Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: psr/3gM3cv1OYR9XaMcXP3vbQn4Or3z5WNtEWRp52K8=
Subject key identifier: 7A:67:79:F2:FA:95:9A:07:44:59:87:23:3A:44:10:53:94:25:F6:A8
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 01A150D0FD1DB83113BF6FA06C7F17C647DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 11A5
Signing time: Sun 18 Oct 2026 21:00:35 +0000
Manifest this update: Sun 18 Oct 2026 21:00:35 +0000
Manifest next update: Mon 19 Oct 2026 21:00:35 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: hNjZDSKbWHEyG2aDFki+JhhykiqvLvrc5vk60ltSGZs=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:d0:fd:1d:b8:31:13:bf:6f:a0:6c:7f:17:c6:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Oct 18 21:00:35 2026 GMT
Not After : Oct 19 21:00:35 2026 GMT
Subject: CN=7a6779f2fa959a07445987233a4410539425f6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:b9:53:32:96:1a:50:f2:7a:a2:ba:62:e2:
e2:26:f5:0d:45:44:0f:c6:54:0c:bf:e4:df:15:96:
9c:72:0c:57:9e:2c:29:02:7d:49:6c:33:78:b3:d4:
72:01:f1:e6:14:b7:70:33:72:43:f1:69:69:ab:43:
73:52:e3:9b:ce:c0:aa:0a:bf:48:d8:09:4c:05:61:
96:69:3a:d5:73:30:92:e3:5e:f8:88:e8:f3:a5:f4:
75:ac:14:6b:f6:49:ac:44:65:76:1e:a0:8c:fe:54:
ae:d8:5d:34:16:a1:61:af:cd:7e:a0:65:49:26:c1:
64:05:c8:54:ed:f5:ea:7e:93:2f:b4:57:3a:75:2d:
8f:bd:5f:2a:78:e3:f6:5c:2f:ee:77:49:d6:2b:b6:
3b:d5:4f:a6:12:fe:c2:6d:41:97:0f:69:4f:b8:b3:
e2:3f:33:8d:0b:fc:de:07:ac:71:ae:de:c3:18:a2:
63:a6:a4:17:9d:3b:0b:52:4b:40:4f:d1:ad:01:a8:
d7:1b:6c:e9:40:1a:4e:b3:03:30:91:6d:03:5c:bb:
5b:7d:9a:e6:85:14:85:e3:a8:43:6b:9c:a5:eb:1a:
35:7d:09:18:b6:ae:ed:5e:1f:20:e6:1d:bb:69:cc:
c5:c6:79:28:b2:3b:da:3e:6c:e1:91:2d:ad:ce:28:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:79:F2:FA:95:9A:07:44:59:87:23:3A:44:10:53:94:25:F6:A8
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:35:31:a3:7f:b3:ca:c8:03:a5:ee:e7:21:7d:85:ae:39:c7:
3f:41:14:08:6a:24:33:c6:07:28:be:42:d5:33:9e:e0:ba:3f:
1b:33:b5:19:be:3e:33:7a:96:b5:1e:77:ac:db:7b:f5:29:a6:
24:5f:ee:6a:f7:1c:2b:9f:a3:82:29:2e:0b:15:4e:35:8b:30:
c1:c2:79:12:cc:db:3c:f0:e5:77:f4:05:15:e9:ec:c3:48:27:
85:cc:2a:ad:63:0d:13:9e:68:f5:24:ba:f8:14:b0:65:6e:1c:
58:cf:37:86:c0:27:1a:65:e0:55:6b:1c:89:ac:a3:5c:73:74:
17:dd:ed:b1:dc:60:4e:7c:69:bf:a0:57:5e:e8:1a:0d:b7:d0:
2e:a0:16:b4:5e:da:0c:27:19:e2:d8:2e:dc:3b:47:40:8e:6c:
79:6d:c8:43:1c:62:83:b7:cc:5f:26:99:8e:d7:3d:58:17:a9:
98:6b:0b:32:47:34:e6:9a:77:39:24:68:d9:6b:22:f4:d6:9b:
2e:de:88:b0:c6:5e:c7:51:b1:ec:37:8b:d9:cf:8a:fd:dd:c4:
05:b7:68:80:90:5c:4f:ad:44:86:07:14:e4:57:0d:4f:ca:42:
45:04:31:09:6e:75:7a:c5:af:9c:b2:60:ed:fa:aa:09:09:b1:
6e:1b:03:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFQ0P0duDETv2+gbH8XxkfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTU1YmQ2ODM5NzU2Njg5NWIxNWVjYjk3ZmMxZDY1YzBj
ODc5Y2UwHhcNMjYxMDE4MjEwMDM1WhcNMjYxMDE5MjEwMDM1WjAzMTEwLwYDVQQD
Eyg3YTY3NzlmMmZhOTU5YTA3NDQ1OTg3MjMzYTQ0MTA1Mzk0MjVmNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/K5UzKWGlDyeqK6YuLiJvUNRUQP
xlQMv+TfFZaccgxXniwpAn1JbDN4s9RyAfHmFLdwM3JD8Wlpq0NzUuObzsCqCr9I
2AlMBWGWaTrVczCS4174iOjzpfR1rBRr9kmsRGV2HqCM/lSu2F00FqFhr81+oGVJ
JsFkBchU7fXqfpMvtFc6dS2PvV8qeOP2XC/ud0nWK7Y71U+mEv7CbUGXD2lPuLPi
PzONC/zeB6xxrt7DGKJjpqQXnTsLUktAT9GtAajXG2zpQBpOswMwkW0DXLtbfZrm
hRSF46hDa5yl6xo1fQkYtq7tXh8g5h27aczFxnkosjvaPmzhkS2tzihMDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpnefL6lZoHRFmHIzpEEFOUJfaoMB8GA1UdIwQY
MBaAFCSlW9aDl1ZolbFey5f8HWXAyHnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQt
YzM0ZTkwZDdmOGVhLzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQtYzM0ZTkwZDdmOGVh
LzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzUxo3+z
ysgDpe7nIX2FrjnHP0EUCGokM8YHKL5C1TOe4Lo/GzO1Gb4+M3qWtR53rNt79Smm
JF/uavccK5+jgikuCxVONYswwcJ5EszbPPDld/QFFensw0gnhcwqrWMNE55o9SS6
+BSwZW4cWM83hsAnGmXgVWsciayjXHN0F93tsdxgTnxpv6BXXugaDbfQLqAWtF7a
DCcZ4tgu3DtHQI5seW3IQxxig7fMXyaZjtc9WBepmGsLMkc05pp3OSRo2Wsi9Nab
Lt6IsMZex1Gx7DeL2c+K/d3EBbdogJBcT61EhgcU5FcNT8pCRQQxCW51esWvnLJg
7fqqCQmxbhsDKg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:37:03 2026 by rpki-client