Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: lXuMjhLNRr4viTBjmC6aBcSCNIdAbJtjZsnyoicMZLI=
Subject key identifier: 51:73:E5:C0:5A:A2:E4:EA:C6:AF:68:4B:A7:80:C5:1F:81:E5:33:5A
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 019CABD94B330B0D3E3B85343D0F25842E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 0332
Signing time: Mon 02 Mar 2026 00:01:10 +0000
Manifest this update: Mon 02 Mar 2026 00:01:10 +0000
Manifest next update: Tue 03 Mar 2026 00:01:10 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: Axqak0fHgw98xAxj3tAkk2XHitYlQpTEGjvtfahGZIM=)
2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4b:33:0b:0d:3e:3b:85:34:3d:0f:25:84:2e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Mar 2 00:01:10 2026 GMT
Not After : Mar 3 00:01:10 2026 GMT
Subject: CN=5173e5c05aa2e4eac6af684ba780c51f81e5335a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:f0:b8:d0:99:5a:a5:2f:1e:5b:26:f0:1b:
1b:3e:9f:41:61:00:cb:81:04:83:24:b7:c2:25:02:
96:64:a9:e8:92:7e:b7:bc:b7:e7:30:e8:1e:bd:7b:
9e:0a:1e:45:8a:20:73:99:ee:b7:97:d6:e1:1f:60:
3d:0c:fc:aa:65:71:57:b1:42:ed:7e:59:6a:b9:fc:
51:22:46:15:04:13:0a:ad:90:53:ae:08:4b:f9:16:
50:a2:63:51:3e:35:e8:f2:3f:62:2e:a9:2c:69:ca:
c2:4d:dd:5e:db:86:69:8f:47:55:c4:96:b5:b7:0a:
73:29:58:bf:7f:8e:00:1d:45:6b:b0:91:32:8a:b4:
ed:bd:ba:bf:88:5f:b9:61:fe:3b:1b:4f:05:b6:2d:
b2:07:35:ef:5f:05:84:36:bd:79:0b:b9:6c:3d:a7:
d8:30:83:b4:55:34:0f:56:03:e6:4c:f5:b8:8d:28:
ed:52:8a:9a:c3:37:49:31:36:72:63:ea:ee:81:e3:
b4:9a:6c:cb:27:da:b2:c8:8d:fd:75:d9:0a:bd:b5:
25:32:fa:77:64:44:19:84:d1:f3:1d:ce:5d:30:85:
a2:f7:f8:24:d9:3b:bb:c2:d2:70:78:72:26:c3:d8:
f1:9b:8e:a6:bc:e7:ec:1d:eb:6c:33:63:d4:a1:2e:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:E5:C0:5A:A2:E4:EA:C6:AF:68:4B:A7:80:C5:1F:81:E5:33:5A
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e7:f1:d9:98:b5:00:ef:19:ad:b3:fa:af:f2:2d:ea:5a:c1:
ba:27:cb:35:e5:21:46:4e:92:73:a1:a0:4c:79:91:56:48:79:
a6:f0:ce:db:a8:7a:47:10:a3:16:df:a2:a6:eb:22:7d:b5:19:
e8:6b:74:8e:69:de:82:6e:a8:f0:37:04:3e:dc:ed:19:76:1f:
3d:de:44:93:f9:5f:92:9f:cb:40:d3:55:8e:3a:1b:57:19:3f:
54:fd:5f:26:c3:ff:cb:0d:cc:92:be:31:4b:22:dc:1a:76:85:
ff:4d:82:e0:c6:98:34:8b:40:40:c8:18:21:dc:21:76:2f:7a:
b5:f1:98:0c:97:9f:fd:92:22:1b:d6:7d:78:f6:01:d8:7c:43:
9a:41:39:88:cb:ae:00:a0:e7:ac:86:06:ec:e3:f3:22:8e:1f:
6f:2b:98:65:9a:59:1a:b1:3a:35:e1:07:84:8f:4c:48:cd:73:
66:e9:0b:a3:50:61:0c:e5:95:9d:3d:f6:e5:f2:09:58:2d:0f:
8f:4d:2a:5c:c1:60:00:cd:6b:eb:9e:47:36:dd:2a:ef:b9:59:
6f:39:08:89:90:44:5b:ea:88:19:45:cd:95:4b:6f:f7:8b:68:
a5:82:b6:7c:db:46:d1:da:0c:bc:0d:c1:cf:de:68:9f:72:1c:
ef:c5:a8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:15 2026 by rpki-client