Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
File: JNoGgkj2hKWuXZeclngr2iYZpmQ.mft (raw, json)
Hash identifier: l7qa9Pt4K1s1AZ8s9df6Fk8+gNay6QIu8n23pGyeCS4=
Subject key identifier: 2C:A7:CF:92:F4:AC:4A:ED:B3:93:F5:90:94:03:DA:4F:61:2A:BF:B4
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 01A18F0B76347095E0560FFCA2B8DFB5E72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
Manifest number: 0196
Signing time: Fri 30 Oct 2026 23:00:55 +0000
Manifest this update: Fri 30 Oct 2026 23:00:55 +0000
Manifest next update: Sat 31 Oct 2026 23:00:55 +0000
Files and hashes: 1: 4dV_FEknf2673xUudEJgMK9SaSM.roa (hash: EFpUpjcuql5pAjeM5M3YVguPsMbWl4b3xSNvyRfGxlc=)
2: 5pUb4usxoUemY0cKiAWilNYbvzU.roa (hash: FJ+d9SQFx/yVW7NXXyFNRSHBza0C2OJNmGoQVEd++aY=)
3: JNoGgkj2hKWuXZeclngr2iYZpmQ.crl (hash: 7EwhvGNzT6Bgnrltf3AbrNl3Wpn3NE0rp2GlgDbEDBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:76:34:70:95:e0:56:0f:fc:a2:b8:df:b5:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Oct 30 23:00:55 2026 GMT
Not After : Oct 31 23:00:55 2026 GMT
Subject: CN=2ca7cf92f4ac4aedb393f5909403da4f612abfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:d6:06:97:19:bf:ed:f6:59:7a:c9:4d:52:
82:cc:cc:36:f4:8b:0c:0b:88:cc:9a:87:c1:db:2b:
39:48:58:9d:8e:bd:10:7d:3b:a3:fb:70:ef:52:5f:
16:d2:7a:56:c4:aa:52:d8:55:0b:66:e3:ed:58:28:
d9:e0:9d:9f:80:2b:d8:dc:9d:bd:4c:33:d9:03:58:
62:25:20:79:4a:02:07:f1:79:05:d8:f9:bd:5b:b2:
16:5b:ca:4e:8f:a9:fa:0f:bc:8c:43:8d:39:d0:da:
d3:fe:4b:b5:7e:98:7d:fd:17:43:00:cc:b1:cb:ea:
ea:ff:c5:c8:19:92:f1:c7:ce:84:bb:c0:95:a4:ae:
d6:53:15:a5:ec:7e:ef:61:98:a5:8a:53:8f:fc:73:
b2:25:57:71:de:97:01:63:12:07:9c:8c:90:b8:65:
c5:06:07:b9:0b:2f:dd:06:9f:78:c1:83:95:20:6e:
c5:69:40:76:d9:3f:be:5d:54:28:70:8e:08:81:d0:
73:4a:76:c3:a6:f5:ae:66:9f:b2:38:38:c2:ef:d5:
4d:01:17:72:d9:f7:4f:bb:11:0a:88:e8:0a:3b:21:
f3:37:9b:e4:14:27:a0:31:ad:61:20:a6:36:09:f5:
93:1e:ca:07:97:17:2c:21:22:d4:3b:e7:7c:49:36:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:CF:92:F4:AC:4A:ED:B3:93:F5:90:94:03:DA:4F:61:2A:BF:B4
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:13:29:e5:34:44:dd:06:9c:36:f1:16:85:c6:03:b8:28:58:
c0:1f:26:00:04:fd:20:bf:48:f0:cb:85:33:08:13:7a:6e:18:
a7:44:63:a0:d5:e2:b4:7c:8a:da:be:32:d9:92:8e:a4:ea:84:
e8:f8:ad:8f:87:aa:1d:3b:b2:a9:54:1e:ab:b0:ae:44:3c:a2:
a2:89:90:d0:cf:a7:69:6e:07:18:e5:84:cf:0f:84:eb:6d:bd:
e7:0f:ab:6c:9c:34:6e:83:b5:bd:96:52:69:6b:3a:3a:75:1a:
cb:a4:2d:f7:79:68:b2:57:c2:fd:18:a6:14:12:c6:8d:da:ec:
75:ff:bc:02:44:0a:a2:56:b0:45:76:96:dd:0f:6f:05:0c:d8:
3a:c0:eb:43:14:6e:29:ab:d0:44:76:98:cc:cf:c8:41:46:3a:
05:02:6a:d7:95:ee:40:44:2d:98:76:e2:56:e9:2c:e3:cf:eb:
d4:70:20:6a:82:33:21:b6:60:43:ca:c4:1a:fe:f1:31:30:88:
50:cb:67:3c:78:ea:73:e9:80:48:f9:4a:a3:42:de:5f:f0:57:
db:8c:a3:5f:b3:f7:ba:3e:cd:65:cb:94:0d:7a:0d:b4:f4:01:
a2:5d:23:86:f1:0c:61:3b:e6:fa:62:c5:86:27:63:2f:d1:ea:
dd:cc:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:46:22 2026 by rpki-client