Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: sr5E2hWMfj0dddrNedYrAFTDvzF9vCeU0stLgFZBy1U=
Subject key identifier: 12:07:73:D9:78:31:C6:BA:E4:39:AF:79:90:C8:F6:C7:94:B5:66:EA
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019D382DD76912C42AE00EA3CC52804E70D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: 5N2mUGIUtw+S2U02+eAHJVljuRCgdvm0n9Jeb2x+qx8=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d7:69:12:c4:2a:e0:0e:a3:cc:52:80:4e:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=120773d97831c6bae439af7990c8f6c794b566ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:4c:01:ac:af:24:be:62:09:a7:3a:9e:47:
cd:db:2b:61:c6:10:d3:26:fa:b7:8a:f0:f9:e2:c0:
ff:21:ad:2b:12:96:b1:68:6c:68:2a:47:bc:ec:6e:
a3:05:0c:d8:55:59:eb:38:27:50:d4:10:bd:cc:b6:
5f:66:dd:e2:b4:f3:a5:73:84:49:3a:b2:b8:8f:9d:
31:2f:5b:ff:bd:0e:bf:9c:d6:ff:0a:a7:f0:4c:5d:
8f:38:d5:3a:cd:d3:58:68:b8:2a:81:57:d6:0d:8f:
d6:0c:a9:8c:b0:62:65:8a:0d:b9:8f:a7:37:16:93:
bb:6b:06:c5:81:0d:45:9c:de:ab:43:70:f5:bd:b6:
2d:48:de:a3:f6:11:2b:f3:43:aa:01:04:86:06:e8:
e8:ca:4d:7f:c4:e9:c6:e6:6a:2c:42:a6:b9:53:07:
e5:3d:aa:7e:4e:db:18:54:15:92:8a:66:73:3c:b8:
2d:54:94:f4:39:3d:2b:c4:e1:cb:1d:97:f5:f8:86:
7f:59:3e:44:ac:cf:ca:ca:d0:d0:f8:a7:00:f5:a9:
29:fc:b6:be:38:83:00:e2:4d:6d:b8:c4:7f:ef:13:
f1:9f:e5:9a:75:8e:78:ec:cb:30:1f:3d:3a:5c:2a:
eb:2b:55:7f:a5:c7:fc:00:f6:a2:bb:05:7c:ce:23:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:73:D9:78:31:C6:BA:E4:39:AF:79:90:C8:F6:C7:94:B5:66:EA
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c5:3b:18:75:41:37:a8:52:75:9e:f2:66:bd:e7:a5:67:5c:
db:5f:e0:38:50:aa:3a:8f:50:e2:07:e0:bb:22:5e:07:e0:6a:
53:9b:d6:d9:15:ca:cd:30:f5:29:16:a3:3e:90:f7:0b:be:d3:
e8:99:9c:11:47:6e:34:ea:52:53:d8:08:14:bf:4f:e9:32:c3:
da:e7:e3:f6:0f:76:d4:5d:e6:30:b4:9c:05:ce:a0:5e:21:9d:
6f:da:01:ca:f5:cb:2e:6d:1a:96:15:15:fc:f5:f8:2e:af:fb:
c9:75:40:cf:d0:1b:80:8a:6a:ff:12:27:9e:dd:72:23:d3:8d:
28:84:39:d1:17:21:f1:73:a3:e7:2c:a9:ad:f4:4a:65:d9:3d:
c1:f0:82:c7:be:e5:bb:2a:a9:59:67:6d:6e:1f:f6:17:65:90:
eb:30:1c:35:7b:c4:dc:7e:b0:17:88:fe:32:6e:a6:09:32:29:
4a:a7:70:e3:bd:b9:5d:ae:aa:1d:59:d4:b2:c5:2f:f0:40:2e:
a1:7f:b4:b9:ab:19:07:4c:eb:22:b8:14:01:d6:d2:30:25:74:
c8:72:fd:ac:c5:ce:26:9c:57:d5:b4:9c:6a:53:6b:ec:94:81:
14:44:48:c3:45:5f:a3:c0:f1:f6:70:24:9b:6b:a6:1f:a5:b1:
3f:ce:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:01 2026 by rpki-client