Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: vGbfo4cn9oIOHGjMXVxDA4InZlLZe+LmGQoxzecJT0s=
Subject key identifier: 8E:59:6B:FA:33:71:3E:5D:11:95:14:D0:58:E5:A5:8C:D8:A0:76:5C
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019D9AABB8F451388F1DAC9F82AD1DEFC2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0FB9
Signing time: Fri 17 Apr 2026 09:00:38 +0000
Manifest this update: Fri 17 Apr 2026 09:00:38 +0000
Manifest next update: Sat 18 Apr 2026 09:00:38 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: nxayiOdiSW2m/+/Vgti4cXmj66gzMi3aHjpAn9/Xak0=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b8:f4:51:38:8f:1d:ac:9f:82:ad:1d:ef:c2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Apr 17 09:00:38 2026 GMT
Not After : Apr 18 09:00:38 2026 GMT
Subject: CN=8e596bfa33713e5d119514d058e5a58cd8a0765c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:40:d3:67:0a:c8:36:34:ed:44:83:dc:6f:
90:04:46:83:cd:fd:fe:4f:96:a6:a2:eb:42:77:42:
79:e6:e3:e2:58:d7:e7:9d:5b:cb:0b:ba:73:6f:31:
b0:dd:59:03:4c:0a:f4:c5:95:fd:65:5a:93:09:0f:
33:60:48:16:04:1e:b7:df:63:2d:a6:f7:43:42:76:
62:31:4c:5c:15:2c:4f:3a:0a:f0:a9:9f:5f:7f:e3:
f8:33:2f:36:7f:0d:d0:e6:7a:41:02:71:0b:ba:f8:
3f:a0:0b:fe:a5:4d:7d:71:34:cd:76:57:ed:d2:cb:
26:ec:d6:61:62:6c:5b:ea:f5:9a:56:15:63:f1:f4:
48:95:87:af:90:a2:f7:43:3c:9a:9d:61:16:bf:c9:
93:4d:21:ab:66:91:e9:f7:ae:ae:38:64:97:1c:e0:
2e:2d:1d:e1:8c:f2:2e:1c:1d:92:eb:5d:34:bf:21:
0a:22:7d:75:fc:6c:5d:d6:f9:45:43:3f:f4:8a:2a:
2b:7f:26:1a:33:2f:57:87:14:cc:3e:2f:03:83:3c:
67:44:7b:9f:aa:92:3b:dc:66:b0:d6:08:8b:f4:69:
02:ce:3d:a8:0e:d3:10:90:97:86:8c:39:fd:33:eb:
fd:b1:08:0f:6a:61:d4:01:40:a5:18:42:33:22:ae:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:6B:FA:33:71:3E:5D:11:95:14:D0:58:E5:A5:8C:D8:A0:76:5C
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0c:a9:7e:e6:2b:c2:75:02:68:14:f8:3a:21:a6:2a:fb:6e:
4e:ab:1c:06:2b:45:16:d9:af:a4:ba:92:37:d4:83:cd:e6:40:
0c:a3:c0:fb:54:6d:96:f9:f4:53:b7:ab:d8:13:be:eb:1d:65:
e2:6f:6f:1e:22:03:c9:74:3b:5d:4b:65:89:a8:0f:44:fa:dd:
df:3d:56:6a:b7:c6:77:0b:a3:fb:d7:c2:58:fe:da:01:b6:55:
19:57:48:4a:52:c4:fd:f1:d8:bd:79:a1:2b:65:a8:fc:11:fa:
4c:09:0b:a8:ab:84:af:2e:e8:bf:2e:d0:76:cb:3b:ba:d5:c5:
7d:28:c9:de:7d:29:5e:c7:57:e6:0d:0f:a4:c9:19:d4:57:59:
df:26:a7:4b:52:49:d5:00:69:ed:55:34:fd:f9:21:21:03:68:
d0:b1:b3:26:88:11:04:64:dc:04:26:e9:10:56:73:e3:41:3e:
b2:07:99:24:00:3a:4e:d6:51:f0:40:67:17:a0:47:bf:49:e9:
62:7e:1d:cf:0d:ce:8a:6b:43:dc:8d:bc:38:cd:ce:e5:83:e2:
d4:27:a0:8b:91:6b:f3:ca:1b:96:73:6b:0c:6b:7a:b1:4b:c0:
74:59:cc:ca:03:66:bc:3d:20:43:de:62:d4:50:73:d5:8b:9f:
10:92:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:54 2026 by rpki-client