Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: AosuQ13Nki9/fYXbRKW1vQFSi7GDmavNhg1BpD8iFWQ=
Subject key identifier: 80:CC:66:94:9A:2D:03:D6:08:77:40:49:C4:CA:32:7D:9C:57:F3:34
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019D389BEBA7A6E0543914F1313BDBA35253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0B1B
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: su0JY9NB+CMrWOfNje52RPvIRL/N5G9qjg1KERJR9k8=)
3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:eb:a7:a6:e0:54:39:14:f1:31:3b:db:a3:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=80cc66949a2d03d608774049c4ca327d9c57f334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:01:b5:35:56:d6:99:41:58:e9:e9:f7:95:
13:c0:0f:15:9a:02:3a:5f:a8:cc:f2:a6:ce:7d:35:
63:10:0e:e3:98:ec:e5:f8:3e:18:52:8d:b5:c9:58:
c9:e2:b9:bc:af:42:c2:30:a1:61:9c:bf:58:cd:3e:
09:cf:2a:8f:5e:ae:00:12:83:dc:d8:d2:21:35:df:
f3:02:ba:72:bf:0a:6b:87:3c:4c:86:c5:8c:ea:24:
cf:e4:e8:fa:a4:90:f9:03:b7:e7:a8:ff:67:8c:29:
5d:0d:5d:02:67:ce:86:84:d1:a3:5b:e0:5a:a0:2b:
5b:13:b2:21:39:2b:c7:bd:68:90:bf:3c:2e:53:a8:
de:32:d7:fa:90:7a:e9:6e:c4:8b:e1:3b:ba:67:be:
aa:58:f7:47:ac:c5:0a:3b:f3:fa:a2:9d:50:e1:fe:
b4:fb:5d:f6:29:b4:7a:a8:78:19:43:87:c5:3a:33:
ff:6c:7a:a1:d8:2d:74:75:8e:5f:b7:50:46:f4:cc:
a1:42:11:87:d5:e6:9e:e1:f3:6f:ca:33:1c:ea:ee:
98:4c:8c:37:57:3f:11:b1:3f:bb:29:87:8c:59:51:
06:16:2b:fd:28:18:c9:00:02:a0:a0:1b:d2:55:e9:
df:82:3a:75:c4:c0:b3:3f:e8:f0:41:c1:b2:ad:94:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:66:94:9A:2D:03:D6:08:77:40:49:C4:CA:32:7D:9C:57:F3:34
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5b:83:df:f7:99:08:c2:38:4e:03:c0:05:1e:9d:bc:d4:52:
ce:aa:fa:0e:ce:20:70:5f:47:01:53:b4:5b:64:6f:58:56:5d:
e3:09:8a:e9:e1:06:b3:31:8c:06:34:f1:0b:96:b0:29:aa:6d:
2b:14:49:54:f0:7c:35:79:9b:48:29:93:94:48:7f:a8:56:7c:
23:98:4b:03:8d:90:66:3a:a9:92:e7:9c:19:4e:3e:d7:1a:eb:
59:59:78:44:3c:d9:49:d7:0e:9b:d2:07:57:b8:86:1a:f9:90:
c2:3d:5d:d3:a9:b2:da:a6:dc:c2:2b:c4:70:4d:52:e9:39:a2:
76:c3:59:15:8f:1a:a0:2a:fb:fa:69:85:1b:b9:3f:2c:2e:52:
e7:3d:de:81:6b:15:ab:b6:fa:f1:a0:90:de:04:72:7e:82:8f:
1f:ea:1c:32:f8:cf:43:cb:b5:fa:3a:4b:0b:24:a0:ae:95:29:
9b:51:43:b3:3c:d6:06:e0:03:0b:db:af:99:9f:74:d7:0c:ca:
b2:d1:69:fc:ab:bb:e9:57:aa:4b:c7:f8:d1:98:53:ce:46:ff:
a1:83:97:d0:97:a3:a0:75:13:05:25:61:d1:f7:18:0a:a1:75:
71:ef:e6:8d:7e:0e:2f:71:21:3a:ce:77:5b:78:42:17:f4:8a:
94:79:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:16 2026 by rpki-client