Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: 5HQloqEip8P7NxfD3aHD8avdPHcTBf0qbtHq6iULpLU=
Subject key identifier: D9:C3:BD:D3:7E:19:B5:3F:F5:2B:04:FA:4A:6B:E0:0B:A3:73:23:FB
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019D265F3A0520779DCCE091E1EFE4EBCB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:08 +0000
Manifest this update: Wed 25 Mar 2026 19:01:08 +0000
Manifest next update: Thu 26 Mar 2026 19:01:08 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: u5UtdWrO8Ow3JodrDa2KmJxOqn9sPgM/FUoR+Ttn79g=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3a:05:20:77:9d:cc:e0:91:e1:ef:e4:eb:cb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Mar 25 19:01:08 2026 GMT
Not After : Mar 26 19:01:08 2026 GMT
Subject: CN=d9c3bdd37e19b53ff52b04fa4a6be00ba37323fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:66:0b:91:67:4b:a5:72:ae:bb:f4:fd:9f:
42:b7:ac:b4:ed:5f:d2:0c:43:5d:41:88:26:4f:fa:
82:36:2d:32:72:92:0e:da:7b:7e:80:12:55:66:47:
c3:d3:b9:e0:1b:96:0d:13:ee:09:75:2a:1f:24:d1:
8c:11:7a:e9:5a:f6:15:9d:48:84:3c:ec:fd:48:5e:
02:92:b0:64:6c:72:74:51:bc:35:ff:84:d2:4c:50:
d3:62:84:28:7c:e0:ae:33:cf:3a:f9:01:ef:b7:3b:
1d:58:6f:59:b5:76:15:08:b8:4c:c1:5f:7d:7c:ca:
58:65:04:c9:be:5e:e7:47:8c:a0:47:d9:1a:12:2c:
31:26:5a:ea:4a:cb:83:38:05:35:c8:5e:b1:bc:1f:
ee:6c:9c:8c:e8:2d:34:a1:ac:ce:a3:68:5e:7f:b9:
b4:fe:f0:13:69:4b:c5:c5:f7:b4:15:b8:62:ca:3d:
6e:e4:c9:3e:9d:c9:4f:a7:07:c4:dc:45:0a:fc:5b:
39:59:c3:c0:17:7a:0e:d6:af:61:18:f8:23:09:7e:
7b:ad:17:6d:b5:8f:d8:91:88:90:98:61:ad:4e:f7:
cd:d5:3e:a6:c6:33:b9:65:75:f3:6b:ba:ad:a9:5b:
1c:b5:03:da:ed:27:79:72:36:2f:a0:51:14:28:ac:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:BD:D3:7E:19:B5:3F:F5:2B:04:FA:4A:6B:E0:0B:A3:73:23:FB
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a8:d7:e7:16:16:69:5c:33:f8:ab:47:4a:8a:b4:03:dd:aa:
b8:09:81:73:12:de:84:57:70:cc:f5:c6:04:de:39:a8:2b:d1:
ce:0a:d4:61:14:4b:5e:33:f1:99:26:01:d5:bc:6d:b8:f6:18:
46:d2:53:59:ea:51:6c:2a:f3:49:d2:0a:e0:08:f1:cf:62:bf:
98:f7:a8:fd:60:76:11:3f:9b:40:1d:a9:37:c4:f3:84:a5:2d:
da:66:5e:76:8b:61:4c:5b:b8:ad:89:e2:1a:22:ee:d4:b3:8f:
97:b0:b2:d0:3b:c0:06:37:4c:d0:14:8d:79:67:46:14:84:2c:
dc:8d:5c:4c:18:d8:74:31:a8:1f:6f:79:90:f4:e0:c2:96:5c:
b3:30:fe:01:fe:21:f3:54:23:2a:3b:9b:78:9f:4d:ec:b7:a8:
60:6e:9b:88:89:4b:9c:58:f3:dd:bd:11:95:b0:d9:4e:12:4f:
a3:24:92:8c:0f:2f:ef:76:a0:9c:4f:df:a2:f6:a6:65:c2:fb:
0a:44:a1:95:27:eb:f7:1a:95:d9:ee:ec:ab:29:20:60:53:30:
e8:97:2b:f2:ac:f1:40:97:3b:a3:ad:a4:49:09:2a:1d:25:74:
c6:dc:5c:4d:64:de:4d:03:e5:0f:34:35:5b:0d:11:01:06:ea:
d8:0d:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:50 2026 by rpki-client