Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: UF+SB5whbqxo2/0BunU8X/AiWkSEF8A7fP2uDYB1jvM=
Subject key identifier: 07:91:2A:7A:A0:2D:3F:88:2E:9B:83:84:47:9E:16:83:62:01:7A:FE
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 01A17815F26956AB220519DFFA70D6CC404D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 05AE
Signing time: Mon 26 Oct 2026 12:01:06 +0000
Manifest this update: Mon 26 Oct 2026 12:01:06 +0000
Manifest next update: Tue 27 Oct 2026 12:01:06 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: TZ29CEDiqEOXAdPB6SUN6UjYwu1U9clTigYRhec4Z4I=)
2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:f2:69:56:ab:22:05:19:df:fa:70:d6:cc:40:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Oct 26 12:01:06 2026 GMT
Not After : Oct 27 12:01:06 2026 GMT
Subject: CN=07912a7aa02d3f882e9b8384479e168362017afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:27:e4:0a:40:9f:cd:d1:d9:e1:a7:15:0e:
9c:e2:2d:e8:74:fd:fb:38:9e:65:07:e0:fa:8f:fc:
d6:96:57:15:d8:bd:91:58:f4:6c:cb:52:85:d4:93:
5e:8e:8a:6f:90:19:e6:1b:74:09:61:e4:c2:d6:77:
54:c0:b6:4f:4d:6f:7c:4d:02:fd:32:a5:5b:81:5e:
0c:d7:c0:62:fc:fe:1c:ff:64:0a:1d:39:90:1e:4c:
48:54:62:af:75:e1:57:32:bb:8a:0b:a6:ea:79:f2:
05:ff:85:57:e8:2a:b9:ec:0c:43:96:b7:60:0a:32:
f0:3e:aa:ee:5e:b6:ae:b1:31:5d:34:6a:25:e7:13:
74:d5:73:a3:46:c6:36:7f:78:2d:3b:5c:37:76:27:
69:63:34:f9:82:7a:b6:0c:bb:0f:c5:e0:58:0e:eb:
a6:1f:3f:85:fc:0e:e9:7c:2f:52:46:b2:a0:65:07:
7e:ac:30:25:01:fb:f7:32:ba:1d:46:e5:d7:6f:8f:
37:ba:e0:47:16:22:1d:9e:1a:23:4f:2d:84:dc:ab:
c3:fe:c9:3c:f7:07:53:cf:d8:6a:e8:8a:0a:64:21:
b4:27:70:4d:6a:87:eb:af:b3:88:6b:27:bb:9d:e1:
9e:b8:cd:bc:a8:34:56:9c:e9:13:d4:03:f5:c7:18:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:91:2A:7A:A0:2D:3F:88:2E:9B:83:84:47:9E:16:83:62:01:7A:FE
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d5:82:dd:1c:80:aa:3f:88:d3:73:e7:b3:4d:e6:4a:a8:68:
f9:1f:58:84:8e:de:bc:7e:09:ae:32:1e:b9:81:e4:9a:23:ef:
e5:ff:a1:f3:c1:0a:0b:70:7e:f3:16:45:97:6f:20:7f:46:a7:
27:6d:23:61:e0:85:90:e5:da:71:34:52:8d:fe:1b:6a:76:a9:
32:ad:92:40:f0:f2:9d:13:99:38:9a:9e:2f:22:a2:d9:91:bb:
0b:34:54:df:41:22:ba:90:09:1c:85:86:27:6f:c0:16:06:98:
72:e9:6d:d7:d1:e0:a0:b5:25:f7:26:9e:69:b6:09:2f:79:f8:
2a:b3:4d:e3:99:5b:fa:83:89:f4:95:7a:5f:09:7c:c5:23:af:
83:8f:b0:86:16:e9:5c:1c:ff:8d:4c:d2:98:74:66:4d:fb:34:
73:68:d0:bf:c7:e2:30:be:f7:40:e8:c5:d3:c4:f5:6a:9b:4c:
d4:d4:fb:d8:ef:45:0b:54:2b:f4:d4:28:a2:72:7d:08:54:c3:
d7:b0:22:2e:de:94:6e:a8:0b:71:1e:af:15:de:61:e1:20:27:
bc:e0:da:7e:9d:78:dd:52:d5:a7:bf:32:7b:b3:f8:f6:c0:d0:
7e:7b:26:e8:58:95:14:4e:23:90:83:f0:28:62:a9:4f:77:00:
87:b8:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:00:37 2026 by rpki-client