Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: SHjGb8DkU4iW/Alvodyd0JaNgXaoyg214yobFVJ2ar8=
Subject key identifier: 64:EE:B7:4E:2E:54:B4:06:58:1C:C8:A7:6E:96:98:79:36:F0:6C:EB
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019CE96E4DD183D0352AFA7E0D7DBE9558EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0A21
Signing time: Fri 13 Mar 2026 23:00:46 +0000
Manifest this update: Fri 13 Mar 2026 23:00:46 +0000
Manifest next update: Sat 14 Mar 2026 23:00:46 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: 7GKQto5yyOHEJ2EHhF8q7GjnPUEKndaO6E/gB3dizTs=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:6e:4d:d1:83:d0:35:2a:fa:7e:0d:7d:be:95:58:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Mar 13 23:00:46 2026 GMT
Not After : Mar 14 23:00:46 2026 GMT
Subject: CN=64eeb74e2e54b406581cc8a76e96987936f06ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:ed:45:d0:83:d5:8d:2d:01:17:db:cc:39:
2e:52:7f:3c:39:ee:4e:f1:40:26:6f:35:ca:00:b0:
cc:4b:88:2d:9f:78:94:9a:59:7e:85:f6:be:82:09:
23:5b:68:b3:3b:59:b9:13:f2:4a:60:dd:96:83:e1:
a0:d9:f4:34:d7:e8:32:6e:26:92:d3:02:a0:c3:58:
ab:c7:d4:e1:58:b5:46:28:a0:7f:4d:4f:a8:6c:bd:
c1:8d:ca:d5:d6:59:c0:8e:f3:e9:41:c0:6b:c4:8a:
ff:13:bf:ba:6a:c2:26:1a:21:fa:fd:2e:2e:96:84:
c2:e2:f2:18:ba:09:66:f6:ca:08:ff:dc:09:ea:7e:
db:19:18:11:14:59:04:7b:0d:eb:aa:1e:73:e9:0a:
5a:30:71:dd:96:c0:cf:a6:89:73:b1:64:64:31:81:
9b:09:e0:73:7f:f8:a0:f9:a9:74:c3:3b:36:13:51:
71:1c:05:18:55:bd:82:18:c0:de:c3:e0:67:73:55:
e1:b0:78:5e:40:68:02:10:64:5b:11:4d:25:3f:d4:
18:50:9d:08:22:60:a0:d8:d7:1d:a9:fb:5d:55:8c:
49:ee:50:80:9f:fa:d3:55:fb:42:ce:78:64:22:94:
0f:c4:8d:0f:75:94:01:0b:b4:df:82:08:23:72:ad:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:B7:4E:2E:54:B4:06:58:1C:C8:A7:6E:96:98:79:36:F0:6C:EB
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:88:44:f3:f0:b8:71:26:f4:3b:c4:5a:ec:00:d1:85:ec:16:
ee:60:a2:5e:c3:28:ca:1f:7b:e8:a4:13:cc:f2:2e:7e:f3:3e:
25:47:af:dc:29:20:36:69:1d:dd:fd:99:3a:ff:0d:1b:68:98:
d0:8b:7f:94:4f:fa:73:d8:61:5d:11:85:ba:07:67:2f:08:89:
57:52:2e:8a:04:27:55:5b:7a:c1:71:4f:bf:26:00:23:b1:7f:
73:7e:a7:f1:b9:00:7f:9e:67:c5:3a:d6:70:e3:c0:7d:0d:ff:
dc:4a:b2:b3:e5:23:44:8a:1a:c0:af:d4:e4:f3:7e:58:43:fb:
1f:b2:87:58:91:25:ef:26:77:51:89:ff:64:12:12:f7:4d:ab:
18:5b:08:31:a5:ab:fa:13:bc:1a:0b:de:bf:e9:01:59:9a:94:
2f:6e:5e:7f:5e:93:a5:8b:17:b6:d3:18:fa:b6:d1:56:4a:be:
10:6f:ab:94:92:1b:5f:6a:c4:4f:1a:68:50:c5:eb:67:44:c5:
1a:8d:b0:1f:6f:ff:ff:9d:6f:83:15:56:78:74:44:67:1a:ab:
5f:a6:64:15:27:b3:77:ab:46:0b:4e:5c:14:96:7e:b3:ed:2b:
8b:b3:8e:37:72:d7:07:bf:04:1d:bc:8c:e5:0a:3e:04:d6:64:
a4:74:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:37:20 2026 by rpki-client