Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: 94OmX4ArlpSM0kXO/a5z4pDujILdrDQcxbGh8jTawnI=
Subject key identifier: C7:C9:51:4D:75:86:AD:7A:44:E0:FB:76:CA:05:C6:90:A9:23:32:3F
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 019E1F47E5969556E7B1DD2AFDB577CFF871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 05E5
Signing time: Wed 13 May 2026 03:01:05 +0000
Manifest this update: Wed 13 May 2026 03:01:05 +0000
Manifest next update: Thu 14 May 2026 03:01:05 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: wKDVmDpPQIzrHGcPsKK75IyC+e9VYbHKr0Ey3FYJXZs=)
2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:e5:96:95:56:e7:b1:dd:2a:fd:b5:77:cf:f8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: May 13 03:01:05 2026 GMT
Not After : May 14 03:01:05 2026 GMT
Subject: CN=c7c9514d7586ad7a44e0fb76ca05c690a923323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ed:7f:16:ab:a4:a8:95:de:ee:cc:10:cb:3f:
c9:a9:c8:96:89:fa:d8:0f:c9:11:87:c1:d5:5c:3d:
14:41:63:f7:00:34:47:59:53:e9:80:2f:14:35:60:
7c:8b:0b:ea:67:67:8d:14:49:28:69:d9:46:f1:e5:
8e:b5:b9:01:f4:e5:fb:20:5e:63:e6:2e:41:6e:e4:
8a:eb:aa:1d:78:dd:d3:27:10:78:9c:e4:d4:d9:e1:
8c:ae:ae:ed:4f:b9:0b:64:97:a5:9e:13:a9:05:d7:
d5:2a:8c:3b:fc:67:2a:c1:8d:79:9d:12:e6:58:97:
54:02:ec:a5:4d:6b:c0:e8:ce:95:80:c0:40:70:55:
06:75:f1:10:97:31:f2:9d:5a:a4:a3:94:10:f3:0d:
9f:d3:be:41:8d:d7:78:ad:72:b4:fd:c7:fe:5f:90:
ad:07:21:3f:31:b3:9c:be:49:66:95:69:42:d7:30:
4d:3f:18:1b:87:f5:ab:f5:70:c6:04:92:e8:25:fd:
55:23:0e:2b:b1:6f:cc:47:c0:b3:6f:66:d6:5d:06:
2c:e2:a6:6c:92:cb:37:c7:30:e4:a2:30:06:28:56:
29:47:fe:66:56:bd:e2:5a:e5:85:43:4e:23:87:31:
fc:75:fe:1e:39:1e:35:6a:96:ef:b9:bf:d4:0a:78:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:51:4D:75:86:AD:7A:44:E0:FB:76:CA:05:C6:90:A9:23:32:3F
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:96:25:71:cd:83:69:aa:47:b2:7a:d4:7f:c1:52:6c:b9:30:
6e:d8:d1:8e:92:9e:3c:76:77:d6:a4:9c:a7:38:dd:02:2b:58:
b1:bd:f5:21:3a:f6:59:24:2b:78:91:0a:fd:70:74:11:f3:16:
20:3a:a0:ef:8e:b3:a4:c4:cd:59:7a:6e:a3:44:ab:55:f2:c6:
24:eb:87:e0:e8:90:c9:2c:66:c7:2b:34:21:9f:52:a6:f5:59:
9b:ec:0d:f3:ff:c7:33:dd:03:e2:41:3d:e7:62:57:4b:20:71:
92:6b:d0:59:83:7d:b2:ae:ac:2c:5f:f7:25:b5:40:06:c9:a7:
49:02:e5:b7:79:16:24:e7:02:b6:86:dc:4e:88:a9:86:0f:e7:
04:5c:0c:46:fe:d7:2e:43:1d:8b:88:88:1b:1c:f4:e1:16:08:
9f:fc:ba:9b:8d:5a:96:64:e8:25:07:79:d0:40:af:eb:45:8f:
e8:10:85:42:e3:6d:e9:82:f0:06:19:37:44:2b:be:97:c9:71:
79:53:ff:c7:8d:0c:38:01:30:2c:30:09:d8:1f:d4:f7:fa:2a:
24:b3:43:cd:dd:7f:f2:cc:a8:e3:52:87:b5:7c:9f:e2:9d:29:
bd:cd:09:cd:f2:9f:e9:05:52:2e:ce:48:e0:31:3c:8b:6a:95:
07:3b:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:04 2026 by rpki-client