Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: sJ3dVZq9nm+FWLzPP76ZgOWJWqs7pqOePspLEXkNegM=
Subject key identifier: 8B:B3:08:DE:6B:86:22:9F:1B:E9:EF:FF:80:85:18:44:0E:2B:B4:70
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019DED4994500867E5A9FAFC04200E2752E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 18EE
Signing time: Sun 03 May 2026 10:01:55 +0000
Manifest this update: Sun 03 May 2026 10:01:55 +0000
Manifest next update: Mon 04 May 2026 10:01:55 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: WVB5NNvOeM8CWJAImroU+h6+IUOzZ/RtkO0uNFzJUGM=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:49:94:50:08:67:e5:a9:fa:fc:04:20:0e:27:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: May 3 10:01:55 2026 GMT
Not After : May 4 10:01:55 2026 GMT
Subject: CN=8bb308de6b86229f1be9efff808518440e2bb470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:0f:e6:63:76:ed:78:c2:5a:fd:dd:69:24:
8b:68:8e:0c:e8:14:1b:58:c6:86:68:d6:d3:c1:70:
3c:3c:f5:e5:5d:80:75:f3:9d:66:92:d2:30:d9:03:
11:44:5d:71:80:09:6a:1f:5c:73:8a:21:83:27:fe:
00:d5:c1:ec:42:32:3a:72:0c:98:91:b0:62:fd:ee:
4b:23:16:61:e8:ed:dd:72:90:f2:41:61:f7:46:57:
f3:49:5e:51:87:11:ae:76:23:5c:21:16:6c:60:1e:
16:c7:da:f8:56:31:66:87:5a:05:38:f8:a1:70:b3:
ab:8a:c1:26:0c:54:33:52:ef:cf:f2:16:ff:15:78:
40:b4:f9:f9:20:5f:b3:34:da:9a:6e:dc:9d:73:a5:
6d:8e:90:bb:f8:5c:10:34:dd:43:1a:3c:95:ae:4a:
67:58:6a:52:b5:00:1b:c9:7c:33:f8:3d:bd:24:0e:
e9:ea:06:78:d9:84:f7:f4:1d:d8:fc:6e:6c:eb:79:
6c:a6:be:9f:33:3b:a8:6c:18:0f:e3:6b:42:19:56:
c8:83:37:2c:60:cc:70:9c:e4:d8:3b:d5:14:65:e1:
69:2b:c5:d8:96:b7:d6:f9:6f:82:50:a9:fb:48:c6:
1d:69:6e:22:a1:bd:73:c5:5b:69:25:ab:85:3b:9c:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B3:08:DE:6B:86:22:9F:1B:E9:EF:FF:80:85:18:44:0E:2B:B4:70
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b2:f8:81:7a:c7:46:de:d8:a7:fd:b3:95:c6:b3:ce:9d:bd:
65:ae:e0:85:3e:e4:42:1d:05:96:c0:b1:42:c7:6c:63:94:0e:
8d:c1:c2:c3:fd:f2:0a:99:f6:c2:cc:a3:13:48:44:66:dd:c3:
88:b2:a2:66:98:27:4a:82:37:71:08:91:25:bd:9f:1e:a5:0d:
d6:b6:31:22:bd:5d:82:c7:30:bd:54:47:1e:2d:fd:81:5e:87:
74:0d:38:41:c6:31:36:97:83:56:ef:95:83:56:65:74:a8:4f:
1b:8b:5c:24:2e:73:c3:c9:e2:53:1c:5c:91:62:91:0e:d5:97:
56:b8:8b:b0:29:54:a8:79:13:58:9a:b2:72:c9:6e:40:47:68:
3b:46:1f:69:ca:98:57:a1:27:20:b5:38:a8:c8:86:60:43:00:
13:5d:4e:07:da:3e:cd:0c:85:3f:a6:83:8b:bd:4d:9c:ca:d3:
87:37:f7:14:5c:30:69:dd:98:a6:d5:f5:63:99:f1:eb:cd:11:
4f:d9:90:77:73:8c:d6:56:e7:8b:5d:9a:b9:48:73:f6:fc:6c:
27:ce:12:54:39:83:fe:70:08:f8:09:0b:a1:af:bf:83:91:35:
60:8c:52:9f:ff:f1:11:f4:eb:9e:6f:d6:3c:99:60:99:60:1b:
20:e9:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:17 2026 by rpki-client