Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: QRaYvht1Yagpf+UgaFwe+ixlfDjfKH+AoFu5p11mWWM=
Subject key identifier: C8:39:F6:F9:D7:AC:AF:4D:58:7D:B3:8A:5F:AE:45:0D:41:86:BE:28
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 01A002B8EBFAC536054BF8EB709BF594FAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 10F8
Signing time: Sat 15 Aug 2026 00:01:08 +0000
Manifest this update: Sat 15 Aug 2026 00:01:08 +0000
Manifest next update: Sun 16 Aug 2026 00:01:08 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: 4m+uBpCcTVFbu5OqFxqiuH9VaeA3/NGngwyz4f15Jyw=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:eb:fa:c5:36:05:4b:f8:eb:70:9b:f5:94:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Aug 15 00:01:08 2026 GMT
Not After : Aug 16 00:01:08 2026 GMT
Subject: CN=c839f6f9d7acaf4d587db38a5fae450d4186be28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:a5:56:dd:28:51:ef:97:e3:17:98:8d:29:
7b:d8:21:15:0e:72:5a:c1:1b:d4:9b:21:c9:00:37:
8c:73:7c:28:d0:20:5b:af:96:17:aa:38:7d:e6:50:
d4:af:3a:d7:eb:54:d9:22:f3:28:90:71:4b:7d:9d:
ce:6f:36:d0:12:15:15:79:c8:b9:64:5c:66:c0:c6:
c1:da:5e:56:cc:da:79:79:56:5e:47:80:c0:35:30:
8f:1e:22:a8:23:b1:13:42:49:9d:75:1a:8e:fc:23:
9e:10:31:4a:17:d2:ba:85:5d:9c:33:6b:aa:e0:63:
59:2e:08:2e:3b:93:95:03:f2:89:1a:da:a3:c8:36:
bf:c1:8c:b0:2f:39:5f:44:b9:07:97:d8:f8:38:9a:
73:d4:d7:1b:77:09:d7:56:1c:3a:15:1b:93:1e:e7:
dc:9e:dd:15:50:a1:fd:23:6a:e1:54:e9:61:12:a6:
f1:2b:33:51:c6:69:9d:dc:d3:b4:fd:aa:8d:fe:2d:
ad:21:25:54:7d:10:10:b4:fd:ff:86:9d:7e:60:8e:
be:68:0f:77:cb:a6:5c:b1:98:02:fd:44:6d:00:2c:
7a:99:a9:8d:44:c5:92:e7:d2:21:23:39:03:1b:fd:
52:2c:fb:11:8a:92:21:d0:cc:e8:94:92:16:09:92:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:39:F6:F9:D7:AC:AF:4D:58:7D:B3:8A:5F:AE:45:0D:41:86:BE:28
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:95:bc:2e:59:6c:6b:3a:80:e5:b1:77:7f:70:7a:cd:f5:
6a:d8:52:11:df:96:0a:a3:c1:d5:ac:60:e0:7c:ff:de:ce:e4:
ec:b6:02:6e:69:be:bc:ad:df:ee:79:7b:49:fa:a2:76:48:b3:
66:2b:f1:0f:20:6f:a8:db:13:11:74:ae:db:2a:11:a0:40:09:
f6:34:75:01:24:07:70:db:fc:30:1e:47:1c:bd:9e:92:16:b1:
59:76:02:71:ca:27:ba:01:26:76:6c:e5:bd:c5:d3:12:6a:96:
70:3b:af:9a:fb:71:67:73:9c:f5:ce:60:3c:d7:ac:ad:9b:e7:
d2:da:fa:7a:0c:ae:d1:7f:9b:e5:a4:5b:6c:03:fa:f5:b4:3a:
64:bd:21:4d:16:59:00:b3:5e:23:bc:11:6b:1a:ec:f5:3f:49:
22:1d:95:ad:a9:2f:9f:be:52:8c:19:3d:a4:3c:7f:a4:23:1a:
30:39:91:10:cf:c7:aa:8f:a3:4a:09:ea:cf:8f:57:23:b0:25:
5b:4c:bd:0a:07:f0:94:ad:59:54:de:c4:4f:64:a6:62:13:2a:
18:da:81:84:fb:46:19:e3:71:54:88:e1:ae:ea:63:3a:84:21:
a5:c5:a4:b1:0b:5f:7a:3d:ed:01:b2:b1:37:c9:10:87:e2:43:
89:e5:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:48 2026 by rpki-client