Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
File: JNoGgkj2hKWuXZeclngr2iYZpmQ.mft (raw, json)
Hash identifier: M4WIMePKBJYsYmhD/qER0tOtIrPhY7sbtVMQo3JwfJc=
Subject key identifier: 4C:49:7C:42:97:04:10:D2:70:3D:DB:2F:0E:8F:58:A9:69:48:F2:91
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 019FB01BFADCD70CCCEA9C0353801BB40546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
Manifest number: 9E
Signing time: Wed 29 Jul 2026 23:00:51 +0000
Manifest this update: Wed 29 Jul 2026 23:00:51 +0000
Manifest next update: Thu 30 Jul 2026 23:00:51 +0000
Files and hashes: 1: 4dV_FEknf2673xUudEJgMK9SaSM.roa (hash: EFpUpjcuql5pAjeM5M3YVguPsMbWl4b3xSNvyRfGxlc=)
2: 5pUb4usxoUemY0cKiAWilNYbvzU.roa (hash: FJ+d9SQFx/yVW7NXXyFNRSHBza0C2OJNmGoQVEd++aY=)
3: JNoGgkj2hKWuXZeclngr2iYZpmQ.crl (hash: 1AhhgLBrVTqA16jJDeHzB6p+3VsT7csG24JRCBcI060=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 21:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:1b:fa:dc:d7:0c:cc:ea:9c:03:53:80:1b:b4:05:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Jul 29 23:00:51 2026 GMT
Not After : Jul 30 23:00:51 2026 GMT
Subject: CN=4c497c42970410d2703ddb2f0e8f58a96948f291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:43:77:56:53:a4:cd:f3:ff:32:02:90:de:
1b:3a:09:36:9d:48:2a:a7:4c:ef:ff:f2:7c:c6:a6:
96:73:fc:a9:a7:51:df:51:a2:e6:03:49:0f:e4:6a:
bd:a0:d1:de:89:27:84:e9:9d:c8:96:1f:6e:6d:34:
c9:58:f4:24:35:04:83:b5:d7:ee:34:38:fc:b9:5f:
85:9c:ae:d7:c6:2a:f0:7d:32:92:d9:3c:ee:70:3c:
dd:c0:83:a6:18:1c:fc:a4:d4:95:f9:0f:d9:49:18:
44:80:cf:d1:44:3c:5c:1c:58:93:e0:bd:27:9c:67:
63:f4:9d:b2:cf:84:56:e0:40:1b:82:cd:b3:40:f6:
22:d4:1f:c0:bc:e1:57:3d:96:f6:d1:f6:a8:ab:a7:
1e:69:e3:48:f8:0e:50:a5:39:5c:ae:6e:6c:d4:ec:
ed:6b:30:ec:a0:97:1e:11:70:59:2c:14:41:80:82:
51:b2:be:86:2e:88:cb:93:a6:52:aa:53:d3:0b:20:
b8:91:1f:b8:3a:74:d7:ac:a5:16:75:f1:aa:c7:a0:
5c:21:9d:69:8f:73:2a:a3:38:c2:6b:12:d8:9d:09:
0e:5e:b2:ec:4e:bb:7e:36:40:45:6c:fd:83:a6:f6:
6e:dc:63:6e:a6:76:40:8d:0a:6d:da:ca:35:bd:7b:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:7C:42:97:04:10:D2:70:3D:DB:2F:0E:8F:58:A9:69:48:F2:91
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:de:4c:1e:90:5e:74:d9:2c:96:e4:58:7f:6c:c1:19:6a:ab:
69:96:3b:d0:d7:bb:7c:1a:2f:29:54:13:a1:ba:5d:79:61:08:
52:90:76:7d:2e:e6:34:b1:8b:67:f6:d3:34:aa:84:0f:40:a0:
97:bd:de:81:bd:e5:36:10:25:c1:55:79:64:e8:20:ab:d4:61:
a6:ee:99:9b:1b:86:4f:48:20:25:bf:d0:87:e6:ad:6d:c9:5c:
ee:13:9a:18:b0:14:c9:8b:2b:0f:aa:b2:02:49:78:e6:45:c2:
cf:9e:48:10:36:77:1a:b5:58:d5:d8:4d:96:2d:ff:ef:cd:d1:
fc:31:64:58:94:e7:92:5d:04:eb:ba:4b:a0:c6:03:36:90:8a:
e7:4f:28:4b:f3:46:1b:ac:ac:f6:44:2c:dd:f3:d0:45:f9:9e:
ed:e0:41:d1:2d:c8:1c:43:6a:ba:3b:b5:e9:08:e1:a7:96:48:
ae:9b:83:73:9c:82:63:e8:b8:fa:dd:9c:61:6d:6e:62:ca:4d:
cb:49:94:2d:f5:d5:a1:0b:5f:fc:9b:2d:7c:45:42:64:99:73:
99:ad:f9:98:49:6a:44:66:29:7b:5c:b8:e0:f6:19:fc:80:b2:
ab:dc:fc:e5:1f:f8:73:75:d5:00:83:7b:f4:46:05:fb:18:93:
c9:fe:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 05:27:06 2026 by rpki-client