Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: IO1dmpwcqu0i3Q8O0l6+NdxfUI/hdYrsuueHIGggshQ=
Subject key identifier: 36:4A:30:C5:6C:C9:AD:65:3A:B8:EC:5E:E7:D5:99:7C:1C:DE:8F:90
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019D058A582371C28FB1C4983FF2F3338F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 1876
Signing time: Thu 19 Mar 2026 10:00:45 +0000
Manifest this update: Thu 19 Mar 2026 10:00:45 +0000
Manifest next update: Fri 20 Mar 2026 10:00:45 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: KBAuhg0vt6A+8TeiZ/CGrmRcjopFWsCKmEYRBxglrIg=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8a:58:23:71:c2:8f:b1:c4:98:3f:f2:f3:33:8f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Mar 19 10:00:45 2026 GMT
Not After : Mar 20 10:00:45 2026 GMT
Subject: CN=364a30c56cc9ad653ab8ec5ee7d5997c1cde8f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:80:9e:35:f4:b6:60:a7:bd:f2:6e:1b:37:
b1:ed:2e:91:d2:0a:05:c2:f3:00:12:f6:94:83:d4:
1d:65:d2:6b:52:a5:d6:41:70:a1:84:0c:18:60:76:
bf:fc:a5:23:de:01:d3:b5:00:2e:fa:2e:7e:00:e5:
35:e9:b1:73:8e:60:29:37:2a:b2:2b:49:31:b0:e2:
d8:0c:ed:98:75:43:d0:3b:f5:db:bd:93:09:19:c6:
eb:91:85:fe:b1:d3:90:cd:19:70:d3:0f:cb:be:5e:
69:e5:62:3d:ea:59:f7:4d:a2:35:49:6e:d0:5a:85:
5f:d6:00:7d:49:31:3c:3c:c5:17:3b:2d:aa:95:aa:
a8:d9:9b:a4:b2:24:d8:6c:73:1c:30:06:1a:93:bc:
86:57:cd:01:bf:e8:74:f1:3c:f2:9e:9d:dc:65:f4:
e6:6e:ac:3c:63:de:9b:20:ce:3b:24:5c:0a:6c:db:
4b:f3:28:12:78:b4:57:cb:00:da:48:b9:ce:bf:08:
e3:97:43:9d:49:17:d3:95:60:a0:cd:71:6b:00:45:
78:7f:5b:6d:15:6d:73:e5:b2:3e:01:48:f6:7e:d9:
f5:dd:ab:cc:8e:f5:1b:88:00:d0:d2:09:f2:71:ef:
b5:80:20:34:9e:47:04:20:8d:23:00:c2:c2:8d:4e:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4A:30:C5:6C:C9:AD:65:3A:B8:EC:5E:E7:D5:99:7C:1C:DE:8F:90
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:96:60:7d:3b:6f:b4:c7:2b:4a:4b:37:fe:b8:07:ed:dc:fa:
e4:e6:a8:8a:d6:49:4e:fa:08:dd:3c:70:6e:ff:1a:48:64:75:
87:41:d3:82:6a:2a:65:32:55:46:77:11:66:c4:3a:08:df:fb:
4d:e7:5b:cd:8d:85:dc:5c:12:f3:60:9e:d9:39:df:36:2a:33:
ba:d7:8e:2a:e1:f7:ab:61:d4:2a:5b:f1:dd:7c:c6:df:dd:b7:
9b:2f:c6:71:8a:a9:b1:5c:b7:49:d0:1b:57:44:08:4c:5b:e8:
f7:4d:5a:90:59:f9:fe:58:68:79:7b:42:6b:1a:4f:02:3c:7f:
84:dd:32:7e:e6:34:ea:0e:9f:f7:41:1d:e0:ee:2c:ff:7b:ff:
16:42:b7:68:b6:3a:43:f7:45:4d:85:2c:01:ce:f0:2d:85:55:
07:53:5a:5b:fd:78:ae:bf:bf:75:e6:68:5c:a0:f5:03:7f:cd:
1e:44:4a:81:be:99:a3:e3:e8:85:74:62:23:b8:03:0b:93:69:
e5:7b:31:c1:18:e8:c7:16:c5:cd:f3:1f:a4:0c:0b:df:d7:7d:
5f:69:9a:c2:8f:83:35:11:49:75:ab:09:43:e4:0b:d4:72:d9:
b4:5c:86:b7:37:cb:54:56:b9:6d:86:9c:e0:5d:57:8b:a2:89:
c8:6d:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:50:23 2026 by rpki-client