Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: 6lF7QwiLFwF3NuktoBFRBcYujkbqOIMfaOmwsZdDiZQ=
Subject key identifier: 16:16:39:A9:72:04:64:76:4B:34:3F:E7:4D:72:F6:2D:78:4A:BD:19
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 019CAA8F81EF58B4D12E2BD405E1CD7C5800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 0524
Signing time: Sun 01 Mar 2026 18:00:57 +0000
Manifest this update: Sun 01 Mar 2026 18:00:57 +0000
Manifest next update: Mon 02 Mar 2026 18:00:57 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: auZyhSemqsaS6x02U09ImCzPKm43WHl65gH04UsrT7k=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:81:ef:58:b4:d1:2e:2b:d4:05:e1:cd:7c:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Mar 1 18:00:57 2026 GMT
Not After : Mar 2 18:00:57 2026 GMT
Subject: CN=161639a9720464764b343fe74d72f62d784abd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:e4:c9:9a:6c:c9:54:19:9c:b0:fc:17:92:
5e:9c:00:23:f9:5c:5d:66:37:0a:3b:5e:d6:49:f4:
81:8b:7a:4d:1b:df:6e:0a:b8:72:7a:fd:74:3e:5a:
77:ec:a8:f7:71:04:bc:58:a3:ca:24:6b:23:7f:e6:
7a:b0:b2:dc:30:25:a2:1b:6c:41:51:6c:a8:df:bd:
ee:a5:8b:fa:89:72:a4:4c:de:9c:5e:a6:cf:52:b1:
19:e3:71:e5:9c:a5:35:51:d1:50:f2:af:35:11:0c:
11:6c:46:d4:9e:c2:74:ae:2e:f5:17:05:90:75:02:
22:95:de:cb:6e:97:2a:3c:43:cf:ef:59:3b:9f:df:
64:2d:fc:48:91:d7:0d:f2:b4:cd:5c:3f:1f:a2:45:
10:87:f5:50:bf:82:be:45:05:48:07:a4:b1:86:b8:
34:ed:49:56:0e:6b:1e:c3:ee:d1:79:7a:fe:15:11:
44:98:f4:53:f0:4f:20:ec:56:e4:ab:12:4a:ee:37:
71:96:26:a0:25:ee:a4:f4:ea:cb:86:b6:e8:35:5d:
2a:68:6c:02:3a:f1:5b:cb:48:5b:a2:81:65:02:d4:
1e:e9:8f:6e:cc:3c:b4:7c:2d:c6:c4:ab:66:eb:69:
79:52:82:d5:a2:38:f7:c7:2d:00:a8:d2:3d:b7:b5:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:39:A9:72:04:64:76:4B:34:3F:E7:4D:72:F6:2D:78:4A:BD:19
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:4b:07:03:3c:67:2d:1f:37:12:bc:67:bf:a7:37:62:af:
1e:7f:b8:34:17:9d:bf:ee:e9:ba:cf:1a:70:7d:9c:f4:f2:d1:
ef:ba:0d:fe:47:33:c8:24:2e:3c:96:3a:a9:37:7e:96:c2:60:
79:3f:f7:d9:78:4c:fd:05:15:13:b4:be:44:08:9c:e9:34:15:
7d:6c:53:35:2f:7a:bd:50:cc:83:7c:3c:5f:da:fc:c1:53:89:
22:20:24:ae:54:37:6e:e9:28:17:1b:75:a7:7f:2e:a5:0b:28:
6f:5f:b2:c8:b8:45:1e:8c:2a:6d:f2:48:2b:eb:d8:6f:0a:88:
8d:e9:4e:80:75:29:1d:aa:13:6b:bb:96:8c:e4:f0:71:2c:c7:
cd:b2:82:a3:6d:f6:d2:97:69:7e:af:94:1f:b3:0e:a2:ea:22:
21:28:b7:50:ae:c6:19:4a:27:f6:3e:8b:6b:c0:65:01:5e:bb:
9c:a4:b2:bc:a0:1f:71:ea:92:9f:11:33:76:ff:42:30:00:ff:
ca:92:fd:92:0c:31:fb:b1:4e:85:57:31:c6:13:73:2a:2f:a5:
12:fa:e3:9c:2c:c9:ac:79:61:60:f7:2c:50:7d:3d:f5:8c:db:
9b:14:e4:0b:81:ad:ab:b5:4f:48:92:29:df:5c:35:3b:d2:08:
dd:3c:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:06 2026 by rpki-client