
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: XihsPPpxoPkxaiGavo6weX68axTgoUXmy1V1q4D24ZY=
Subject key identifier: 74:68:65:07:50:21:3D:00:FF:66:36:BD:1D:9B:7B:49:99:F9:5E:56
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 01A08A8D6DC258D49B70457279AE9A442C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 0533
Signing time: Thu 10 Sep 2026 09:01:59 +0000
Manifest this update: Thu 10 Sep 2026 09:01:59 +0000
Manifest next update: Fri 11 Sep 2026 09:01:59 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: Fpz8+mbeZoBpyAiCA7k/LlUWe0P0M4DES43ti927JAk=)
2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:6d:c2:58:d4:9b:70:45:72:79:ae:9a:44:2c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Sep 10 09:01:59 2026 GMT
Not After : Sep 11 09:01:59 2026 GMT
Subject: CN=7468650750213d00ff6636bd1d9b7b4999f95e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:3c:74:b5:80:21:20:76:42:36:65:53:04:
9f:22:2f:88:61:2d:36:2b:7d:de:30:56:0c:d9:b5:
40:b9:8d:b9:e3:55:53:e7:dd:3d:ae:ab:93:18:bc:
4e:5b:e1:65:6b:e4:7b:c1:7c:02:d5:14:74:be:ce:
54:e9:cc:4f:a9:af:72:ce:bf:a7:c0:b3:d3:a8:82:
fa:fa:21:f4:9d:3b:05:39:8d:20:fd:6d:71:70:c6:
e3:ff:60:a0:3f:1f:b8:c9:39:b5:b6:ee:53:a1:a3:
64:f0:8c:24:2c:d5:99:48:49:66:34:f7:23:39:3e:
2b:d0:66:c3:e6:c5:12:8d:cc:c7:ba:61:a0:da:17:
c6:24:8e:c3:3b:8c:b3:13:40:b8:1d:94:93:11:19:
33:2c:74:cc:af:77:1d:47:2a:51:3b:9b:84:e5:fe:
65:c6:42:bb:61:3a:ea:1d:06:7e:98:0a:86:86:6d:
16:1c:da:d9:9b:53:3f:0e:e9:b1:fa:d6:13:5f:f0:
ee:ff:85:fa:ed:dd:06:4e:10:a6:46:50:39:6d:8e:
0e:16:5e:e4:31:7d:e8:95:db:10:8a:df:33:ec:96:
73:d2:af:c8:86:70:1b:83:a2:98:a6:07:ba:ae:03:
cc:21:f3:b8:74:8d:7a:8c:b2:ba:0d:6e:a7:6a:16:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:65:07:50:21:3D:00:FF:66:36:BD:1D:9B:7B:49:99:F9:5E:56
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6c:b3:f4:39:c6:81:16:49:0c:0f:49:9b:6c:6b:f5:3e:ff:
b3:5b:b8:c4:d6:5e:e6:3b:d5:b4:09:0d:c4:bd:6a:98:52:de:
b6:8f:88:33:2d:38:9b:7a:31:17:cb:b2:d2:8a:49:b1:3d:58:
aa:77:68:f0:c6:d4:4c:54:b5:b9:59:58:86:11:cb:a3:86:a6:
c0:c2:80:cf:b5:c0:40:9c:5c:ee:84:d0:c2:f5:54:7e:65:9a:
5a:28:4d:f1:d9:1b:23:91:7a:0c:9f:56:57:c7:6e:c7:f8:6e:
c7:4c:73:6d:16:9d:85:cc:51:62:10:30:eb:6a:68:81:f7:63:
4b:40:10:c1:11:56:c2:1e:59:70:f5:0c:bf:29:bf:b4:35:7d:
19:8c:9c:2f:7d:f3:27:e4:25:ab:b4:d9:6b:83:14:d0:68:05:
cd:8b:55:0e:5f:dc:44:85:30:55:8f:9c:62:0f:5c:a0:f4:ef:
10:38:43:a4:40:f1:82:86:a6:2a:12:73:76:0a:82:4b:50:eb:
06:bb:1e:be:bc:83:f9:94:70:49:e1:88:25:5a:7a:6f:0e:4f:
a5:20:f5:83:b2:6a:b7:6b:b5:5b:37:b4:ba:77:32:2a:5e:b4:
3b:63:08:22:80:b5:1f:27:1c:cd:2b:cb:05:d9:6d:f8:ae:f5:
21:fe:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:59 2026 by rpki-client