Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: ofGUmObzQtv4uRx420wGzzoCNpPci7lAAQbNQNvpGlY=
Subject key identifier: 53:E8:2E:C3:06:14:74:E3:9C:E9:FE:FF:5C:2A:49:FA:2F:D8:B4:DC
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 019F848C76DF128016DF02FAF2C7FACA4B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 069E
Signing time: Tue 21 Jul 2026 12:00:25 +0000
Manifest this update: Tue 21 Jul 2026 12:00:25 +0000
Manifest next update: Wed 22 Jul 2026 12:00:25 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: xJxqTuQ50Xk9eCJ4PBmvZiBbxl5wO4ppKg/t+0TfArQ=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:76:df:12:80:16:df:02:fa:f2:c7:fa:ca:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Jul 21 12:00:25 2026 GMT
Not After : Jul 22 12:00:25 2026 GMT
Subject: CN=53e82ec3061474e39ce9feff5c2a49fa2fd8b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:3d:04:9a:6e:23:15:7f:54:0a:69:97:39:
8f:41:5c:8c:3c:a1:32:42:b7:9b:15:6e:60:f6:24:
44:25:ec:32:4c:1a:68:05:57:f5:1b:9c:2e:41:21:
3c:49:89:2a:b4:1f:7a:60:32:03:94:1c:2f:4a:65:
7e:07:10:23:17:ff:56:63:b8:b3:4d:35:b4:04:1e:
33:c9:08:a3:97:b1:93:b8:be:b2:8a:c6:fe:cd:6b:
7c:7b:cc:22:08:ba:84:eb:bf:49:63:31:f0:37:1a:
cf:c6:95:33:82:c7:a0:16:d2:eb:05:f8:2c:28:14:
f9:a8:7a:5e:3a:69:b1:7c:df:90:12:e1:01:f9:73:
bd:c7:65:af:6c:62:62:70:b0:c6:da:9b:20:e3:1f:
7e:1a:24:d6:81:b6:96:6e:01:d3:ca:b0:0c:02:86:
f3:9c:30:e8:c7:a9:40:7f:6b:f5:3e:da:5f:7e:c2:
22:c7:b4:f3:c4:e7:a5:52:f1:da:dd:26:c3:ba:b3:
5c:19:41:53:42:f8:35:48:12:d5:76:8e:a6:9d:2c:
ce:91:3a:95:ca:88:e2:7b:48:f0:10:d5:2d:67:27:
a0:14:0c:08:91:61:fa:67:cf:63:4d:c3:16:9d:46:
a1:9a:00:de:07:2c:ac:4e:a2:e5:f8:76:fe:5c:54:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:2E:C3:06:14:74:E3:9C:E9:FE:FF:5C:2A:49:FA:2F:D8:B4:DC
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1c:6d:a1:f7:b8:a3:e3:b4:23:66:49:d7:5a:3f:67:8d:c5:
45:75:86:d6:a7:d8:f5:db:ea:2a:e6:ca:e4:17:9c:00:2d:aa:
cb:02:ad:7f:cd:02:ea:df:d4:26:66:2a:c4:81:ed:35:fd:bc:
6c:4f:97:b9:6b:06:19:21:77:be:91:c9:2e:43:70:2c:60:57:
80:c6:be:6b:96:43:06:7a:00:ae:53:e9:37:42:da:26:11:ff:
6f:7d:ad:c4:a5:6b:00:e2:08:6f:be:54:53:e2:a7:ac:19:7e:
8d:8c:d8:62:47:e3:34:54:47:a4:eb:5a:34:27:5b:de:25:f5:
6b:6a:18:98:2e:6c:7b:3e:b6:ba:92:d3:98:3d:70:36:5c:c5:
d7:d8:cb:59:1f:5d:73:8f:64:8e:cf:6f:d7:0f:a6:48:bc:a3:
0a:48:bd:df:d3:d5:c5:a2:19:f5:ea:e4:6c:10:34:d0:e3:7f:
3a:da:9b:49:05:c5:9a:b8:a1:5c:ca:eb:73:4b:44:07:82:47:
ed:6e:d5:2e:aa:a3:37:05:ee:58:37:8a:21:fd:b8:02:e7:27:
7f:6d:da:b8:95:25:fb:b5:46:bc:fb:7a:94:04:11:f6:27:93:
04:30:b3:ec:d5:91:ef:d2:5f:dc:b5:48:17:e7:c7:e4:14:8a:
3f:3b:43:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EjHbfEoAW3wL68sf6ykuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjYwNzIxMTIwMDI1WhcNMjYwNzIyMTIwMDI1WjAzMTEwLwYDVQQD
Eyg1M2U4MmVjMzA2MTQ3NGUzOWNlOWZlZmY1YzJhNDlmYTJmZDhiNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8g9BJpuIxV/VApplzmPQVyMPKEy
QrebFW5g9iREJewyTBpoBVf1G5wuQSE8SYkqtB96YDIDlBwvSmV+BxAjF/9WY7iz
TTW0BB4zyQijl7GTuL6yisb+zWt8e8wiCLqE679JYzHwNxrPxpUzgsegFtLrBfgs
KBT5qHpeOmmxfN+QEuEB+XO9x2WvbGJicLDG2psg4x9+GiTWgbaWbgHTyrAMAobz
nDDox6lAf2v1PtpffsIix7TzxOelUvHa3SbDurNcGUFTQvg1SBLVdo6mnSzOkTqV
yojie0jwENUtZyegFAwIkWH6Z89jTcMWnUahmgDeByysTqLl+Hb+XFRi6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPoLsMGFHTjnOn+/1wqSfov2LTcMB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBxtofe4
o+O0I2ZJ11o/Z43FRXWG1qfY9dvqKubK5BecAC2qywKtf80C6t/UJmYqxIHtNf28
bE+XuWsGGSF3vpHJLkNwLGBXgMa+a5ZDBnoArlPpN0LaJhH/b32txKVrAOIIb75U
U+KnrBl+jYzYYkfjNFRHpOtaNCdb3iX1a2oYmC5sez62upLTmD1wNlzF19jLWR9d
c49kjs9v1w+mSLyjCki939PVxaIZ9erkbBA00ON/OtqbSQXFmrihXMrrc0tEB4JH
7W7VLqqjNwXuWDeKIf24Aucnf23auJUl+7VGvPt6lAQR9ieTBDCz7NWR79Jf3LVI
F+fH5BSKPztDmw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:48 2026 by rpki-client