Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: WJLzPbWqlwFmDlNFmxGiausC58W0BnEq5gfteiMD4Ow=
Subject key identifier: 34:26:F6:66:C2:46:34:3D:40:6F:FF:66:83:F6:32:98:BD:B1:D5:DE
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 019D38D2D4FF4B73700AEC50CFB97CB27B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 037B
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: wUdRJQhNgWeEveI1/SuRR4Z1dsJ9YtXI2Gu3eyqAm7Y=)
2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d4:ff:4b:73:70:0a:ec:50:cf:b9:7c:b2:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=3426f666c246343d406fff6683f63298bdb1d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:13:9b:7e:86:ae:e0:0b:25:9f:01:b2:a0:
76:98:20:c0:f7:ad:f6:2c:e7:f4:76:49:3e:34:71:
cb:0d:3a:80:76:a4:ab:89:a5:5e:e6:79:e9:c4:fb:
09:7c:84:fd:e8:43:d7:a1:7b:ef:ae:a5:cb:b8:19:
05:26:af:12:64:08:31:df:f7:91:97:6e:c7:d3:5f:
65:e9:da:94:27:d8:37:d6:9e:e4:8e:84:85:61:d0:
42:33:30:11:dd:08:71:5e:aa:22:1c:49:e2:86:31:
27:94:fa:69:50:02:51:b6:08:bd:8d:2b:be:8f:6a:
06:e7:d5:cb:e6:f2:3e:0a:e8:86:16:d4:75:fd:97:
c4:8e:48:19:b3:e9:91:19:03:ff:48:da:c4:1a:4a:
c3:03:aa:c4:c2:7f:a0:32:ad:29:d1:3f:32:4e:c3:
0e:9e:5a:e9:41:f0:0c:ab:13:87:c9:95:5f:67:99:
01:b5:bf:3f:d5:d3:1d:9c:05:f9:f3:a3:b2:59:23:
00:2f:07:22:ed:84:80:fd:c1:09:27:6b:5c:6f:89:
53:16:54:88:bf:c8:aa:6f:71:39:ad:b9:1e:39:a5:
62:0b:a9:2d:2b:1a:ee:24:c6:3f:3d:be:4f:55:cb:
7f:74:3a:e1:75:97:7f:8e:76:5d:5c:20:9e:fc:01:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:26:F6:66:C2:46:34:3D:40:6F:FF:66:83:F6:32:98:BD:B1:D5:DE
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9f:14:0d:72:f8:57:bc:52:39:08:31:58:25:52:3e:f6:48:
6c:19:11:29:87:93:cc:0f:51:6f:ee:cd:9f:4b:ea:7e:f8:77:
a0:94:65:88:30:d4:45:4e:69:59:52:e1:68:9e:08:3a:fc:e6:
f5:a6:38:89:3c:2e:f2:04:38:1c:1f:d0:04:b1:3a:c5:86:45:
d3:81:0a:7f:76:ba:fa:2f:ed:78:0e:b3:42:7c:87:a4:2d:1d:
ad:cd:61:ee:93:4b:89:fb:0a:ab:71:f7:93:d5:ea:21:a1:bc:
e4:5b:6a:f4:dc:98:b5:8f:6b:49:6d:2e:75:96:03:f6:b2:e0:
5b:4d:10:fb:1b:8d:f0:c4:36:c1:c9:e1:a9:3b:8a:cb:31:36:
6f:39:e8:01:6f:4f:b3:4a:1b:5d:60:ff:98:a3:7c:fb:46:ae:
e5:82:5a:9d:0b:6c:22:a5:46:98:d4:cf:94:97:a5:e7:89:c4:
c9:a5:10:e4:b8:d5:6e:e8:d8:64:fe:8f:57:10:0b:05:a6:c7:
f1:03:f4:5b:ca:db:03:02:63:f5:1a:f0:aa:59:51:c2:08:41:
bb:be:4a:75:d3:e8:7f:09:b9:3e:93:6d:76:31:71:d5:b8:42:
1f:fe:43:78:10:bb:2e:68:0c:91:6b:f3:d7:a6:3d:4c:ef:2a:
51:e3:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:38 2026 by rpki-client