Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: 4Ux4zEKhwIFssiuKeEMcZMZcJWzi4oEVhS/Mz1YfCqk=
Subject key identifier: 6B:6E:5D:56:7B:05:96:59:D3:73:B6:A7:AA:BB:B4:01:88:48:21:3B
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 019D2A048A7995A94272618DA4A73B83BA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 0566
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: k+vve9XwUeYPfUMiicMRrzTutyvOXhEwY2/Oe2tuN9w=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:8a:79:95:a9:42:72:61:8d:a4:a7:3b:83:ba:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=6b6e5d567b059659d373b6a7aabbb4018848213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:98:f1:f6:8c:8e:56:93:35:4b:42:93:7f:
c1:67:b3:95:de:7f:17:0c:a6:87:4e:f1:37:07:f6:
a7:d8:77:d4:f9:14:ea:2f:44:b9:ca:04:09:38:7d:
1f:c9:ab:7b:98:cf:76:8d:c6:a8:15:9b:84:de:59:
0b:e5:82:95:b0:f5:46:d3:97:c1:86:82:30:49:6a:
a2:1b:b0:c8:f1:2a:01:34:f7:84:c7:45:3e:8c:87:
8c:64:d9:0e:00:ea:db:63:27:79:fd:39:53:dc:e5:
7c:1e:b6:43:a2:06:fa:7b:6e:ea:22:d4:34:5b:81:
e7:aa:06:34:63:76:c9:88:7f:c8:ed:d7:48:76:27:
fa:4c:15:45:e4:07:6d:5e:cf:95:6f:f9:ef:b2:43:
b9:d5:e2:f4:d5:e7:49:09:ec:21:89:e1:6d:74:a0:
65:82:ab:91:a4:fd:a1:52:b1:74:eb:17:b9:e4:5e:
94:e1:99:4e:70:7a:75:50:d4:b2:9f:83:e4:8a:5f:
25:ad:09:30:05:83:d7:f2:3b:7c:be:d3:76:b4:4e:
c6:3b:24:25:b2:9d:e6:ea:8a:d1:f5:ec:e9:3f:88:
3f:28:c6:2d:fd:f6:df:bc:83:92:e3:3c:fc:d0:38:
76:f8:03:89:08:e3:40:b3:5f:62:82:9e:f7:c5:98:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6E:5D:56:7B:05:96:59:D3:73:B6:A7:AA:BB:B4:01:88:48:21:3B
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:73:6e:a1:2e:27:fa:ef:ea:90:0a:c4:e8:be:e3:27:bb:
47:ff:6a:b0:09:c1:12:db:8d:26:df:b0:ac:59:a6:28:af:4f:
55:af:3b:b7:1a:b9:6e:e1:a3:ff:c2:62:76:ae:e1:0c:93:f3:
06:21:4a:55:19:64:31:cb:20:69:8f:c6:25:2e:08:a5:a0:d9:
de:31:b1:d5:4e:e1:dd:9c:9b:09:e6:2f:76:77:a1:91:9f:47:
26:89:cc:e2:6c:90:af:5b:93:43:90:7b:cd:5a:da:8f:96:0b:
17:2b:9f:19:17:75:93:f3:6f:5b:7e:cd:43:ea:de:78:ba:27:
ee:1f:8e:57:6d:63:6f:1a:b4:46:e5:40:28:8e:c1:37:27:60:
9d:34:69:24:ce:87:19:ff:85:de:dd:dd:90:44:99:86:cc:1d:
ed:4f:da:6d:ce:6c:fe:01:e7:d3:d0:1e:52:09:0b:83:1c:26:
61:d6:bd:40:8a:5d:4e:82:ff:f4:4b:5e:d2:a6:41:0a:6d:6c:
a6:14:bc:90:9b:37:b8:61:f8:4e:7b:aa:60:ff:23:3e:bf:9d:
99:6e:28:cc:b9:da:8a:01:6b:35:f5:3c:3e:7a:5a:60:bf:8e:
cd:e4:05:2e:f1:1d:0f:06:90:fc:8a:d7:50:2d:3e:e9:fb:b1:
70:e1:f6:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBIp5lalCcmGNpKc7g7pwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjYwMzI2MTIwMDMzWhcNMjYwMzI3MTIwMDMzWjAzMTEwLwYDVQQD
Eyg2YjZlNWQ1NjdiMDU5NjU5ZDM3M2I2YTdhYWJiYjQwMTg4NDgyMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR6Y8faMjlaTNUtCk3/BZ7OV3n8X
DKaHTvE3B/an2HfU+RTqL0S5ygQJOH0fyat7mM92jcaoFZuE3lkL5YKVsPVG05fB
hoIwSWqiG7DI8SoBNPeEx0U+jIeMZNkOAOrbYyd5/TlT3OV8HrZDogb6e27qItQ0
W4HnqgY0Y3bJiH/I7ddIdif6TBVF5AdtXs+Vb/nvskO51eL01edJCewhieFtdKBl
gquRpP2hUrF06xe55F6U4ZlOcHp1UNSyn4Pkil8lrQkwBYPX8jt8vtN2tE7GOyQl
sp3m6orR9ezpP4g/KMYt/fbfvIOS4zz80Dh2+AOJCONAs19igp73xZjsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtuXVZ7BZZZ03O2p6q7tAGISCE7MB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTlzbqEu
J/rv6pAKxOi+4ye7R/9qsAnBEtuNJt+wrFmmKK9PVa87txq5buGj/8Jidq7hDJPz
BiFKVRlkMcsgaY/GJS4IpaDZ3jGx1U7h3ZybCeYvdnehkZ9HJonM4myQr1uTQ5B7
zVraj5YLFyufGRd1k/NvW37NQ+reeLon7h+OV21jbxq0RuVAKI7BNydgnTRpJM6H
Gf+F3t3dkESZhswd7U/abc5s/gHn09AeUgkLgxwmYda9QIpdToL/9Ete0qZBCm1s
phS8kJs3uGH4TnuqYP8jPr+dmW4ozLnaigFrNfU8PnpaYL+OzeQFLvEdDwaQ/IrX
UC0+6fuxcOH2+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:04 2026 by rpki-client