Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: QXc4NuMFKv3Tv+dfHOo40F5QNHvAQxP25B56hELS5tE=
Subject key identifier: 12:DB:C9:5C:74:D9:B5:76:76:0B:38:B7:DA:73:F1:3D:86:D5:1B:D3
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019E314DBF0192CFBCDA5198760981A8B76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 1007
Signing time: Sat 16 May 2026 15:00:39 +0000
Manifest this update: Sat 16 May 2026 15:00:39 +0000
Manifest next update: Sun 17 May 2026 15:00:39 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: ZUUur23wSDJaIksMPjl+5NV4hkfCrkAOq4g1Dx4YCac=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:bf:01:92:cf:bc:da:51:98:76:09:81:a8:b7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: May 16 15:00:39 2026 GMT
Not After : May 17 15:00:39 2026 GMT
Subject: CN=12dbc95c74d9b576760b38b7da73f13d86d51bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:1d:42:b6:be:8e:b4:56:48:d9:5c:bb:bb:
b0:d5:3d:fc:6a:a9:fc:e0:64:33:a6:72:2f:0f:69:
0b:be:42:83:b3:6e:23:1d:64:05:6a:23:ac:7f:fe:
bc:4a:12:e6:3d:4d:88:97:64:f7:8c:5e:9c:c2:3a:
9d:65:bb:e0:82:ac:f9:52:64:16:c3:6b:12:83:7f:
2b:d4:c6:bc:aa:0f:67:68:fc:7f:12:3d:20:13:20:
ab:b2:d5:60:14:57:6c:fc:35:d8:6a:62:e9:df:16:
47:ff:4d:26:1b:50:ff:81:2e:ea:33:14:b5:ad:9d:
2b:b6:47:0a:44:8a:dc:c1:db:0e:4f:50:3d:b1:23:
cb:a0:8a:33:1b:4d:51:83:71:53:d7:cb:5c:fa:a0:
22:09:7d:44:1d:a8:f1:90:61:10:01:05:8d:98:82:
de:c5:5e:a5:b2:e1:86:e1:8e:ae:76:b4:d0:95:84:
1b:3a:3e:5c:9d:98:08:ab:42:29:8a:96:9a:9d:56:
00:c8:64:16:d4:71:1e:58:cd:cb:99:25:a0:02:ae:
6a:f4:6b:0a:ed:1f:9c:0e:a8:e1:e2:5c:b4:5c:c9:
c1:3e:e4:65:33:a0:bc:03:51:1a:25:53:e9:28:d4:
46:92:03:3c:3e:3b:95:96:ca:e3:df:59:52:40:33:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DB:C9:5C:74:D9:B5:76:76:0B:38:B7:DA:73:F1:3D:86:D5:1B:D3
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:b6:88:05:2a:50:51:92:95:46:52:3c:c0:44:27:99:10:
f6:92:d9:1b:d1:56:c9:fb:a4:95:27:ed:00:71:1a:d0:f7:b6:
bf:7a:72:ec:d1:89:76:13:71:95:54:ea:23:5f:fc:2c:18:ad:
59:9b:0f:54:d2:d0:4f:f4:63:30:1c:89:1d:2e:9e:19:e5:96:
a5:55:2f:5a:24:70:94:f7:03:0e:1b:34:c6:62:34:0d:18:60:
91:1d:8f:f5:70:2b:28:8b:3a:82:d1:d7:db:05:6e:25:45:bb:
ec:71:2b:17:91:60:fd:33:a0:c6:7b:c8:f8:52:56:be:21:c0:
8c:fe:32:58:d1:2c:38:4f:b6:d6:be:61:15:3d:bd:3a:b0:4b:
e2:35:7e:ed:73:8a:84:0b:0b:39:e1:b9:56:0a:f0:2f:9b:03:
a9:ff:fe:12:59:0b:ab:93:6e:c1:52:39:78:ed:02:1e:0f:d0:
42:79:5e:4b:73:c9:95:a6:77:d7:63:48:58:d3:39:54:01:9d:
7a:46:50:d2:22:af:6a:69:53:e1:03:92:3a:98:83:75:50:e5:
c1:88:82:26:22:46:ec:0b:8c:ae:9b:08:df:40:48:a2:85:d7:
7e:18:6a:19:da:10:48:92:03:96:c8:61:76:90:9e:b5:fd:72:
8e:8b:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:37 2026 by rpki-client