Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: Gw5UaQLmwRZSz8z2aGQH+MzZnLvTjh210EDP7iIMV8E=
Subject key identifier: 09:B8:46:B3:35:81:C7:7E:0D:00:AB:80:28:5D:65:30:72:16:B4:80
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019FC55A7B0030E94CA04B8DB6761B923E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0B9C
Signing time: Mon 03 Aug 2026 02:01:08 +0000
Manifest this update: Mon 03 Aug 2026 02:01:08 +0000
Manifest next update: Tue 04 Aug 2026 02:01:08 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: KSiq7uBncQ04l/0HZxVJiESTVfod4QbxOMiLh5DMUpQ=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 22:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c5:5a:7b:00:30:e9:4c:a0:4b:8d:b6:76:1b:92:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Aug 3 02:01:08 2026 GMT
Not After : Aug 4 02:01:08 2026 GMT
Subject: CN=09b846b33581c77e0d00ab80285d65307216b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:82:94:09:8d:3c:e4:bb:06:ad:a5:3c:5e:
d3:cd:84:0d:3c:f3:a4:7e:6c:49:7b:ad:4f:1b:a2:
0a:3f:50:7e:cf:51:21:77:bd:4d:6c:6c:49:c1:b2:
fe:b7:ff:53:ac:f8:e6:fd:59:ea:37:90:04:87:60:
80:9e:29:bf:b2:55:3b:ec:90:5e:78:16:33:97:a3:
3f:3a:ad:36:6a:d7:9b:e3:fe:e9:7d:c3:88:df:d5:
83:d9:ee:9f:dc:91:2c:96:e4:b1:5c:7e:a8:5b:fc:
45:b1:02:b4:e4:00:f4:98:14:2b:82:95:b8:a3:2a:
b1:67:47:86:d1:2c:14:c0:6c:af:3c:37:28:0d:36:
44:42:6a:5a:13:64:20:2e:00:a0:b1:8e:bb:0d:3c:
20:ff:31:9e:75:de:1a:0d:27:cf:ae:e6:9a:25:6b:
74:66:6e:ae:65:0d:49:9b:12:83:c1:0b:09:2f:ba:
d6:82:35:71:e7:6b:ba:d7:c3:99:61:f6:68:04:12:
4f:03:cd:25:40:c1:8c:c2:3d:b6:b3:7b:b9:99:35:
d8:95:0d:a0:9f:c8:b5:6c:69:25:ec:dc:a3:88:a2:
9f:55:5a:b5:b2:4d:84:b3:37:61:56:79:37:23:79:
6a:0a:7b:aa:01:52:0a:cc:4f:d5:1b:1e:3c:cc:27:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:46:B3:35:81:C7:7E:0D:00:AB:80:28:5D:65:30:72:16:B4:80
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:87:6d:9c:e5:3c:72:76:27:71:38:b4:99:2a:74:f5:e5:0f:
97:64:09:53:53:38:7a:c8:00:03:51:a4:5c:19:5a:53:aa:93:
89:5c:95:28:38:a3:53:91:31:51:1d:3d:1d:4d:5c:f5:35:ff:
4f:49:cd:ae:2e:9b:3c:3a:8f:b1:8a:e8:da:35:b9:ee:44:f7:
f2:51:59:8d:d7:e8:69:d8:f8:ab:ac:48:8b:3d:ca:7a:cd:b8:
a2:33:5d:d8:eb:24:a7:06:cb:8e:a8:71:a1:af:f7:91:d3:6a:
3c:c3:bf:52:06:da:a4:41:a0:7e:81:47:5d:d6:ff:8c:66:e6:
87:c5:60:41:d7:7d:07:52:83:f1:9d:7a:b4:20:26:7f:64:34:
33:43:09:4d:7c:26:5e:fc:6c:2e:8d:01:c4:a3:de:af:12:34:
e3:de:0b:f7:dd:22:23:ea:fc:de:c2:f7:53:4c:7f:18:77:93:
e0:8d:a0:d2:77:3d:09:51:88:9f:13:f7:82:6f:b1:69:ac:3f:
96:c5:4b:d9:af:b2:3c:34:0a:d3:99:c2:b3:e6:72:a3:d0:42:
19:52:dd:a3:fc:00:4a:0b:e8:04:84:94:cb:30:75:b6:90:5c:
8a:69:c0:ac:26:73:0a:a4:57:db:f6:87:0c:3a:c8:8d:6a:38:
34:be:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 08:09:52 2026 by rpki-client