Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier: rk2gBp6FqtGb9IVPfrnzOgF+jWJSWkBwdHtGf5rJPBw=
Subject key identifier: 9D:76:EE:1B:66:C4:E0:65:AC:ED:93:7D:92:C6:87:32:D4:09:4B:64
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial: 019D99998D86196C7AB733980DCFBF31BAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number: 0AEA
Signing time: Fri 17 Apr 2026 04:01:10 +0000
Manifest this update: Fri 17 Apr 2026 04:01:10 +0000
Manifest next update: Sat 18 Apr 2026 04:01:10 +0000
Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: ZNd0B31xpnP1JP5RiWg+gajTd4tLg1Kz9jxvywZ/oQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8d:86:19:6c:7a:b7:33:98:0d:cf:bf:31:ba:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
Validity
Not Before: Apr 17 04:01:10 2026 GMT
Not After : Apr 18 04:01:10 2026 GMT
Subject: CN=9d76ee1b66c4e065aced937d92c68732d4094b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:ad:a4:2f:ef:70:e7:1a:78:57:35:da:e8:
dc:ae:7b:cf:19:36:86:9d:60:28:82:dc:5b:52:c9:
7e:e7:13:76:a7:67:9d:94:e2:19:cb:04:7e:b0:65:
1f:45:e0:b9:e4:4d:4a:ad:17:d9:5a:90:b9:4e:e6:
d8:d9:3f:53:dc:2c:7f:c9:a8:bc:e1:79:a5:fd:de:
63:0f:6e:06:e6:c7:b2:d0:01:34:89:4c:4e:97:0a:
ac:96:6d:d8:b0:08:19:42:e3:c7:9d:81:8b:82:cd:
83:3c:44:81:af:e9:e6:99:47:d6:40:8e:3e:5d:7d:
e6:1e:45:22:38:9c:cf:1d:25:b2:d7:fa:a4:6f:56:
95:be:42:91:cb:6f:4c:df:9b:ca:05:27:2a:79:ad:
c9:9b:ba:13:cc:88:41:3f:a7:02:87:9b:51:af:d3:
5d:b3:ac:8c:35:f1:5a:e7:14:50:df:ba:9d:51:54:
5c:31:97:d7:fe:c4:c7:80:48:f8:f7:cd:50:e6:61:
01:c9:6e:b6:8d:26:0d:a5:e1:02:8f:39:60:08:82:
2d:ac:2c:e1:5a:ad:d8:a5:c9:b1:f4:37:7f:b3:47:
70:e9:60:ea:73:e2:a4:79:99:73:6c:0f:c9:e6:38:
1d:41:76:f6:de:43:fc:67:92:3c:06:64:7b:d9:ce:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:76:EE:1B:66:C4:E0:65:AC:ED:93:7D:92:C6:87:32:D4:09:4B:64
X509v3 Authority Key Identifier:
keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:09:68:3a:71:16:48:a3:47:6f:8b:fe:67:0a:cf:4d:4d:
db:32:03:3d:bd:07:8d:48:52:ec:e5:c9:67:66:82:e3:a8:7d:
74:f7:aa:90:54:b1:96:4f:9c:c9:9a:ed:d6:0b:82:96:08:74:
32:78:43:97:0c:0f:0b:16:94:66:25:dd:db:2a:94:18:0e:32:
9b:bf:34:19:67:d6:fb:16:00:ca:78:6a:00:88:23:56:23:b6:
19:33:12:d2:d9:70:45:d7:8e:ed:b5:ee:9f:f8:4e:34:5a:cc:
04:f6:4d:dd:76:f6:50:70:f6:b8:bf:55:0f:e2:e7:08:0e:ee:
65:fc:42:89:31:7f:2e:ba:a2:19:90:3b:df:70:77:f4:d2:f6:
58:29:2f:65:76:7d:3f:0d:8c:37:9a:88:75:89:79:99:46:f9:
de:17:bc:65:bf:e2:1f:7a:9f:07:63:9d:76:3a:c1:a6:0b:62:
d6:b3:a5:eb:6b:e7:b6:91:9b:b1:ef:82:ce:88:6f:a4:03:c6:
61:96:5e:ee:90:89:4f:5e:d5:5d:9a:5a:17:15:05:10:b7:2f:
68:af:c7:54:6c:ff:27:bd:1f:f9:02:5f:78:da:7b:bd:28:76:
0a:17:9e:99:9b:a1:b3:47:ad:da:73:0f:21:07:f6:07:b6:f7:
e2:a6:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:11 2026 by rpki-client