Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: VpF9OPtuvNqtcv/9R+S6RY6GyL5sGL/PjOC3SevymVA=
Subject key identifier: 2C:2F:82:2D:1D:0A:61:5F:BA:04:70:07:70:57:02:E5:E0:4E:A9:F6
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 019D3A537F7894616DADEB84005FE12EE5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 160E
Signing time: Sun 29 Mar 2026 16:00:43 +0000
Manifest this update: Sun 29 Mar 2026 16:00:43 +0000
Manifest next update: Mon 30 Mar 2026 16:00:43 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: B/QiYWHKvpVkCd0L0WbaxgfcS8c+Ajzu4u0yBMu8WIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:7f:78:94:61:6d:ad:eb:84:00:5f:e1:2e:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Mar 29 16:00:43 2026 GMT
Not After : Mar 30 16:00:43 2026 GMT
Subject: CN=2c2f822d1d0a615fba047007705702e5e04ea9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:46:7b:4b:8a:89:e6:f8:49:94:3b:0d:03:
ec:d1:86:f9:85:f9:af:f8:cd:87:0e:13:ad:80:d4:
2f:69:23:6a:92:8f:f8:f7:c7:ad:bb:88:de:f1:a5:
5b:4e:ed:e4:04:07:8b:7b:01:83:db:f1:1d:23:b7:
7a:77:4b:51:df:2b:8f:94:73:49:be:07:5e:b2:1f:
97:59:d9:bc:2b:82:0f:8e:71:2c:a8:d9:9d:59:59:
44:0e:ec:0d:8b:1d:05:92:fc:1a:c6:de:74:a0:ea:
63:d9:d5:5f:d9:ab:45:45:e3:8e:56:d2:bf:da:38:
d8:bf:8d:c0:83:de:93:fe:61:2c:81:44:77:a1:ac:
8d:1a:f5:38:37:37:55:ba:a0:9f:3c:d1:d2:81:46:
c4:f6:38:4c:19:9c:bc:18:97:ff:f3:e5:e0:67:84:
fd:ec:bc:fe:fd:80:8d:2c:e3:6c:e2:d1:56:03:ea:
4d:43:52:29:f3:7e:6b:81:31:2d:f2:cd:f8:9c:71:
2e:f5:61:89:bc:fb:d2:97:78:b4:74:4f:bb:cd:63:
0c:3b:62:54:6d:21:f1:24:71:98:f1:fe:b0:8d:00:
5d:2d:01:93:bb:a1:e8:c2:de:6a:6a:b8:49:f1:96:
1c:93:50:56:b4:62:bc:16:92:aa:aa:5a:da:b0:25:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:82:2D:1D:0A:61:5F:BA:04:70:07:70:57:02:E5:E0:4E:A9:F6
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:81:57:fe:1b:ef:fd:dc:1c:2b:03:02:78:db:59:0d:69:e5:
73:18:cf:d9:a2:5a:da:35:e5:5a:e8:8f:17:34:b1:0a:34:46:
e3:89:30:16:e3:b8:2b:a3:2b:c1:09:6a:bd:76:c5:43:e8:b0:
71:6b:a8:c2:60:49:b0:fb:35:c0:5d:9a:5a:c7:c1:14:42:60:
b7:85:68:e2:c8:4b:e1:f5:da:bc:4b:38:61:0e:5b:b4:1d:7c:
fc:43:db:f3:80:f9:b9:74:bd:93:5b:15:90:29:a0:a2:d3:29:
72:de:0a:93:1f:34:af:ec:77:d3:4e:bc:48:0b:1c:85:1d:4e:
f1:6a:bc:5a:41:79:0f:ce:2f:49:65:19:92:34:d7:48:ca:5f:
92:30:fb:4d:20:1e:b6:c5:2b:5d:91:5d:fe:97:00:8f:dc:fe:
95:60:b1:f1:02:55:34:2b:7a:dd:8b:80:02:92:43:c4:6b:ea:
c5:69:1a:e2:6b:5c:69:56:8d:26:8c:37:00:59:56:b2:a5:c8:
23:91:02:78:9d:2b:86:24:ce:b1:21:10:0d:73:e3:0e:3f:8e:
e6:ce:60:73:da:2f:25:f6:13:2b:a3:80:73:c3:e5:0a:c9:c6:
97:dc:6d:ac:21:95:ab:cf:eb:e7:23:0d:f5:00:be:4d:33:ef:
d4:1a:38:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U394lGFtreuEAF/hLuXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTVmNGEzYTdlYzY0MGM5MjM0NTA3OTk0YzBjNjVmMjhl
MmZjNTkwHhcNMjYwMzI5MTYwMDQzWhcNMjYwMzMwMTYwMDQzWjAzMTEwLwYDVQQD
EygyYzJmODIyZDFkMGE2MTVmYmEwNDcwMDc3MDU3MDJlNWUwNGVhOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiFGe0uKieb4SZQ7DQPs0Yb5hfmv
+M2HDhOtgNQvaSNqko/498etu4je8aVbTu3kBAeLewGD2/EdI7d6d0tR3yuPlHNJ
vgdesh+XWdm8K4IPjnEsqNmdWVlEDuwNix0Fkvwaxt50oOpj2dVf2atFReOOVtK/
2jjYv43Ag96T/mEsgUR3oayNGvU4NzdVuqCfPNHSgUbE9jhMGZy8GJf/8+XgZ4T9
7Lz+/YCNLONs4tFWA+pNQ1Ip835rgTEt8s34nHEu9WGJvPvSl3i0dE+7zWMMO2JU
bSHxJHGY8f6wjQBdLQGTu6Howt5qarhJ8ZYck1BWtGK8FpKqqlrasCWMfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwvgi0dCmFfugRwB3BXAuXgTqn2MB8GA1UdIwQY
MBaAFCSl9KOn7GQMkjRQeZTAxl8o4vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUt
YmRkOWI0MzAzYzk2LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUtYmRkOWI0MzAzYzk2
LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoFX/hvv
/dwcKwMCeNtZDWnlcxjP2aJa2jXlWuiPFzSxCjRG44kwFuO4K6MrwQlqvXbFQ+iw
cWuowmBJsPs1wF2aWsfBFEJgt4Vo4shL4fXavEs4YQ5btB18/EPb84D5uXS9k1sV
kCmgotMpct4Kkx80r+x30068SAschR1O8Wq8WkF5D84vSWUZkjTXSMpfkjD7TSAe
tsUrXZFd/pcAj9z+lWCx8QJVNCt63YuAApJDxGvqxWka4mtcaVaNJow3AFlWsqXI
I5ECeJ0rhiTOsSEQDXPjDj+O5s5gc9ovJfYTK6OAc8PlCsnGl9xtrCGVq8/r5yMN
9QC+TTPv1Bo4sQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:51 2026 by rpki-client