Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: Hw7blSA5XcANTeHlwf7GbXXm4d/CYzNJqUvCQpukuTM=
Subject key identifier: 2B:AC:FA:44:BC:02:ED:7C:E1:9B:DC:64:9A:47:14:38:30:CD:D0:3A
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 01A0D872288F964A01E055AE199384DAC820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 074E
Signing time: Fri 25 Sep 2026 12:02:35 +0000
Manifest this update: Fri 25 Sep 2026 12:02:35 +0000
Manifest next update: Sat 26 Sep 2026 12:02:35 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: o2GCy9vMyyyVlvpURceRvI7Ilu83OUsTHF7nj321E1Y=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:28:8f:96:4a:01:e0:55:ae:19:93:84:da:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Sep 25 12:02:35 2026 GMT
Not After : Sep 26 12:02:35 2026 GMT
Subject: CN=2bacfa44bc02ed7ce19bdc649a47143830cdd03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:de:f2:de:6c:96:19:5c:4e:b2:84:57:09:
cb:75:6a:77:7d:22:1b:06:06:fd:67:bf:2f:b3:32:
d2:49:0e:c5:4d:e0:b0:2a:9f:73:0d:32:47:25:86:
5b:a3:ea:8c:6f:e3:87:b0:5a:92:31:4c:73:08:59:
c7:f4:72:65:b5:db:62:fb:b9:22:15:be:e4:ab:1a:
2f:98:a1:28:61:0a:5c:73:62:14:74:e3:be:db:c5:
fb:e8:d9:57:2c:7e:3e:df:c0:b6:42:17:e4:dc:d1:
0e:1e:3a:67:f0:34:9d:b4:9e:36:45:68:52:98:81:
88:5f:f1:fe:33:25:98:38:3a:67:6a:89:bc:82:33:
6e:d7:6f:9a:68:fc:25:e4:95:13:fc:84:1c:93:69:
79:d2:82:f9:fe:c5:8f:eb:33:81:c0:d1:a9:be:28:
72:a3:ce:31:f4:ab:c8:6d:dd:5f:c4:35:0c:a7:d2:
09:59:61:c5:d3:fe:dd:1a:75:5c:37:b4:35:ff:bb:
8c:d5:43:63:19:71:18:44:94:f3:13:88:cb:d6:a5:
e6:4d:16:c9:4a:1b:c1:f0:eb:66:e1:6e:40:38:b6:
91:d4:90:40:d0:14:98:0e:97:34:9a:7f:79:27:f6:
c1:e5:cc:89:1f:4f:5d:b7:02:75:9a:13:69:f6:af:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:FA:44:BC:02:ED:7C:E1:9B:DC:64:9A:47:14:38:30:CD:D0:3A
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:42:62:56:e7:88:72:01:e9:dc:31:98:c2:e8:f5:63:0b:8e:
80:78:3d:de:2e:65:95:4e:03:36:00:cd:bc:53:71:49:c2:cd:
f0:1b:a0:32:dc:74:d2:c1:5f:76:68:00:f4:25:f0:e6:64:a8:
65:ea:40:9f:3f:d3:81:95:c7:d2:d8:cf:1b:3f:6b:ec:0d:ac:
de:40:a3:46:5f:08:41:04:2d:c9:97:b2:42:cd:35:4f:08:2e:
d7:20:67:b5:5d:cb:10:70:4b:2d:ba:1c:03:38:d1:bd:3a:57:
30:f9:8e:03:b9:e2:70:14:e2:33:1a:c2:19:dc:7f:06:90:52:
ef:9e:92:e1:49:46:12:2a:be:fd:bf:0b:44:ba:6a:10:d2:7f:
ca:cf:11:16:65:34:05:35:6c:60:7e:6a:e9:0c:d2:7d:4e:9e:
18:e7:17:dc:5c:d6:ec:10:bd:b9:3f:f1:e3:8b:df:3f:08:ab:
3a:8d:ab:6b:6c:42:09:55:0a:70:18:55:b6:1e:17:d9:dc:67:
88:9a:a1:f0:1b:be:23:1f:1c:fa:af:d2:b5:a2:64:97:10:8d:
5a:0b:3a:ed:52:af:b5:74:0d:8f:28:d5:a2:29:27:86:12:ce:
aa:e2:6d:6a:fb:98:5a:cd:01:ca:57:3e:3d:c5:04:d4:26:c9:
d7:33:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:05:39 2026 by rpki-client