Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: u85w5Srrs4ED9iRusUvPF4KeXA9gHcj6d0p9kGxqq2I=
Subject key identifier: 43:19:54:7C:8A:1E:5E:B7:DC:C0:9D:CC:01:90:31:B9:88:99:94:18
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019FA975A6BCCAC1CF838A5E7880244443AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:01:27 +0000
Manifest this update: Tue 28 Jul 2026 16:01:27 +0000
Manifest next update: Wed 29 Jul 2026 16:01:27 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: u7KxJMXqde2IlRUyz/n5/4RLzsJjATNNEGGvIpBGilw=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a6:bc:ca:c1:cf:83:8a:5e:78:80:24:44:43:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Jul 28 16:01:27 2026 GMT
Not After : Jul 29 16:01:27 2026 GMT
Subject: CN=4319547c8a1e5eb7dcc09dcc019031b988999418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:1c:58:5c:7d:ce:68:0f:51:ed:81:91:8b:
4c:4c:1e:0c:77:57:95:c8:60:e1:36:e1:17:2f:3b:
d3:fd:20:a5:4e:33:a0:f7:fa:76:e2:1a:ba:8e:47:
07:7d:ae:69:d9:64:b7:84:bc:5d:a0:f5:30:e6:92:
61:d2:33:26:34:5f:a4:12:24:0f:38:02:26:d8:ec:
94:32:43:1b:ba:db:fd:f8:39:94:f3:26:58:06:69:
b1:4e:d9:da:ce:bd:d1:50:e0:b0:e2:b1:3e:9c:53:
f2:2f:ba:e2:d2:57:8d:9f:25:db:c9:ac:83:25:e6:
59:ba:f6:3d:7e:3d:1f:d4:a2:d0:8d:d3:b1:6d:2e:
80:f8:a9:93:0f:b5:70:cf:ed:03:6e:9a:ef:87:e3:
bf:10:ca:29:4b:a0:aa:b6:e3:50:41:e4:3a:a1:4b:
53:3e:f9:a1:94:5c:24:1c:3a:09:72:39:f1:b9:9c:
37:b1:7e:cc:7f:5c:83:b4:93:8d:f3:97:80:24:15:
67:c2:53:54:b3:3e:1e:36:9b:e4:d2:cd:e0:0d:b7:
9f:c8:6f:d0:77:93:7b:94:5e:28:c9:12:aa:9b:59:
06:b6:90:cf:f9:51:55:0b:68:3c:b6:29:04:01:6c:
26:d3:3d:77:44:1d:26:b7:1e:43:90:65:a3:c9:21:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:19:54:7C:8A:1E:5E:B7:DC:C0:9D:CC:01:90:31:B9:88:99:94:18
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b1:9f:5c:7e:6a:b1:9e:a2:61:35:1d:d4:3d:8d:86:67:12:
be:d4:fc:4e:86:bd:dd:84:3e:6b:31:42:9f:e3:1f:16:72:1a:
8d:81:18:b0:1b:76:45:e7:e4:c8:86:84:7b:c8:24:cc:b1:d0:
fe:bf:cd:74:ff:ba:ab:f4:0e:7c:33:38:21:15:a5:49:19:d7:
0b:19:82:05:36:bf:70:6b:59:2d:28:7a:80:7e:24:ee:e3:61:
cc:8f:c3:e6:ec:ae:a9:0a:2f:8a:4b:19:71:9a:44:6f:c9:7e:
1b:ae:a5:17:48:2b:2e:5e:33:ab:69:6e:27:69:be:50:a8:2c:
c0:96:80:1a:ba:9a:b2:f8:55:c6:55:b1:45:44:ad:65:ff:89:
34:1d:d0:c7:68:5b:96:e1:6f:9c:3d:0c:31:5f:81:b6:4e:8e:
c4:85:b6:06:0d:b4:5c:e3:32:3f:15:b8:9f:ed:15:1a:b4:06:
d7:8f:d8:27:33:3c:ef:ad:71:bf:f8:e7:32:4f:a1:15:b4:e6:
f0:0e:52:58:7a:2a:83:8b:9b:2b:3b:3e:91:63:e2:a2:6c:7d:
32:b1:81:55:cd:f2:f7:43:a5:d8:26:aa:38:a5:e7:6b:e5:09:
b2:67:ab:bb:81:0c:c8:36:b6:01:9c:78:01:8c:f9:4c:1e:99:
9c:14:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:55 2026 by rpki-client