Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: J75RwJOihlPTpLw4DQZYr3GmYV7KgEeeAmfo6FF0QBk=
Subject key identifier: B7:5C:EF:4B:20:7F:C9:36:8A:AA:DC:0A:7C:B3:A7:5D:A9:A1:3E:4F
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 019D3789B4B13466A42C1EAB0DB66DA467A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 056D
Signing time: Sun 29 Mar 2026 03:01:04 +0000
Manifest this update: Sun 29 Mar 2026 03:01:04 +0000
Manifest next update: Mon 30 Mar 2026 03:01:04 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: 9QPSAq5Xqt9ZSQnju05Q0/DQa3gkl5z51eV2sFLHJec=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b4:b1:34:66:a4:2c:1e:ab:0d:b6:6d:a4:67:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Mar 29 03:01:04 2026 GMT
Not After : Mar 30 03:01:04 2026 GMT
Subject: CN=b75cef4b207fc9368aaadc0a7cb3a75da9a13e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:e4:b1:2d:7d:5e:49:de:25:97:ae:06:00:
6b:69:1e:91:da:26:7d:96:0a:37:a6:fa:f3:b6:b6:
e6:4a:9e:c7:40:9a:8c:4e:95:7e:49:fc:be:a3:ce:
df:4f:84:5a:1d:b8:81:1c:f7:b2:19:f6:d6:30:4e:
f5:b9:74:93:6b:5a:19:86:c1:8e:ce:05:1f:ba:2a:
00:7a:b4:71:1d:05:fd:cb:74:2c:b0:4f:21:f3:16:
b4:9a:7c:6d:5a:d4:3a:b7:09:2f:0f:42:4d:58:1f:
a4:cb:f5:6d:29:28:b2:80:31:8a:f9:fc:94:8a:71:
b7:3d:37:82:f3:db:cf:66:d1:99:bc:2b:3d:5b:05:
ff:cc:c6:33:16:83:36:1b:53:fd:02:e3:b9:cc:7f:
de:5f:67:74:62:29:53:1e:1b:c6:ef:6b:70:fb:b9:
ea:ad:5a:55:b8:15:31:99:19:05:d4:83:f5:24:9a:
63:fc:54:88:b6:e7:53:45:95:55:7b:d2:a8:44:71:
29:23:5d:59:9e:e1:09:ec:ed:f9:52:97:18:ca:21:
3e:0a:4d:82:37:c1:1c:75:7d:51:1b:4a:bf:8c:ea:
32:a3:7f:89:ad:25:ed:17:f0:15:0c:5e:0a:79:f2:
e2:c4:1e:4b:07:94:9b:8e:74:bc:30:4e:63:c6:bf:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:EF:4B:20:7F:C9:36:8A:AA:DC:0A:7C:B3:A7:5D:A9:A1:3E:4F
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:85:29:b3:7c:a1:27:b7:5a:82:c7:67:3d:26:48:46:5a:f4:
54:c5:83:07:98:98:19:1a:6f:11:6f:81:fd:fa:69:9b:18:07:
ac:a3:34:76:58:50:cf:db:a4:01:9f:bd:ec:8c:88:4f:3a:49:
dd:f1:5f:a0:0e:f3:f2:13:25:df:b1:f5:85:a8:44:92:a1:39:
9d:a0:7c:30:27:07:67:3f:45:d2:fb:69:af:d0:ff:84:5a:d2:
5b:37:63:47:55:b0:8b:39:ea:00:fa:fc:a6:13:37:4c:14:71:
63:7e:76:84:61:e0:19:b0:f9:ed:9d:33:57:fe:4e:b4:4a:38:
b1:cc:0a:04:60:df:48:91:4e:81:f3:8a:c1:d2:12:f7:92:82:
01:cc:43:f9:27:a8:1d:7c:de:cd:2c:53:0c:30:e7:98:12:95:
4a:79:3b:de:ad:b0:0a:57:a3:0a:ed:59:8f:4c:a9:4d:d1:77:
03:e0:6d:68:5f:04:fc:0d:39:00:14:4f:69:ce:5a:c5:88:6c:
d6:76:a1:2d:27:37:ac:de:20:05:93:42:12:8a:b6:30:e1:79:
d3:21:7e:a0:89:e8:77:4e:33:e9:2f:75:fe:63:70:a1:bd:20:
43:9d:fa:6b:a4:23:86:9b:32:da:06:82:cf:ca:ad:d9:ea:f3:
46:c5:a4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03ibSxNGakLB6rDbZtpGejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjYwMzI5MDMwMTA0WhcNMjYwMzMwMDMwMTA0WjAzMTEwLwYDVQQD
EyhiNzVjZWY0YjIwN2ZjOTM2OGFhYWRjMGE3Y2IzYTc1ZGE5YTEzZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpjksS19XkneJZeuBgBraR6R2iZ9
lgo3pvrztrbmSp7HQJqMTpV+Sfy+o87fT4RaHbiBHPeyGfbWME71uXSTa1oZhsGO
zgUfuioAerRxHQX9y3QssE8h8xa0mnxtWtQ6twkvD0JNWB+ky/VtKSiygDGK+fyU
inG3PTeC89vPZtGZvCs9WwX/zMYzFoM2G1P9AuO5zH/eX2d0YilTHhvG72tw+7nq
rVpVuBUxmRkF1IP1JJpj/FSItudTRZVVe9KoRHEpI11ZnuEJ7O35UpcYyiE+Ck2C
N8EcdX1RG0q/jOoyo3+JrSXtF/AVDF4KefLixB5LB5SbjnS8ME5jxr9msQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdc70sgf8k2iqrcCnyzp12poT5PMB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYUps3yh
J7dagsdnPSZIRlr0VMWDB5iYGRpvEW+B/fppmxgHrKM0dlhQz9ukAZ+97IyITzpJ
3fFfoA7z8hMl37H1hahEkqE5naB8MCcHZz9F0vtpr9D/hFrSWzdjR1WwiznqAPr8
phM3TBRxY352hGHgGbD57Z0zV/5OtEo4scwKBGDfSJFOgfOKwdIS95KCAcxD+Seo
HXzezSxTDDDnmBKVSnk73q2wClejCu1Zj0ypTdF3A+BtaF8E/A05ABRPac5axYhs
1nahLSc3rN4gBZNCEoq2MOF50yF+oInod04z6S91/mNwob0gQ536a6Qjhpsy2gaC
z8qt2erzRsWk3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:36 2026 by rpki-client