Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: rlD/Uv4vWWPpx11dKuDWStX1UC0LbMpw6OU44euh+Ss=
Subject key identifier: 20:1A:BC:13:3D:92:E1:FC:D3:23:2F:19:40:F0:E4:2E:FF:13:EE:32
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 01A021313F425A6C12653DB3C742061D5966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 1A12
Signing time: Thu 20 Aug 2026 22:01:10 +0000
Manifest this update: Thu 20 Aug 2026 22:01:10 +0000
Manifest next update: Fri 21 Aug 2026 22:01:10 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: gw4Ctj59AxtBHfTH6xHndoZPHrtxHFugF2EJdZlFuag=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:31:3f:42:5a:6c:12:65:3d:b3:c7:42:06:1d:59:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Aug 20 22:01:10 2026 GMT
Not After : Aug 21 22:01:10 2026 GMT
Subject: CN=201abc133d92e1fcd3232f1940f0e42eff13ee32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:5f:d6:e5:13:80:d8:19:be:d7:53:8b:43:
92:65:f4:bf:a6:04:e1:4c:a2:59:e5:7e:02:e5:2e:
96:12:07:f5:10:13:79:bc:a6:e7:fd:d6:b8:97:84:
1e:7f:5e:c4:1b:bc:8b:ac:a1:3d:a3:5f:e0:b9:07:
84:98:b6:77:9b:8b:80:f5:33:fc:ae:79:44:20:5d:
ba:63:b5:31:89:97:a9:a5:4b:8a:49:21:a4:75:68:
4f:13:11:25:9b:38:fe:ba:41:c2:20:16:48:af:5b:
0c:9a:fc:be:5b:8b:06:be:6e:43:cd:bd:a3:54:d2:
6b:85:5f:90:09:2e:d0:92:62:4f:64:75:af:40:02:
11:2d:d9:81:f0:d7:e5:bc:82:d8:28:92:17:b4:5c:
de:9b:fa:04:c6:59:3b:f2:bf:ca:be:fb:ed:98:6e:
15:a2:58:9f:f4:a2:93:11:ed:a1:bb:46:0f:30:99:
77:46:2c:1d:ef:ef:2b:5a:25:c9:2a:06:09:51:c1:
10:5d:40:22:59:0d:d2:6f:a9:b6:43:8a:26:fc:f6:
e2:1f:9b:c7:59:fe:33:ed:7f:3f:89:c8:31:a8:0b:
fb:a5:81:99:df:9b:a8:af:c1:8f:f9:80:92:4f:08:
66:0e:fe:9b:dd:1a:bd:f0:e9:15:37:b8:5d:71:79:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:BC:13:3D:92:E1:FC:D3:23:2F:19:40:F0:E4:2E:FF:13:EE:32
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:07:62:35:af:03:e4:89:13:e4:40:44:a9:32:99:6e:45:c1:
ad:38:e2:3f:1b:5b:3c:55:6b:cf:98:e6:cc:1a:b0:17:01:eb:
3d:61:3b:1a:5d:18:29:d0:8e:06:db:cd:3b:06:92:e1:91:00:
33:1f:0e:4f:a0:39:8e:ae:1d:48:bf:75:0c:51:13:98:fb:f7:
11:05:fb:8d:86:dd:c9:3e:40:d6:c3:9d:fc:0a:a4:df:d0:f7:
a1:0b:bc:59:81:ee:cf:f1:1e:f2:d7:8c:06:2f:c3:31:17:da:
15:72:c2:90:b9:27:34:9c:1d:01:05:c2:03:47:cf:89:06:8e:
0b:79:3c:25:56:4a:9d:95:3b:5f:cb:3c:f7:18:c9:b6:a3:df:
96:a4:18:38:b1:3f:78:fe:07:1d:9d:7e:e7:61:1d:b1:a3:3e:
6c:9a:12:af:5a:cd:43:ec:bc:f6:2b:ed:6a:e6:d8:10:fc:9a:
0d:9a:71:ae:00:30:73:66:22:91:f1:6a:23:1d:8c:1d:34:eb:
a7:ed:78:c1:59:c9:82:ea:d4:66:1f:43:6f:79:11:87:c1:97:
fa:0c:eb:9e:95:64:e5:1d:20:7d:7b:22:b2:26:81:17:a5:21:
78:76:82:ea:05:85:20:5d:f1:20:ed:66:fb:25:81:e0:8a:82:
58:46:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:47 2026 by rpki-client