Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: obBu4vazVnXNXLM1AwMt1n5+4/FU931/H4Rf7PCf9yI=
Subject key identifier: 09:5D:E0:39:03:1D:19:57:0B:B6:E2:0A:E4:35:30:D6:9A:96:EF:7C
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 019D9A06D12DE485CB8515DC8ABA30B450BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 05A0
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: srqynME5pcAVVtquQnxNaYizy6kE1/iJBMZscKXtR7c=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d1:2d:e4:85:cb:85:15:dc:8a:ba:30:b4:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=095de039031d19570bb6e20ae43530d69a96ef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:5b:2f:2a:41:5e:b7:d3:00:37:e0:5c:23:
04:a9:6a:43:36:5d:85:76:9d:6f:7f:3f:42:d0:62:
7a:b9:43:85:70:40:38:ae:1f:a5:90:f0:20:24:28:
ed:7e:21:34:0b:fe:8f:e8:30:fd:72:43:8b:af:09:
8f:f9:56:47:5b:01:34:02:38:dc:f0:4f:8b:50:0f:
31:15:05:86:a7:9a:b1:a7:e1:02:96:c8:2f:dc:9f:
63:d9:8a:ca:bd:22:0e:7d:5c:ca:da:53:c9:19:ca:
6d:60:87:a6:ad:5c:29:16:c0:d2:ff:99:8b:25:cf:
e9:03:b1:21:1c:57:f3:7d:47:30:b7:9d:7e:1f:4d:
2f:19:ad:8c:9f:04:6d:40:10:80:df:6f:fb:e8:6b:
b5:ee:e5:b5:e8:5c:2d:03:fd:7b:01:ea:bd:7c:b4:
8f:06:93:84:2f:2a:26:0b:2d:ca:06:f1:78:1b:fb:
32:0a:30:79:eb:64:0c:7f:d3:63:80:06:0b:ff:7d:
42:2a:e5:1b:74:31:fe:08:77:61:48:6a:17:40:da:
b3:68:76:2d:2e:0e:31:d2:10:13:5d:68:1d:55:28:
73:50:43:58:91:1a:7e:87:95:60:f4:8f:65:b9:44:
e6:53:12:9f:20:8f:53:20:de:61:0e:0c:13:3f:81:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5D:E0:39:03:1D:19:57:0B:B6:E2:0A:E4:35:30:D6:9A:96:EF:7C
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7f:16:6c:49:e6:aa:35:e1:3c:30:a8:17:96:2f:bd:32:1f:
53:38:3b:84:f7:ba:ae:54:b6:38:59:b5:6e:3f:38:dc:bd:49:
5a:bf:48:4f:b4:07:2a:39:60:40:0e:e0:cd:d8:c4:39:99:92:
44:c5:9d:dd:94:8c:33:b1:85:24:dc:78:6c:d3:9b:d4:35:51:
29:96:63:24:b0:64:02:ca:74:c7:c6:8f:47:03:72:28:6c:b0:
dd:1a:f2:ca:9e:d8:39:c4:63:4d:73:98:7b:a5:d6:0b:2c:5d:
75:36:d3:8b:fb:ba:ff:62:90:ba:72:d9:2b:68:bf:05:87:b2:
82:72:df:51:58:70:73:af:d6:83:6c:aa:15:76:26:f7:31:eb:
ed:19:9d:3e:55:a9:8c:51:c1:4b:31:42:bc:31:21:8b:c1:e7:
e9:f6:8c:0a:64:bf:50:69:fd:16:55:12:87:05:fa:f0:b5:c7:
75:6b:6a:37:f5:ad:23:03:e6:e0:40:df:44:62:cb:e2:4c:7d:
9b:63:34:51:9f:f4:98:85:40:97:7f:48:6a:75:a8:5d:4c:2d:
70:64:f9:d3:3c:dc:98:1f:3c:3c:54:80:5f:06:2d:d0:58:ae:
f6:f6:b9:b1:97:a3:31:55:8e:36:69:7d:72:28:6c:ce:d9:91:
12:57:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:55 2026 by rpki-client