Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: biYnT/nPUnVgsb0mie8xpnGmm9acSx2250eNZL84JyE=
Subject key identifier: E3:42:70:73:81:D3:FF:60:38:DD:C7:33:71:EF:46:21:4B:C5:2E:7E
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 01A176CBDDB9D849D290A8DE3A0BB20E1269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 07A0
Signing time: Mon 26 Oct 2026 06:00:34 +0000
Manifest this update: Mon 26 Oct 2026 06:00:34 +0000
Manifest next update: Tue 27 Oct 2026 06:00:34 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: tx3uM7VVIGA1Ubgy2uRIKC0F4GKGJdMqXrU8Xie7+Bg=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cb:dd:b9:d8:49:d2:90:a8:de:3a:0b:b2:0e:12:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Oct 26 06:00:34 2026 GMT
Not After : Oct 27 06:00:34 2026 GMT
Subject: CN=e342707381d3ff6038ddc73371ef46214bc52e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:d9:07:bf:f9:a3:a2:18:4e:18:60:48:5a:
27:7a:5b:1e:19:86:f0:c0:0e:05:d1:29:21:ca:93:
9c:54:e7:67:5b:a9:8e:42:5e:b0:59:fc:45:72:37:
7c:93:27:b6:ff:90:27:91:e1:9f:58:e0:16:5f:be:
74:15:33:97:ee:89:a4:62:f6:b1:f6:9b:e8:ff:5c:
8d:ac:1e:37:57:f3:db:15:96:89:9f:82:f3:ce:e9:
d5:5a:87:65:08:17:e7:22:c8:f0:2e:a5:35:94:d9:
ce:e3:1f:b5:ef:a1:b1:13:cc:79:92:bf:61:46:6d:
cc:32:29:31:5d:0d:78:7a:5d:76:7d:65:e5:44:05:
04:14:5d:6b:1f:46:72:96:83:17:ec:ed:f7:5e:ba:
2c:7a:0c:0e:93:ee:8c:ab:41:74:ba:ed:95:12:29:
0b:3a:88:a5:41:c4:8e:28:38:bb:f0:ff:0a:61:81:
50:a1:e2:dd:ab:ff:d3:c5:a1:aa:36:23:fd:0d:20:
d9:f4:8b:e3:76:1e:32:d9:15:e1:00:b7:5d:35:f3:
e4:77:9d:b1:8a:1b:d1:24:e5:21:c6:12:13:57:77:
a2:99:54:84:7d:fa:fd:26:c7:58:16:a5:f8:c4:a8:
2b:0b:65:3b:d2:de:cb:32:ae:09:04:89:cb:b8:dc:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:42:70:73:81:D3:FF:60:38:DD:C7:33:71:EF:46:21:4B:C5:2E:7E
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:24:ed:fb:7a:4a:00:b9:75:13:6b:ef:0a:54:0e:26:3c:
70:4d:87:05:92:3b:02:4b:30:19:9d:f2:d6:4d:21:ff:e7:be:
c2:5b:c0:e1:6a:ef:92:ac:58:0a:7b:e4:a1:d8:38:df:28:2c:
25:6e:90:8a:a1:31:65:4f:6c:1f:c1:92:c4:21:c8:f7:aa:2f:
89:1e:cf:6d:f1:79:d1:4e:dd:de:e5:a3:d8:2e:8f:c2:c4:ff:
ed:d1:7d:69:41:a1:41:54:0c:6c:76:44:b1:a0:d8:05:42:53:
81:6b:00:16:68:5d:c5:da:d6:86:f8:d0:7e:57:a8:36:8f:27:
21:2a:bd:1e:cb:43:ac:67:97:0b:cb:9c:30:82:f6:07:bf:e1:
f6:e0:b4:67:da:39:b3:16:35:83:12:4e:4d:48:2e:b3:fa:6e:
99:7f:7b:a9:8b:d3:fa:80:c2:8a:26:ad:27:eb:5f:fb:85:63:
17:4e:06:58:b3:18:f2:7b:60:17:cb:fe:57:83:10:fd:3f:2d:
75:72:70:86:6f:85:6a:40:42:3c:cc:7d:f0:5e:51:d3:09:42:
b7:89:bb:af:24:46:ea:d1:00:28:1c:e7:81:40:53:26:fe:b7:
a7:cb:93:6c:d5:99:38:55:a3:23:80:81:f2:3a:e5:9a:6d:91:
ef:8f:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:49:02 2026 by rpki-client