Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: 6cHaYHC3QK4OoUFDazbu9BYQn1hYdJIbz4PoGQH5v0Y=
Subject key identifier: F7:22:C3:3B:4D:CB:2F:B6:10:BA:AB:40:46:89:57:23:F1:3C:A3:5C
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 01A0B0F4CBA397524290129A34A5D850E553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0C16
Signing time: Thu 17 Sep 2026 20:00:27 +0000
Manifest this update: Thu 17 Sep 2026 20:00:27 +0000
Manifest next update: Fri 18 Sep 2026 20:00:27 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: kXl8R9001/gD7I0dNdTipIRyX4K2T28CeW69CV+uEXQ=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:f4:cb:a3:97:52:42:90:12:9a:34:a5:d8:50:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Sep 17 20:00:27 2026 GMT
Not After : Sep 18 20:00:27 2026 GMT
Subject: CN=f722c33b4dcb2fb610baab4046895723f13ca35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:e5:b8:62:c7:72:be:c6:51:14:41:1f:13:
32:d4:f6:9b:84:47:e2:52:8a:fb:cf:ad:c3:b7:9a:
61:d0:65:f8:59:26:2e:d0:d0:59:37:9d:25:e0:e2:
e2:58:b9:34:5e:cc:a1:10:d4:e4:3e:89:35:3c:9e:
57:d1:9d:86:3c:29:4f:87:4a:69:df:3c:61:74:f2:
69:fa:ad:e2:ba:f2:ea:58:c1:f2:6a:22:dc:75:35:
7c:33:aa:12:01:65:ff:0b:ae:cf:ea:a3:24:50:f6:
78:13:2f:84:61:ee:f8:9e:b3:4f:d9:8b:40:89:32:
d8:2d:4b:55:29:45:25:7f:b3:22:3b:c3:62:34:3d:
a0:e8:42:3d:93:b5:6b:99:55:30:86:e8:6d:b5:7c:
6e:d0:b1:57:41:93:8b:58:b9:52:40:53:42:d2:cd:
d7:6b:bc:18:01:db:4f:b0:fd:15:35:15:98:4b:ec:
7c:0f:4d:31:01:69:41:d1:14:12:64:64:65:4b:23:
94:83:ce:b6:f9:e5:1c:45:5c:76:e7:90:4a:ba:d1:
7e:c9:12:21:2e:60:a7:e6:cc:15:fe:8d:e6:05:ff:
3b:a9:5a:78:f3:3b:ad:7e:86:c2:29:53:c6:8e:e6:
d2:5e:ef:bc:38:36:db:be:a0:5b:38:c9:1f:3b:00:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:C3:3B:4D:CB:2F:B6:10:BA:AB:40:46:89:57:23:F1:3C:A3:5C
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:4a:a1:a0:fb:62:0d:2a:66:84:f4:c3:c9:28:91:83:83:
b8:59:90:ad:49:d2:cc:e7:45:6d:2a:ee:12:25:ed:1f:cc:d9:
00:5a:37:71:88:ae:ee:d3:bc:9c:2f:03:7c:0c:7d:2e:0a:ad:
6e:2b:3e:04:09:eb:3a:67:a5:df:ba:2a:ad:3d:06:6b:fe:7b:
38:89:d5:b7:34:36:2f:71:84:46:cc:74:2d:29:75:26:b4:2a:
01:3d:24:6c:75:22:43:f1:35:65:03:6e:a8:a4:34:e3:b6:b5:
49:87:3b:54:10:79:5c:8c:d7:f7:49:e2:f4:a8:bb:44:ac:2a:
8c:03:2b:44:cb:3b:84:d0:1b:99:bb:94:46:7f:d0:46:3c:19:
d4:97:59:90:8c:a8:04:2c:ee:ca:83:22:11:c9:2e:cf:d2:34:
c7:93:18:a2:a5:ae:94:f9:e7:64:be:73:07:2f:88:36:d5:71:
42:53:11:d7:b1:32:66:90:51:7d:1a:0a:7c:16:80:60:9c:5b:
70:02:4f:35:e9:0a:94:0e:32:c6:90:f2:78:ab:81:f1:de:60:
87:cf:6a:6c:84:43:d1:1b:ec:ff:53:f1:af:88:b8:f3:3f:00:
f3:70:2e:a3:0f:f9:76:6c:bb:2e:92:fa:24:3f:53:0e:8e:4e:
ad:41:c3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCw9Mujl1JCkBKaNKXYUOVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy
MzBiYTcwHhcNMjYwOTE3MjAwMDI3WhcNMjYwOTE4MjAwMDI3WjAzMTEwLwYDVQQD
EyhmNzIyYzMzYjRkY2IyZmI2MTBiYWFiNDA0Njg5NTcyM2YxM2NhMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuarluGLHcr7GURRBHxMy1PabhEfi
Uor7z63Dt5ph0GX4WSYu0NBZN50l4OLiWLk0XsyhENTkPok1PJ5X0Z2GPClPh0pp
3zxhdPJp+q3iuvLqWMHyaiLcdTV8M6oSAWX/C67P6qMkUPZ4Ey+EYe74nrNP2YtA
iTLYLUtVKUUlf7MiO8NiND2g6EI9k7VrmVUwhuhttXxu0LFXQZOLWLlSQFNC0s3X
a7wYAdtPsP0VNRWYS+x8D00xAWlB0RQSZGRlSyOUg862+eUcRVx255BKutF+yRIh
LmCn5swV/o3mBf87qVp48zutfobCKVPGjubSXu+8ODbbvqBbOMkfOwB7QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPciwztNyy+2ELqrQEaJVyPxPKNcMB8GA1UdIwQY
MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt
NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3
LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY9KoaD7
Yg0qZoT0w8kokYODuFmQrUnSzOdFbSruEiXtH8zZAFo3cYiu7tO8nC8DfAx9Lgqt
bis+BAnrOmel37oqrT0Ga/57OInVtzQ2L3GERsx0LSl1JrQqAT0kbHUiQ/E1ZQNu
qKQ047a1SYc7VBB5XIzX90ni9Ki7RKwqjAMrRMs7hNAbmbuURn/QRjwZ1JdZkIyo
BCzuyoMiEckuz9I0x5MYoqWulPnnZL5zBy+INtVxQlMR17EyZpBRfRoKfBaAYJxb
cAJPNekKlA4yxpDyeKuB8d5gh89qbIRD0Rvs/1Pxr4i48z8A83Auow/5dmy7LpL6
JD9TDo5OrUHDyQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 02:29:04 2026 by rpki-client