Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: dnpEH5c8U4mJM4wHU2URnM9FeyBOBupwGVjaGyonpWc=
Subject key identifier: 4C:A2:7E:E8:83:E3:C6:D0:F9:3D:77:86:F7:1A:E5:55:90:8A:F5:3B
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 01A0D493FFE7809A744285301D8E137BD7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 074C
Signing time: Thu 24 Sep 2026 18:01:04 +0000
Manifest this update: Thu 24 Sep 2026 18:01:04 +0000
Manifest next update: Fri 25 Sep 2026 18:01:04 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: YdOwFRZO2YWXChLRn60tmaaqp9krqdtSA+MAPu8xrgE=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:ff:e7:80:9a:74:42:85:30:1d:8e:13:7b:d7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Sep 24 18:01:04 2026 GMT
Not After : Sep 25 18:01:04 2026 GMT
Subject: CN=4ca27ee883e3c6d0f93d7786f71ae555908af53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:98:ef:07:e3:1f:65:32:91:e0:63:d7:73:
63:fa:a8:d9:f3:57:aa:1b:04:a7:b0:0f:d4:a6:6b:
36:e7:ec:89:46:b7:62:d4:aa:a3:38:59:12:f0:c4:
c3:fc:33:38:7e:d8:5f:76:7a:b8:c2:d1:94:e4:c9:
f7:a8:54:3c:6c:e1:d9:49:5b:c1:f4:1c:21:a9:d4:
00:27:30:8f:3e:9d:f3:07:aa:3c:8d:0b:b6:04:1a:
e4:08:6b:50:fe:da:27:27:49:d5:56:c6:f8:ab:3b:
b9:72:e1:4a:82:94:27:80:dc:c9:22:d9:bd:5a:0c:
d6:d2:70:97:01:7e:1c:e3:69:80:13:d6:2a:40:b6:
77:4c:90:89:3a:06:91:dd:37:ab:5f:f8:64:78:8a:
8a:ef:b4:15:15:0b:a4:30:15:80:77:cb:cd:b8:4b:
57:40:64:e7:b6:34:9b:9d:9a:12:60:ca:92:c2:b0:
78:2f:c2:1a:64:69:a3:21:5c:f9:af:ad:04:38:ee:
bd:1d:5d:21:21:04:9d:65:6d:7b:ad:d4:3d:29:cb:
f1:b6:e5:c1:c4:09:13:71:bf:a7:18:b9:39:a1:4e:
d2:16:0b:62:f5:57:26:3d:69:32:cd:16:19:99:a1:
84:af:92:ba:43:4e:45:91:29:40:95:d8:44:a1:e6:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:7E:E8:83:E3:C6:D0:F9:3D:77:86:F7:1A:E5:55:90:8A:F5:3B
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5c:cb:3b:57:42:b2:c6:0d:24:b0:c8:e8:a4:d0:06:a6:60:
f9:52:ed:1e:b5:78:d2:a5:31:a7:d3:c9:39:dc:c5:56:45:8e:
6f:92:fe:9f:01:43:6b:46:f9:88:b6:a0:6e:00:81:d4:a3:da:
de:15:7f:18:f6:e8:f7:03:58:30:3d:df:fd:00:b8:c9:8d:5f:
fd:f0:48:59:4d:72:82:ee:82:84:44:1a:9a:2f:2a:54:aa:6d:
17:9f:b2:be:d4:b8:69:51:75:32:53:72:21:ac:75:e0:1b:5e:
7a:a4:22:76:28:d0:ae:e7:7b:96:15:8f:91:d3:1b:4e:25:96:
dd:65:d4:80:8e:b2:bc:89:51:89:49:cb:fe:5a:aa:04:93:cd:
88:ca:83:a9:7c:32:47:9e:12:b4:23:c7:15:49:ab:c0:df:7e:
d2:8a:00:6c:e3:58:a4:6e:2f:5c:30:5c:65:4f:20:0a:b8:4f:
00:70:82:5a:9b:19:2f:eb:b2:c6:6c:5a:4d:a9:52:dc:1f:6d:
a1:ed:97:90:9a:cd:2f:c9:25:76:49:7d:08:28:9c:75:dd:a7:
83:55:e4:92:46:66:11:78:29:e4:e5:e3:bd:02:5a:c7:60:83:
28:9e:af:5a:99:d0:39:3f:11:71:d7:22:d1:c2:f9:89:88:69:
ea:61:07:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUk//ngJp0QoUwHY4Te9ezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjYwOTI0MTgwMTA0WhcNMjYwOTI1MTgwMTA0WjAzMTEwLwYDVQQD
Eyg0Y2EyN2VlODgzZTNjNmQwZjkzZDc3ODZmNzFhZTU1NTkwOGFmNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNOY7wfjH2UykeBj13Nj+qjZ81eq
GwSnsA/Upms25+yJRrdi1KqjOFkS8MTD/DM4fthfdnq4wtGU5Mn3qFQ8bOHZSVvB
9BwhqdQAJzCPPp3zB6o8jQu2BBrkCGtQ/tonJ0nVVsb4qzu5cuFKgpQngNzJItm9
WgzW0nCXAX4c42mAE9YqQLZ3TJCJOgaR3TerX/hkeIqK77QVFQukMBWAd8vNuEtX
QGTntjSbnZoSYMqSwrB4L8IaZGmjIVz5r60EOO69HV0hIQSdZW17rdQ9KcvxtuXB
xAkTcb+nGLk5oU7SFgti9VcmPWkyzRYZmaGEr5K6Q05FkSlAldhEoeZnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyifuiD48bQ+T13hvca5VWQivU7MB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFzLO1dC
ssYNJLDI6KTQBqZg+VLtHrV40qUxp9PJOdzFVkWOb5L+nwFDa0b5iLagbgCB1KPa
3hV/GPbo9wNYMD3f/QC4yY1f/fBIWU1ygu6ChEQami8qVKptF5+yvtS4aVF1MlNy
Iax14BteeqQidijQrud7lhWPkdMbTiWW3WXUgI6yvIlRiUnL/lqqBJPNiMqDqXwy
R54StCPHFUmrwN9+0ooAbONYpG4vXDBcZU8gCrhPAHCCWpsZL+uyxmxaTalS3B9t
oe2XkJrNL8kldkl9CCicdd2ng1XkkkZmEXgp5OXjvQJax2CDKJ6vWpnQOT8Rcdci
0cL5iYhp6mEHow==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:33:07 2026 by rpki-client