Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier: D7U7j2muEg/rVLrHBS/cXq3Eli4TG8bsDTWXMYPSOzg=
Subject key identifier: DA:DB:BA:AD:64:DF:31:B9:FB:D9:78:C4:3A:ED:8E:66:59:DA:30:DB
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial: 019D371B6C3C00FC73B8D9943ED359B38052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number: 0A9E
Signing time: Sun 29 Mar 2026 01:00:37 +0000
Manifest this update: Sun 29 Mar 2026 01:00:37 +0000
Manifest next update: Mon 30 Mar 2026 01:00:37 +0000
Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: NDAQamcFWBDFeIisiXcN866ghJXoF17ARfi281Oegj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6c:3c:00:fc:73:b8:d9:94:3e:d3:59:b3:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d26a5146996d220461081072c76396582fca84
Validity
Not Before: Mar 29 01:00:37 2026 GMT
Not After : Mar 30 01:00:37 2026 GMT
Subject: CN=dadbbaad64df31b9fbd978c43aed8e6659da30db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:24:f6:31:45:be:b3:c1:b7:61:bd:65:b8:
c1:78:5d:43:10:50:49:43:e9:f3:55:ec:b3:dd:e6:
a7:f5:e9:0b:bc:f6:3e:4e:0a:b6:59:03:8c:28:fb:
e9:a8:51:70:0a:85:0e:39:f6:ef:c6:8c:4b:a8:fd:
10:70:30:f2:df:9d:e2:2e:a5:c8:cd:a7:16:a3:fe:
f1:43:06:9b:9b:b8:75:54:cc:35:20:7c:f9:1d:cf:
3c:5b:3b:28:10:89:44:3d:1a:04:66:bf:f8:df:1b:
c2:ff:75:8c:1b:cf:b9:3b:3d:7c:cc:5a:b3:a0:e6:
b5:4b:54:bf:a2:e0:23:c3:b6:7c:af:e9:df:92:8c:
69:1d:3f:b7:1d:e9:1c:99:20:29:fd:c1:3e:6b:3a:
e6:f8:d1:4c:e0:00:70:76:d0:a8:fc:7a:cc:9f:0c:
27:b2:e8:d2:5a:21:8e:b1:ba:a9:6c:52:ab:35:8f:
8f:b6:28:03:76:ca:e0:cc:09:76:a4:05:be:1c:b9:
16:93:c9:e5:cf:7e:b7:0d:0f:62:95:69:72:b8:9f:
82:4e:05:5c:05:b8:74:80:3b:24:d2:01:72:a3:03:
d6:f5:db:1d:a8:2d:cf:a5:23:42:9e:81:f7:57:31:
a4:dd:fb:8b:94:a1:1e:97:04:4f:6a:a0:d7:31:68:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:BA:AD:64:DF:31:B9:FB:D9:78:C4:3A:ED:8E:66:59:DA:30:DB
X509v3 Authority Key Identifier:
keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b4:6b:8e:be:8e:13:d8:62:57:75:11:d7:f9:82:ba:11:24:
98:0a:64:43:17:41:c5:1b:7c:7a:74:2e:f8:b8:c0:f9:4c:51:
7f:03:1f:e0:88:f4:59:a1:b4:c8:d0:aa:e3:6a:1c:26:7d:0e:
86:67:c7:98:01:d4:4a:dc:dc:14:02:ba:84:d6:42:c0:b2:d4:
21:08:bc:5b:38:3d:fc:cd:8a:9f:ca:25:d4:a6:71:a6:b7:88:
27:14:ac:d6:38:e9:2a:7e:49:63:a2:93:77:3e:9e:a9:69:59:
9b:f5:e6:5e:8c:76:17:82:d6:3c:9b:28:77:0f:3d:6e:ed:8f:
3c:77:65:65:93:dc:b6:c9:b4:70:89:b6:9a:11:9d:fd:83:7d:
2c:ba:10:37:ca:bb:2d:c7:0c:eb:1b:44:75:34:19:c7:6a:bb:
88:d1:cd:e9:bb:9d:43:73:57:d8:c1:18:95:da:e3:46:4c:d5:
d7:e0:ce:86:50:f2:4d:df:f1:a0:d9:5c:de:36:32:18:81:79:
30:d1:03:e3:c6:78:f5:17:db:ee:f8:e6:d1:1d:e1:eb:34:46:
1c:84:c6:d1:0f:ef:a5:60:0e:37:df:8d:73:9a:d8:12:bb:ed:
62:f2:5f:b9:75:f8:83:2f:56:91:ad:fc:9a:a9:31:ce:73:49:
4c:20:95:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G2w8APxzuNmUPtNZs4BSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy
ZmNhODQwHhcNMjYwMzI5MDEwMDM3WhcNMjYwMzMwMDEwMDM3WjAzMTEwLwYDVQQD
EyhkYWRiYmFhZDY0ZGYzMWI5ZmJkOTc4YzQzYWVkOGU2NjU5ZGEzMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiYk9jFFvrPBt2G9ZbjBeF1DEFBJ
Q+nzVeyz3ean9ekLvPY+Tgq2WQOMKPvpqFFwCoUOOfbvxoxLqP0QcDDy353iLqXI
zacWo/7xQwabm7h1VMw1IHz5Hc88WzsoEIlEPRoEZr/43xvC/3WMG8+5Oz18zFqz
oOa1S1S/ouAjw7Z8r+nfkoxpHT+3HekcmSAp/cE+azrm+NFM4ABwdtCo/HrMnwwn
sujSWiGOsbqpbFKrNY+PtigDdsrgzAl2pAW+HLkWk8nlz363DQ9ilWlyuJ+CTgVc
Bbh0gDsk0gFyowPW9dsdqC3PpSNCnoH3VzGk3fuLlKEelwRPaqDXMWiykQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrbuq1k3zG5+9l4xDrtjmZZ2jDbMB8GA1UdIwQY
MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt
NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5
LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULRrjr6O
E9hiV3UR1/mCuhEkmApkQxdBxRt8enQu+LjA+UxRfwMf4Ij0WaG0yNCq42ocJn0O
hmfHmAHUStzcFAK6hNZCwLLUIQi8Wzg9/M2Kn8ol1KZxpreIJxSs1jjpKn5JY6KT
dz6eqWlZm/XmXox2F4LWPJsodw89bu2PPHdlZZPctsm0cIm2mhGd/YN9LLoQN8q7
LccM6xtEdTQZx2q7iNHN6budQ3NX2MEYldrjRkzV1+DOhlDyTd/xoNlc3jYyGIF5
MNED48Z49Rfb7vjm0R3h6zRGHITG0Q/vpWAON9+Nc5rYErvtYvJfuXX4gy9Wka38
mqkxznNJTCCV9g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:42 2026 by rpki-client