Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: +mTxd5QBYasPupqroHTymq9nR0PQcLPzg5mn5C4MW/8=
Subject key identifier: 47:03:F6:7A:11:35:43:14:BE:EF:04:00:C2:BF:F4:8A:A5:31:66:C5
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 01A06E39650BD3F6AA2095C1876EBF5DD696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 0717
Signing time: Fri 04 Sep 2026 21:00:50 +0000
Manifest this update: Fri 04 Sep 2026 21:00:50 +0000
Manifest next update: Sat 05 Sep 2026 21:00:50 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: jh2p3xWA9WNHvs7/zrRXbJDBTM5HP8XEqk1okNQoHC8=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:65:0b:d3:f6:aa:20:95:c1:87:6e:bf:5d:d6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Sep 4 21:00:50 2026 GMT
Not After : Sep 5 21:00:50 2026 GMT
Subject: CN=4703f67a11354314beef0400c2bff48aa53166c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:1b:15:f8:94:d5:3f:16:0f:ae:58:6f:2f:
63:55:a8:91:4f:83:4a:86:77:7b:7c:74:af:63:b6:
ce:39:44:75:c1:e4:f9:22:6f:06:e2:14:a9:42:33:
0a:aa:f3:f4:3a:81:1d:4f:b2:30:7e:54:5f:f3:4e:
1c:ae:1f:db:33:11:87:be:dd:39:7a:73:dd:d0:a3:
11:c6:bb:6e:ad:d0:f8:48:0d:97:4a:25:a5:da:b7:
ae:31:01:18:89:df:09:2d:29:4f:8f:6f:c8:d2:2c:
e6:ca:9e:f7:71:cc:a9:ec:f7:ba:55:d2:1e:f2:73:
ae:44:f2:5f:a4:04:2f:45:02:82:69:75:fa:99:f0:
a3:e3:9b:be:8d:ca:37:dd:57:20:b1:e1:46:d5:3a:
61:6a:db:21:83:5b:5a:ab:d8:fb:50:40:a4:4e:71:
71:79:6b:20:3a:85:3e:06:93:66:5a:93:0c:b0:25:
c4:8a:54:07:8b:3a:01:97:b6:78:c5:f1:b9:74:52:
06:8f:4c:7c:c6:5c:55:fa:f2:37:78:51:88:56:61:
9e:87:f6:90:30:08:e0:56:be:19:c8:77:ad:97:d4:
26:ed:81:0b:95:e1:8a:97:39:12:6e:be:d3:fb:97:
51:94:a3:03:1f:3a:b8:92:b9:d5:71:02:f1:44:b3:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:F6:7A:11:35:43:14:BE:EF:04:00:C2:BF:F4:8A:A5:31:66:C5
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7d:f3:25:bc:04:52:10:af:bb:c0:b2:eb:cb:2a:43:08:2a:
e4:2b:aa:b6:b4:f7:1c:16:86:5c:3b:66:34:53:df:68:c0:f7:
67:61:92:8f:bb:f7:c5:15:ae:6d:5e:89:35:ed:a7:ab:58:ee:
19:e3:e1:2b:77:c1:58:45:74:37:7f:70:68:f9:d2:52:dd:7c:
b7:11:9b:18:90:b0:7b:c3:07:7f:15:27:4a:3e:db:22:7e:46:
af:4d:0f:ed:08:7f:eb:28:ea:6a:be:48:f7:c2:f8:de:c1:40:
83:88:44:4e:ac:08:fa:a4:a8:24:f4:ad:49:88:4d:6d:71:f2:
31:8c:b4:2e:0b:18:a4:6e:fa:38:7e:71:94:f3:4d:40:2b:1e:
f3:10:76:96:49:31:56:0e:95:98:85:b0:d3:55:51:40:3c:2f:
38:0e:83:10:b0:3f:0d:67:b6:ce:54:4c:86:f3:80:78:d1:f9:
a6:56:97:03:7d:76:fc:40:5e:b6:82:b2:e9:be:86:6a:1c:7a:
65:36:18:0c:08:66:ef:43:28:55:57:be:d9:15:42:39:a0:48:
7c:e7:5c:cf:88:ba:86:db:81:8b:be:ef:c5:79:2d:b2:e2:33:
e9:6d:17:52:6e:35:ee:50:1a:10:ca:9d:05:22:c9:b7:df:c6:
16:bd:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:40 2026 by rpki-client