Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
File: JNoGgkj2hKWuXZeclngr2iYZpmQ.mft (raw, json)
Hash identifier: vUa8Zn4B+XF1VsNN5c+pPxgvHqs1qRFjgk/fzEEeuzY=
Subject key identifier: B0:DE:70:BB:2F:42:AA:C1:6D:0D:6C:2B:57:61:62:10:D5:AE:1D:0E
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 01A099C85A69272339D70327318F9E33AF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
Manifest number: 0117
Signing time: Sun 13 Sep 2026 08:00:39 +0000
Manifest this update: Sun 13 Sep 2026 08:00:39 +0000
Manifest next update: Mon 14 Sep 2026 08:00:39 +0000
Files and hashes: 1: 4dV_FEknf2673xUudEJgMK9SaSM.roa (hash: EFpUpjcuql5pAjeM5M3YVguPsMbWl4b3xSNvyRfGxlc=)
2: 5pUb4usxoUemY0cKiAWilNYbvzU.roa (hash: FJ+d9SQFx/yVW7NXXyFNRSHBza0C2OJNmGoQVEd++aY=)
3: JNoGgkj2hKWuXZeclngr2iYZpmQ.crl (hash: +LNW/bzs2c6Z2+IuHWP0gRYuZ4KnRP8knUCwMezFYEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:c8:5a:69:27:23:39:d7:03:27:31:8f:9e:33:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Sep 13 08:00:39 2026 GMT
Not After : Sep 14 08:00:39 2026 GMT
Subject: CN=b0de70bb2f42aac16d0d6c2b57616210d5ae1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:23:90:58:ce:3a:9c:9c:53:96:23:53:09:
85:8b:84:2f:9a:7c:76:a9:a5:4a:86:cb:67:c8:a5:
13:1e:2c:96:ee:3d:22:83:a2:ff:a5:b7:b0:81:b7:
d4:5a:33:eb:b6:d6:3c:51:b1:65:d4:22:8b:84:2d:
ab:4f:63:be:be:cf:32:cb:60:5b:b2:58:a0:70:df:
e0:ca:b0:9b:09:5a:73:90:9e:67:c6:57:03:f6:5d:
87:2a:75:38:49:03:dd:8d:f2:63:e6:99:77:bd:df:
e7:6e:4a:77:e4:f2:76:7b:95:65:b8:0f:c2:6b:11:
af:b8:39:79:e1:a3:0f:c3:7e:d0:64:3d:ad:43:a9:
24:02:58:27:34:4e:03:6c:2f:16:90:8d:88:dc:f2:
bf:e7:22:f5:08:63:40:a6:03:61:8a:4a:e1:66:d8:
64:4b:3b:c5:87:43:c3:fe:04:90:f0:d8:0e:4d:74:
0b:e8:63:d9:93:95:bc:10:9c:2b:78:18:d9:4a:d5:
c8:9a:83:03:5b:00:a8:c5:b7:55:ad:6c:32:80:8f:
fa:65:07:8c:62:80:29:5e:3c:c0:f4:66:aa:7b:78:
93:f7:32:ba:f7:8f:f7:ca:a3:fa:5d:23:6b:01:d1:
f8:49:ea:de:f1:25:7a:dc:fe:91:71:07:02:03:83:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:70:BB:2F:42:AA:C1:6D:0D:6C:2B:57:61:62:10:D5:AE:1D:0E
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cb:61:e7:86:df:da:fa:0c:5f:a6:17:c6:79:17:03:b1:e4:
d3:bc:fd:5f:ee:1c:f8:fd:2f:62:ca:ca:e6:7a:7a:a7:1b:02:
f0:f9:cb:6d:07:ad:bc:83:71:cf:ef:25:b2:6b:f7:18:5c:65:
52:f7:84:1b:ec:a2:73:2c:14:33:85:83:91:4f:b2:4b:a1:3c:
9b:5d:bb:48:f0:3b:e1:df:55:e2:a4:a0:6e:9f:39:72:55:66:
7d:c0:f0:67:1b:a0:9a:84:78:22:85:6e:32:7c:90:05:67:13:
50:99:19:f0:8c:83:cf:dd:9a:d0:52:bb:9a:36:f3:85:bf:21:
e8:90:45:c7:24:b7:af:c1:f6:78:fd:02:0d:f8:7a:59:57:06:
90:2a:76:30:ac:7a:55:6b:21:28:f8:8d:5d:41:59:b5:73:9e:
46:0c:9e:4b:7b:f1:b9:f2:49:c5:28:d0:1b:b4:e5:fe:4d:88:
34:6c:d1:49:a8:09:9b:f6:41:b6:80:51:f2:aa:6d:a6:71:2c:
1e:5f:66:d3:aa:61:64:63:13:a1:81:71:49:f3:b9:12:c0:8f:
5a:7a:5b:b1:14:66:d6:cd:dd:ec:10:ad:24:6c:7a:d0:c8:2c:
87:20:52:30:37:7c:fc:87:92:5f:64:6d:0c:8a:bb:b2:79:e5:
d2:48:ff:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:08:50 2026 by rpki-client