8f:65:e0:eb:5c:f2:
c9:5d:84:9a:a3:55:79:c7:de:c2:69:ef:34:64:90:60:04:8b:
2c:4c:e6:07:9e:69:e0:a7:f7:26:73:40:c9:9d:fd:5b:cb:f8:
25:f6:ed:f7:a6:30:f5:70:ea:fa:77:15:0d:fb:66:9d:ac:7c:
11:e7:2a:4e:96:83:53:2a:85:cc:c6:cb:df:83:df:30:a9:95:
a0:79:94:fe:3a:bb:85:3e:57:9b:cf:d2:e7:7b:f0:9f:a8:cb:
4a:85:26:cf:c5:ce:00:68:5a:ad:45:e6:31:db:8c:7b:81:51:
78:31:a2:98:5b:66:61:98:03:00:b3:bd:1e:2f:e3:e4:cb:2a:
a0:f0:a0:6e:87:93:fa:2d:84:3b:de:4f:11:90:5d:8a:2f:39:
99:ca:b2:8c:80:ee:70:9a:f7:53:9b:f1:5d:1e:f3:35:64:7a:
2f:b9:34:35:6a:9e:56:8f:40:61:af:13:f8:53:52:ce:98:6c:
b0:e1:9d:7b:d2:73:95:1c:4a:96:cb:6c:57:24:d9:2b:1d:54:
b3:1b:f9:23:da:e5:8f:b2:28:b1:54:53:e9:16:c1:e0:9c:00:
45:c8:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:52:53 2026 by rpki-client