Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: 37mHkYyZAGfC3IMUwN8pc77YSJUByfODmNtUT2PBxUA=
Subject key identifier: 01:C5:01:69:F9:A4:DC:B3:94:38:00:F1:ED:81:0B:D5:10:21:D9:B5
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 019D38D32B3B994FED9AD2C18A4E8117E600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: jCBdm8ajjHPiqYwVWp9nqM+l2yItJ6mSlwWlbUKAawk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2b:3b:99:4f:ed:9a:d2:c1:8a:4e:81:17:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=01c50169f9a4dcb3943800f1ed810bd51021d9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:1c:82:59:83:5a:86:27:29:d8:5e:62:95:
55:95:a1:ea:a4:ab:31:de:fc:88:30:8e:27:54:61:
6c:50:ca:d1:7d:2b:e7:31:d8:03:6a:3f:ce:92:4a:
7d:87:f4:05:d4:b7:9c:4f:e4:e7:40:69:f8:ef:d2:
f1:d0:a8:18:b7:41:50:5b:51:09:26:21:ee:7b:d8:
b1:7e:a3:56:bc:24:99:de:d5:e8:a7:d1:29:7a:cc:
1c:d9:87:a0:77:c7:4e:49:ef:b1:67:12:7d:0d:cb:
fc:b1:61:69:7f:f3:de:a3:23:de:dd:7d:11:15:3b:
2e:32:da:47:94:ed:7b:14:04:e6:a6:b0:f2:94:43:
dc:71:30:89:91:39:d5:57:02:42:34:6e:d4:8d:88:
97:b1:a1:30:8d:61:af:fe:eb:6a:23:2c:83:17:1d:
27:fc:22:35:ee:c9:7c:88:1e:d4:7b:ce:70:87:e9:
6a:64:f9:4e:4a:49:8d:13:18:32:2b:e7:95:59:94:
bd:71:1e:d9:bb:cb:c6:be:44:10:ec:ca:5b:2e:aa:
da:dc:71:bc:0a:40:23:2e:66:0c:a6:e0:f9:0f:c5:
82:71:e1:63:31:23:2a:ca:e7:f6:7f:99:0b:44:91:
8d:dd:52:50:07:de:5f:9c:b6:38:c4:73:9f:e9:62:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:01:69:F9:A4:DC:B3:94:38:00:F1:ED:81:0B:D5:10:21:D9:B5
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:66:91:d2:e3:1e:fc:0e:fb:73:f8:2d:80:fb:f6:8f:15:79:
56:b0:35:d9:69:eb:a3:9b:f2:46:74:3b:7c:00:66:35:73:89:
8d:12:69:f3:e8:fc:43:09:3e:ff:b6:59:56:57:e9:8f:6c:90:
e3:b9:01:55:9e:b2:42:e4:ee:2a:29:2f:e3:6f:08:23:4d:b8:
e7:f0:ad:bd:ce:5a:68:83:94:4c:d5:5d:72:e2:d9:0e:39:db:
9f:68:6b:c9:f1:9d:82:f1:4b:f0:46:a6:6a:8a:ab:d4:ce:54:
37:da:ef:94:ee:ee:f4:15:89:1a:fe:5a:64:0b:d9:a4:7a:3d:
f8:99:ee:2d:3f:20:73:c4:b4:2a:78:f5:9e:85:5c:20:92:3d:
e2:24:9e:46:c6:1f:2f:eb:03:ce:86:3c:d7:bd:27:53:0b:1a:
02:71:cf:6f:ad:1e:6f:7c:5f:16:93:41:9e:d9:7c:4d:fe:60:
3f:83:3a:50:38:e9:db:49:eb:53:92:ef:80:0b:5a:76:e8:9c:
a3:b3:0a:e4:9f:4a:27:4b:7d:82:06:35:37:34:0e:b5:0d:37:
83:6a:a4:7b:35:25:b4:33:49:0a:5b:36:e4:23:2b:cd:f5:8f:
f6:f8:d9:04:43:2e:17:28:b7:bc:79:76:09:cf:17:4c:6e:bc:
25:4b:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:05 2026 by rpki-client