Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: X7gospsuJOp/Amiwy/M9fBSuBzOl/JH6Du1sUS070h4=
Subject key identifier: 1C:20:5F:A9:3D:5E:A4:EB:DC:64:E7:E3:C4:20:B4:50:D0:49:DD:81
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 019D277244CD2412B3956800656F3D32EF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 0372
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: C5ZYiT7ii/XRgsJmcHAtbSyCynQvj49fui0Jsq55xyQ=)
2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:44:cd:24:12:b3:95:68:00:65:6f:3d:32:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=1c205fa93d5ea4ebdc64e7e3c420b450d049dd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:48:9c:aa:eb:43:28:62:cb:ea:89:01:fb:
1e:70:5d:6a:4a:dd:37:a9:06:5b:cb:e2:f5:a6:9e:
d6:91:93:f6:70:6e:fb:6d:f7:8c:65:76:3c:79:8b:
6b:f7:83:29:27:56:50:32:4a:5f:5e:9d:6e:fd:28:
67:03:2c:a2:34:e4:e5:bc:0a:8a:a9:b7:a1:bc:f1:
b9:44:1b:99:99:ca:64:bd:fc:33:13:80:30:7c:6d:
cd:aa:05:ec:2a:43:a0:a3:55:5f:38:f0:90:55:1b:
78:dc:40:eb:93:a3:e0:2c:73:bb:8c:83:55:4a:f3:
0a:ea:5c:35:03:72:f1:4f:e4:ab:92:61:6d:3f:50:
e5:ae:f7:c2:a4:dc:87:f8:e4:45:55:c4:45:b9:7d:
61:f5:36:53:ef:10:73:da:02:6f:b7:ac:b3:89:a9:
86:58:50:3b:7f:2d:f4:d6:82:e3:2b:a6:99:bd:79:
ce:6c:11:fb:f4:5f:5e:3e:3a:5b:ef:10:89:01:d0:
1b:83:50:d2:00:f0:e8:08:8e:26:2d:96:e2:5a:cf:
5f:b7:8f:28:32:a9:b6:a4:ba:95:8a:41:01:88:03:
23:76:57:27:a5:0c:e6:b7:c7:9c:bb:fb:6b:aa:45:
97:a3:a4:8a:d4:50:37:d1:ea:51:a9:63:69:61:12:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:5F:A9:3D:5E:A4:EB:DC:64:E7:E3:C4:20:B4:50:D0:49:DD:81
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:ab:42:62:8d:b6:4c:2a:63:2c:cb:1b:04:8f:27:ee:65:
33:62:24:f2:21:2a:f3:b8:51:ac:0e:74:64:bd:c0:0e:36:84:
80:c5:de:1c:d8:a6:c8:2d:f7:4a:8d:d7:3e:95:1f:64:56:ba:
85:1d:7b:3d:cc:52:ba:a0:97:a5:40:b8:2c:3f:d9:9a:35:1d:
c2:6f:4a:23:22:10:db:b8:92:c2:10:0e:40:6a:99:89:38:0b:
70:ce:7e:8d:1a:b6:57:2e:73:a8:30:bd:1c:d7:4c:a9:c7:7b:
58:0f:e9:30:9a:b8:48:b9:ad:78:25:fb:8d:04:fc:bc:58:5a:
74:0e:1a:e1:89:41:0e:f1:b1:b5:9a:f9:07:5b:57:aa:6f:7d:
87:f1:9a:e8:77:43:ae:58:bd:7f:11:59:b0:dd:d4:e3:6f:ad:
1d:82:32:d3:00:04:aa:d4:bc:44:d8:6b:23:37:8e:a4:53:a5:
f2:a0:62:90:3f:bd:75:52:fb:21:30:94:51:24:99:32:0a:61:
a8:1e:e3:a0:38:f4:d5:66:67:ac:95:d2:1b:44:7c:9c:37:75:
90:67:ed:4b:8e:79:b9:14:87:ff:60:09:bd:b7:5d:be:d9:1e:
6c:db:5c:a4:93:c5:28:dd:52:f2:f3:f5:ce:18:c8:6a:63:45:
00:e0:32:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nckTNJBKzlWgAZW89Mu9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz
MzMxNmIwHhcNMjYwMzI2MDAwMTMzWhcNMjYwMzI3MDAwMTMzWjAzMTEwLwYDVQQD
EygxYzIwNWZhOTNkNWVhNGViZGM2NGU3ZTNjNDIwYjQ1MGQwNDlkZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwBInKrrQyhiy+qJAfsecF1qSt03
qQZby+L1pp7WkZP2cG77bfeMZXY8eYtr94MpJ1ZQMkpfXp1u/ShnAyyiNOTlvAqK
qbehvPG5RBuZmcpkvfwzE4AwfG3NqgXsKkOgo1VfOPCQVRt43EDrk6PgLHO7jINV
SvMK6lw1A3LxT+SrkmFtP1DlrvfCpNyH+ORFVcRFuX1h9TZT7xBz2gJvt6yziamG
WFA7fy301oLjK6aZvXnObBH79F9ePjpb7xCJAdAbg1DSAPDoCI4mLZbiWs9ft48o
Mqm2pLqVikEBiAMjdlcnpQzmt8ecu/trqkWXo6SK1FA30epRqWNpYRI4OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwgX6k9XqTr3GTn48QgtFDQSd2BMB8GA1UdIwQY
MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt
NzE2MTIwYWIyZGIyLzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy
LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYerQmKN
tkwqYyzLGwSPJ+5lM2Ik8iEq87hRrA50ZL3ADjaEgMXeHNimyC33So3XPpUfZFa6
hR17PcxSuqCXpUC4LD/ZmjUdwm9KIyIQ27iSwhAOQGqZiTgLcM5+jRq2Vy5zqDC9
HNdMqcd7WA/pMJq4SLmteCX7jQT8vFhadA4a4YlBDvGxtZr5B1tXqm99h/Ga6HdD
rli9fxFZsN3U42+tHYIy0wAEqtS8RNhrIzeOpFOl8qBikD+9dVL7ITCUUSSZMgph
qB7joDj01WZnrJXSG0R8nDd1kGftS455uRSH/2AJvbddvtkebNtcpJPFKN1S8vP1
zhjIamNFAOAy7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:42 2026 by rpki-client