Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: TB/0QToCQ0/ULDJ+WVk6wSu2TRmL31ijmjoz+iiTLJE=
Subject key identifier: 89:35:2B:DD:D0:65:52:B1:F5:B4:1B:2B:59:30:5F:E2:B6:33:36:65
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 019FAA88877F6EFFD60E4285A61B242EE332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 04BF
Signing time: Tue 28 Jul 2026 21:01:42 +0000
Manifest this update: Tue 28 Jul 2026 21:01:42 +0000
Manifest next update: Wed 29 Jul 2026 21:01:42 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: o86UxPXG8GmNUKREHvVl2ycM0ljvaXHrFUm047S0nHo=)
2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:87:7f:6e:ff:d6:0e:42:85:a6:1b:24:2e:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Jul 28 21:01:42 2026 GMT
Not After : Jul 29 21:01:42 2026 GMT
Subject: CN=89352bddd06552b1f5b41b2b59305fe2b6333665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:f4:31:aa:dc:a5:1c:6f:b7:36:aa:92:f5:
58:39:6f:ee:c4:f0:94:81:57:68:7f:d5:0e:3c:7f:
d4:33:0d:b8:57:c6:2a:e3:32:6e:85:6c:30:81:3a:
6d:64:4c:00:71:67:b0:18:29:66:3b:2d:51:2b:87:
4f:67:bb:dc:9a:e3:0c:ec:6c:7e:a4:3d:84:11:2a:
7b:68:cc:ca:cb:d5:4d:c2:b4:ea:e9:d0:70:52:7a:
56:2e:0b:d8:75:58:e0:7a:42:59:37:ba:d9:36:b3:
ee:39:97:fa:cb:17:62:38:de:f9:8b:06:fe:90:9f:
84:03:ea:ba:6e:ef:f5:88:04:3b:d4:d6:32:d0:e1:
4e:72:7f:4a:3a:d9:6b:bc:52:a7:fe:a2:d9:2d:56:
d9:fe:29:27:91:c3:3b:a5:3a:ee:0b:57:33:90:bc:
f4:ff:f3:f1:dc:16:93:cc:f9:87:dd:26:32:06:70:
98:30:11:43:07:ba:a1:5c:7a:33:db:53:c3:55:5d:
a6:e0:68:d9:0a:78:9f:c8:af:3e:ec:61:0d:22:e7:
80:72:ec:84:f4:be:e8:59:62:80:69:96:1d:1b:f5:
26:97:76:64:45:b3:91:43:11:fa:aa:eb:9e:c3:04:
86:42:e0:19:f3:ee:95:bd:02:5e:2a:cf:73:89:c1:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:2B:DD:D0:65:52:B1:F5:B4:1B:2B:59:30:5F:E2:B6:33:36:65
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:96:40:5e:cd:35:79:85:32:57:4e:fb:8e:94:1c:58:7e:
3d:52:2c:e9:30:bd:19:c6:52:66:5b:a2:76:8c:26:c9:d2:60:
24:cd:d3:60:39:a5:6d:5e:96:b3:78:09:b4:ff:14:6b:f1:3c:
a0:9c:d3:c7:f2:81:84:82:2b:8c:28:59:4e:96:0f:ba:88:f5:
8e:90:0e:73:ae:78:ee:84:ac:77:3d:5d:78:22:c6:64:97:13:
c3:b9:22:09:c0:1c:77:d5:46:88:8c:94:59:d0:f7:09:36:72:
e1:26:b4:81:e8:f3:1f:01:66:01:58:3d:df:5f:f3:6e:e2:2e:
31:d0:a9:60:03:d1:25:4e:47:b2:fd:b0:b3:e5:23:95:71:08:
98:1f:89:61:dc:a6:15:61:43:12:3f:bc:41:a6:07:5c:c4:07:
74:96:23:b5:6f:5c:7b:d1:7c:99:41:e4:80:46:41:18:bc:86:
e4:24:f0:3e:e2:14:51:5f:2b:02:60:cf:69:f9:b4:d7:84:e3:
fb:0b:ea:8c:05:b0:1c:80:b1:9f:6c:52:25:8c:cd:4c:a1:0b:
af:4d:30:f8:aa:50:2e:0a:6e:27:c8:10:cd:89:62:cc:d8:50:
fb:50:ae:44:a1:4d:65:41:75:e5:cd:35:52:10:7c:67:23:94:
34:6d:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:54 2026 by rpki-client