Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: yqaB3bu2fOhuojK3dSGN3k5Pp65YOeOjZtuvsXXIAjQ=
Subject key identifier: 28:CA:C3:A2:2E:E6:DF:33:8E:E1:E1:C6:14:00:41:B7:26:30:B6:E0
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019CAB349A9DA188C194BF7EC753474FC8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0F3D
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: YAR0+D0umch97PGmmGHYrYlKoKyqJb1V5cKvYNXPt3s=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9a:9d:a1:88:c1:94:bf:7e:c7:53:47:4f:c8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=28cac3a22ee6df338ee1e1c6140041b72630b6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:45:8f:c4:c1:1c:0a:df:66:95:50:c0:98:
29:a8:68:30:26:8e:e0:88:5d:80:c5:8a:44:c1:64:
8a:2a:c4:ee:23:6e:37:aa:95:e6:26:ec:ec:d3:f5:
dc:ee:f9:7b:32:24:37:02:f1:f2:1f:7a:d6:b5:4a:
0c:17:9c:86:76:34:2e:df:0a:0d:43:69:8b:8c:c7:
c4:ed:5f:bd:70:a9:07:98:ff:5f:c7:99:6c:e5:c8:
f1:3f:6c:86:cd:2b:4a:c8:d2:24:45:8c:da:a8:11:
36:38:b8:b1:80:f9:b6:8c:ec:c1:c3:a7:76:9e:ab:
b5:5f:68:0d:8d:14:11:fd:b8:86:28:22:da:38:6b:
6e:53:a7:fa:b4:ce:fb:c9:c5:51:a5:91:e1:53:6d:
db:29:e8:e5:38:9a:65:ad:ac:6d:c1:39:15:4f:67:
9b:fa:28:74:eb:53:fd:3f:81:6b:73:5c:86:52:96:
27:f8:0f:3b:bd:96:03:2b:50:1a:0e:39:df:e5:8d:
9f:1c:f4:1b:39:b8:d5:cf:25:d6:d2:e8:2c:d6:29:
50:49:4c:e0:83:28:24:22:dd:82:56:b5:5a:ea:ea:
97:a2:d9:02:75:4d:bd:6c:2d:0d:5c:08:b7:42:38:
90:48:7e:3e:75:aa:7f:f3:69:08:c8:62:b0:7d:ba:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:C3:A2:2E:E6:DF:33:8E:E1:E1:C6:14:00:41:B7:26:30:B6:E0
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bd:15:2a:72:29:7d:90:12:6f:84:75:75:c8:5a:cf:88:58:
64:82:4c:37:54:eb:d4:eb:9c:f0:48:31:cc:e7:e6:9a:7b:fb:
4c:48:d8:ee:d3:d0:ee:9f:07:e1:df:85:a5:9d:0c:72:b0:8e:
6b:1a:43:0f:c4:bc:13:70:76:7e:70:88:03:7a:85:90:cf:ac:
e0:94:44:b5:3f:6b:26:25:52:a4:f9:dd:ef:23:5b:17:7f:e2:
02:c1:71:53:8d:bd:60:a8:2e:01:38:7c:9d:f4:c0:10:c6:5a:
fd:ce:c2:1d:fd:fd:5d:d1:1d:0e:f0:11:b3:c0:69:69:ba:cd:
8b:83:75:d7:92:d3:e3:8c:dc:05:a1:ec:0c:54:cf:c7:09:ba:
ee:c2:e3:ab:d9:eb:6e:0b:7d:41:af:af:08:eb:c6:b6:f8:47:
a3:e8:1f:84:32:9f:52:92:b8:f3:22:21:d8:e0:e0:0d:f3:1f:
9f:9e:e1:16:9f:e4:55:7f:63:3f:36:3c:cb:f4:ce:a0:16:9f:
80:bc:a4:dc:e3:f1:d0:a9:99:eb:ec:24:eb:7e:48:e6:ca:3a:
2c:33:80:52:52:36:ca:97:56:e8:39:b7:8d:fd:d2:3f:03:7c:
1c:0d:e5:97:f5:53:ba:e9:07:a0:68:ff:29:51:31:e2:2b:52:
0f:28:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:08 2026 by rpki-client