Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: ngDqTqKgwvEX8QDUmxFrIXcahqTxFvNt3reB2vwwZOc=
Subject key identifier: CA:F2:19:ED:76:0E:38:63:F6:60:45:FB:34:99:07:38:E2:A0:D3:3D
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019DDCC33368FB58683CB22FE07156658BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0A9F
Signing time: Thu 30 Apr 2026 05:01:13 +0000
Manifest this update: Thu 30 Apr 2026 05:01:13 +0000
Manifest next update: Fri 01 May 2026 05:01:13 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: MqKrdJsfkleVXMCA6q9KbucKWQP7Fiq45ObKj5zABPo=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:33:68:fb:58:68:3c:b2:2f:e0:71:56:65:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Apr 30 05:01:13 2026 GMT
Not After : May 1 05:01:13 2026 GMT
Subject: CN=caf219ed760e3863f66045fb34990738e2a0d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:1d:fb:36:26:0d:00:57:da:9a:3d:79:0f:
18:c4:66:77:ab:79:60:eb:ed:65:ba:bc:91:b5:93:
12:43:24:16:40:07:21:32:bf:3a:8e:5a:32:72:f2:
b1:94:d6:0e:9b:a6:9c:08:9f:d5:cb:10:19:47:93:
26:1e:66:b8:cd:9f:6e:d1:3b:01:64:3d:db:7e:69:
57:a8:9a:5a:1f:61:09:bc:55:88:24:ff:88:62:4d:
d1:ba:eb:2e:49:38:16:d0:5f:72:84:d2:b9:0d:a7:
5b:d0:b7:21:19:e2:d0:74:5d:bc:f7:a8:98:91:3c:
1a:19:16:34:d3:59:83:e9:cc:c9:fc:67:1c:03:2e:
f3:c5:01:c9:6b:f6:f3:ca:b6:b3:04:63:81:7c:4f:
a2:73:25:dd:cd:84:70:fc:a0:01:ab:88:63:e7:f7:
ab:a1:ba:7f:fc:3a:23:5d:ea:f4:2c:42:fc:a9:27:
4d:89:78:1e:bb:23:26:5c:46:6c:de:05:25:b2:71:
ba:2d:77:ed:5b:b3:07:dd:d7:53:6c:53:80:ac:ed:
26:4c:e0:43:0a:ff:31:97:ad:49:ff:5c:22:51:49:
85:68:3f:3b:09:06:f2:7c:f8:15:e8:8b:ae:40:eb:
87:4d:7e:62:23:8a:82:82:8f:e4:97:94:29:e9:cd:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:19:ED:76:0E:38:63:F6:60:45:FB:34:99:07:38:E2:A0:D3:3D
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c8:84:5a:46:ba:9c:67:17:36:db:55:19:1c:6b:de:b3:ce:
db:c5:f2:3d:3c:83:29:0d:6f:93:6f:b3:2d:ee:f3:f4:1a:f3:
b4:02:c9:c6:11:39:1c:e7:f4:b6:e4:66:8e:d2:b5:6f:8e:9b:
04:b0:48:be:07:3e:75:96:1c:e6:58:03:20:de:27:d1:06:70:
38:5c:54:e5:0c:ea:7c:d3:43:51:3c:30:e9:4a:4b:c0:84:b3:
84:a7:0f:bc:1f:b4:95:39:3d:7a:aa:18:1b:fe:db:4f:8b:22:
9d:5c:7e:7e:cb:5a:77:b2:8b:03:01:f3:f7:66:20:90:d1:07:
f0:00:25:d1:e4:0d:7e:3e:47:77:7e:b1:e5:55:1a:a5:8e:cc:
7c:e8:4b:5c:31:88:bb:a2:f1:f7:15:65:d2:bb:95:31:ca:a9:
d8:7f:79:de:6f:64:cb:45:5b:70:62:d7:d5:ef:43:91:15:e6:
05:07:01:d9:23:05:32:99:12:8d:6f:1a:44:df:cf:46:7f:b3:
10:3b:d0:8c:b4:35:55:66:5c:68:df:bb:cf:09:f7:59:80:3d:
e1:0d:c1:c5:a1:37:38:d4:aa:2b:08:09:eb:3f:96:bf:12:18:
f4:84:01:6d:ed:cb:de:4a:3c:7d:00:c6:6d:f4:45:cf:d9:49:
f2:c6:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 14:53:25 2026 by rpki-client