Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: yBZYKDNPwqLOaOp723Z4L2rt5xroyEQdHydoVc8vlRQ=
Subject key identifier: BA:D4:88:AE:10:65:EA:A7:95:E6:B9:20:C5:55:B9:31:25:EC:E6:05
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 019CAB6BD62DFA8B254E73D51CAA29714460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 15C4
Signing time: Sun 01 Mar 2026 22:01:36 +0000
Manifest this update: Sun 01 Mar 2026 22:01:36 +0000
Manifest next update: Mon 02 Mar 2026 22:01:36 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: zSUQgTgEOvTImECgb+XJ/3bjzlKVG6CDpLhSjKXwFwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d6:2d:fa:8b:25:4e:73:d5:1c:aa:29:71:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Mar 1 22:01:36 2026 GMT
Not After : Mar 2 22:01:36 2026 GMT
Subject: CN=bad488ae1065eaa795e6b920c555b93125ece605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:ac:05:fd:80:11:d9:35:2e:71:7d:a9:4c:
90:3c:9b:1a:d9:69:41:63:64:18:bb:c3:26:f5:9c:
b9:18:9f:a6:4b:12:2a:42:1a:67:eb:8c:ea:85:27:
12:38:b4:cb:9e:66:f2:34:8b:41:22:e4:c6:58:37:
5a:25:ea:5a:b5:70:6e:bb:ab:81:39:83:e4:bc:88:
97:10:b1:eb:e3:f3:cf:3b:54:da:2f:fb:0f:80:6a:
56:34:59:47:8b:0f:f1:14:41:ed:32:27:6a:40:9a:
99:88:24:b7:08:e8:db:c2:5a:2f:72:81:72:90:a8:
b7:1e:45:6b:99:59:e0:67:ee:79:d6:b2:a5:5d:d2:
b3:8d:e8:dd:f3:56:b1:40:24:a0:48:b5:7e:e7:0a:
10:a7:98:1a:76:c9:75:bf:4f:d8:c2:00:87:92:59:
03:ac:07:a5:de:36:82:cb:58:b3:6e:d9:94:70:48:
d8:1f:19:1e:25:29:31:57:e9:d6:e0:d6:1e:b1:3e:
d0:17:fd:32:e7:fc:fc:6a:50:e5:08:1f:16:88:ba:
bf:f0:44:af:8d:0c:0e:72:c7:9a:4b:b2:8f:40:81:
3c:61:ed:d9:29:fb:8d:bc:5f:f2:d7:d0:c0:0f:ea:
9b:c8:4e:09:95:2e:a7:4b:7a:34:66:27:f4:6b:09:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:88:AE:10:65:EA:A7:95:E6:B9:20:C5:55:B9:31:25:EC:E6:05
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3e:9e:8e:c4:77:14:f2:b2:3b:76:2f:59:8a:2f:f0:d7:12:
81:9b:6b:3e:f7:6c:7a:ff:6d:7b:b3:cf:b8:0b:19:a7:f9:85:
00:07:3c:f3:75:ca:b4:27:af:88:78:8d:93:58:2c:2e:8a:82:
b9:a6:27:e4:d0:2c:44:06:7e:b4:6e:8f:9f:1e:82:29:f7:b8:
6f:a2:bd:6e:e7:fc:df:72:b1:82:52:f9:27:3c:07:f5:06:d8:
a6:ce:30:df:0b:d0:d1:c4:a9:0d:7f:89:c9:14:f7:2c:f9:a3:
ba:d4:b4:aa:76:5b:99:3b:19:f2:1c:d1:c3:29:d2:99:c5:36:
b9:97:93:b9:4c:20:29:4d:37:00:3a:05:48:0e:85:ec:0d:be:
58:85:c2:b6:91:07:6c:55:b5:17:60:05:51:07:db:55:59:35:
01:53:5d:35:9f:87:c6:2e:8c:0d:3f:7b:3b:f4:a4:72:fb:32:
ac:b2:48:0d:74:6b:0c:95:7e:e6:79:64:88:15:58:cf:5f:3d:
d0:91:51:da:a8:c6:da:b9:47:53:8c:df:ec:7f:29:79:77:39:
5c:3b:d9:32:c5:6e:5e:03:0b:a0:54:33:63:6e:cf:23:8e:f7:
68:b2:bd:58:4c:b5:d5:22:7c:e6:0b:d2:5b:f1:2f:31:f0:2f:
a4:7a:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:43 2026 by rpki-client