Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: vB6fDE+EkfoGhqeDekE7jGtirm0oh8judaz9NTYk1BM=
Subject key identifier: 9B:4F:A1:DE:1D:CB:D5:50:0C:E1:64:C6:A0:20:86:40:20:A5:6C:7E
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019CAAC6A06BBB30ECB027BDEBDDD0EE78E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: skoNUDrCNzgPa4Y+yOJY+/HAVmmJ69Sl4s8WWzeOH7c=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a0:6b:bb:30:ec:b0:27:bd:eb:dd:d0:ee:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=9b4fa1de1dcbd5500ce164c6a020864020a56c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:a3:ac:43:63:c5:f8:03:f3:02:e0:e0:d6:
d0:68:0e:30:2b:dc:24:34:ba:3d:62:71:90:92:79:
39:97:7c:80:e2:24:21:89:11:6f:a8:53:1c:c5:6d:
07:ff:53:a8:5e:b3:08:0e:2d:92:83:aa:79:54:e7:
51:27:e1:34:78:15:5f:48:39:5c:7c:59:79:c6:fe:
6b:27:cd:3d:a9:61:ea:88:c9:7b:8f:5a:2c:af:64:
9a:8a:b7:71:74:c5:9e:e2:86:3b:e8:4e:31:24:65:
71:ba:57:c3:8e:14:ec:e5:1d:e1:3b:fb:08:d7:79:
8e:14:c1:86:f0:1d:8e:34:9c:3e:2f:92:75:e5:fb:
f6:69:87:23:02:47:73:2a:76:e4:1e:5a:bc:ab:6f:
c0:d0:0e:aa:d7:39:1c:bc:54:37:4d:5a:1c:f6:81:
5f:f3:81:e7:af:84:32:33:15:a8:9c:d0:d0:ea:5b:
38:be:45:ee:c2:14:c8:75:42:0f:4f:09:fb:9f:c1:
4b:16:98:a3:8c:54:2b:bc:16:e2:fc:15:3a:c5:37:
92:f8:fc:7b:e9:f5:65:4b:e4:0d:cd:67:c5:44:e8:
b1:82:7a:7d:1d:17:22:fd:37:41:b6:f0:8f:80:ad:
93:1d:af:f1:63:9e:64:4d:14:97:43:fe:72:6e:c2:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:A1:DE:1D:CB:D5:50:0C:E1:64:C6:A0:20:86:40:20:A5:6C:7E
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:38:1b:c0:63:c3:0a:0b:c5:79:10:09:03:24:61:5f:0a:f2:
fc:e4:c4:a0:1e:e1:8f:92:68:bd:38:8b:61:fd:87:89:6a:d5:
10:44:0e:ad:9f:f4:26:5e:43:2f:81:13:5b:b8:d5:94:a2:8e:
ad:40:ac:d4:64:f4:6e:4c:4e:4e:03:45:94:48:e0:98:96:87:
7a:d0:f7:46:27:34:d5:22:bb:7b:44:17:e8:84:25:60:24:99:
05:6f:42:c3:91:8a:e1:27:21:0d:69:2f:9a:9c:84:24:fa:9c:
63:2b:84:c1:7f:12:e5:f9:b4:da:29:68:12:1d:9f:69:b6:29:
63:f5:06:37:cc:49:79:4d:b9:6e:20:00:da:83:27:4a:9b:13:
95:f9:8f:54:bd:ca:1d:e2:bf:be:70:44:95:ac:c7:d4:23:78:
e8:6f:3b:fb:62:ca:70:05:0c:6b:05:59:9d:46:81:80:a6:0f:
3a:d4:de:c4:74:48:4b:ae:57:eb:67:d9:40:95:9f:c6:9a:81:
8f:d1:02:fd:cb:e4:eb:3a:21:9a:de:e1:6d:da:d6:0e:d2:d1:
9f:63:15:19:9f:00:fe:87:ec:6c:45:88:6f:f6:65:12:f8:6f:
d0:dc:3b:ea:ea:76:49:b5:1f:d5:21:44:f8:cb:46:31:4f:05:
aa:61:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:38 2026 by rpki-client