Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: 8t0rdRmf/QVA0KjJyoCCYq9lTZaeqLyaElWCK22TTsk=
Subject key identifier: 6A:5F:3F:7D:F8:CA:B6:AC:27:FF:F8:E2:90:4A:D3:A6:A1:75:B3:29
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 01A0D539277DCFC8DBF9682D1C1CDE624038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 1165
Signing time: Thu 24 Sep 2026 21:01:27 +0000
Manifest this update: Thu 24 Sep 2026 21:01:27 +0000
Manifest next update: Fri 25 Sep 2026 21:01:27 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: NSMJHXuY9cq726E5971SsNMxdNWSbk+6tZ/JFNV5XAI=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:27:7d:cf:c8:db:f9:68:2d:1c:1c:de:62:40:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Sep 24 21:01:27 2026 GMT
Not After : Sep 25 21:01:27 2026 GMT
Subject: CN=6a5f3f7df8cab6ac27fff8e2904ad3a6a175b329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:fd:a6:95:14:13:4c:8e:a8:5f:44:56:18:
d4:31:1c:4e:94:2b:2c:e8:91:4f:b3:be:e7:95:b5:
12:93:7a:98:7f:ba:e9:aa:33:11:a0:35:ce:4c:70:
43:33:9d:bb:c1:48:e4:78:a8:e4:3a:f5:66:cb:38:
aa:e7:4a:a2:13:8d:85:25:03:9f:83:6c:10:ea:f9:
0e:41:3d:5c:c3:12:cc:15:95:5b:f4:58:4b:64:e1:
51:67:86:0c:41:51:a8:16:4e:82:b4:ad:e3:18:9d:
ad:cf:49:78:69:e2:21:db:f8:36:be:c2:ea:13:44:
bf:37:fd:f8:b5:de:c0:de:ea:ee:db:0a:de:95:23:
ca:67:7a:a6:43:0d:0a:d0:f1:2f:33:7e:72:d6:0e:
42:85:c2:32:b6:bf:fe:dc:e4:f7:4f:43:57:8f:05:
5b:7e:01:a3:27:fe:3d:7b:a0:f4:75:d7:e5:a7:82:
d9:99:b6:23:74:aa:e7:f5:4c:24:36:31:df:c4:26:
a9:3b:92:e5:ed:ff:d6:84:3b:31:5f:86:e3:be:c0:
08:22:41:99:dc:62:c3:a7:d0:f9:01:95:35:de:24:
8c:af:e4:d7:4e:62:73:fc:7b:56:17:18:ee:ed:d7:
0f:a3:da:5c:f1:98:2e:87:5f:54:f3:08:c7:92:50:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5F:3F:7D:F8:CA:B6:AC:27:FF:F8:E2:90:4A:D3:A6:A1:75:B3:29
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:64:08:4f:8b:f8:f9:ee:fc:ff:51:41:d2:24:93:3e:4b:f0:
de:d3:fd:fc:32:68:eb:f9:e7:a0:df:11:dc:7f:6c:c9:7b:70:
3e:f7:66:45:6b:03:7e:11:92:bd:1c:59:7d:c8:c0:12:d5:e3:
f0:2e:ed:54:50:47:b6:fe:c3:cc:30:e3:53:0c:da:6c:4f:e1:
a4:cc:78:a6:2a:23:8c:2a:cb:61:d5:ca:b5:d7:b2:38:6e:35:
d9:70:4f:d4:33:d8:7a:25:3d:e3:5f:8e:bf:aa:4e:40:b6:38:
60:a8:9b:89:9f:70:0f:9d:ee:33:77:8b:54:6e:36:e1:3d:85:
ca:fc:34:15:c5:0d:3b:c0:6f:b2:12:fa:d2:c0:79:5c:ac:29:
4a:94:05:29:a3:12:31:50:8c:83:6e:b3:dc:c5:49:09:96:54:
d1:bb:41:4b:33:67:44:50:1d:a1:72:ec:7b:3d:66:1f:54:65:
a7:91:41:f3:c9:cd:f3:9f:af:cd:bc:98:12:7a:f9:b6:4e:b2:
5e:97:dc:39:0c:20:3a:9e:9a:71:a3:39:db:d0:0e:dc:ee:f2:
11:4c:04:99:07:7a:6c:e3:f1:10:a0:c9:17:bb:72:5e:1e:ca:
80:52:e0:fe:d7:1f:e5:4e:76:a8:a0:15:9e:50:ba:36:34:81:
92:78:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:03 2026 by rpki-client