Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: PqRXoe9IjjXzGLgC7JPTYR1sgqhdOty76XAtSmEkvLU=
Subject key identifier: D5:61:FA:58:89:33:00:E6:DB:80:34:00:82:37:7C:BB:84:1C:14:B6
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 01A0DCF252463976CFCCFBC53644F29E0194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 1169
Signing time: Sat 26 Sep 2026 09:01:03 +0000
Manifest this update: Sat 26 Sep 2026 09:01:03 +0000
Manifest next update: Sun 27 Sep 2026 09:01:03 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: wYle80eP6w/hq2/EgmpG2JK1xrQ+3SYjFNCNlrrKB8I=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:52:46:39:76:cf:cc:fb:c5:36:44:f2:9e:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Sep 26 09:01:03 2026 GMT
Not After : Sep 27 09:01:03 2026 GMT
Subject: CN=d561fa58893300e6db80340082377cbb841c14b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:c9:ba:0a:75:fc:01:8d:e6:52:aa:66:da:
25:e9:da:b9:0e:2a:ef:02:21:0d:6e:8c:aa:55:27:
c1:62:7d:e7:39:8f:ef:07:76:5d:ea:e4:da:1f:57:
ba:cb:a8:ff:5d:7c:a3:64:9b:24:76:66:0a:c3:89:
eb:b7:9d:5d:4a:ce:83:41:6e:75:e8:6d:2b:88:8d:
9d:82:ed:70:55:3d:67:6b:a8:dd:56:54:3f:78:5d:
99:35:13:4a:e5:93:f7:c1:a4:92:6c:70:52:5d:f6:
4a:bb:f6:d2:e0:2f:7a:27:2a:48:ba:fe:3d:52:03:
95:e0:d0:a0:3c:41:9d:45:e3:1c:37:9e:46:58:10:
19:c9:cf:36:9c:5d:2f:95:f9:bb:25:b2:13:58:79:
a7:e3:b5:d5:1d:49:4b:0a:b8:d3:d4:22:b9:19:47:
31:96:18:10:93:d8:aa:2c:74:44:97:01:86:a6:cf:
e4:41:63:ac:ba:c0:65:59:00:39:44:b2:76:40:c6:
3c:18:14:0d:2c:29:9a:5e:65:5b:de:25:90:e3:7d:
e3:83:2f:ad:da:f5:9b:fa:35:42:9c:f8:3a:bb:a9:
61:a7:35:ee:4a:12:f2:a6:20:42:b0:f7:8b:9c:70:
2d:94:16:f3:23:c3:ec:37:ad:5c:06:8c:d7:85:f1:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:FA:58:89:33:00:E6:DB:80:34:00:82:37:7C:BB:84:1C:14:B6
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:64:c9:67:75:93:0a:97:ea:d6:d6:2b:d0:fb:03:fd:e9:65:
13:c4:a7:a0:81:44:08:dd:2f:58:89:39:b9:ae:50:67:1e:1b:
3f:f7:c3:e7:ed:35:53:14:f9:51:be:61:df:89:31:2d:4e:60:
8e:d1:6a:4e:da:de:21:98:2e:b4:34:05:f7:01:8c:40:fd:99:
01:88:4f:e8:b9:7c:a1:4a:05:4d:7e:ea:2a:b7:25:2d:30:61:
e2:9b:bb:32:bb:a0:71:f7:e9:d0:8b:b6:50:eb:56:41:75:6d:
5b:b0:9b:b9:ab:2b:95:b8:71:2d:f3:f4:86:2a:73:6b:45:10:
9c:8d:69:d4:de:f2:c8:94:2e:b0:dc:1b:71:ba:a1:be:25:79:
a4:cd:a0:f5:a0:8d:fc:b8:bb:6d:69:35:a1:fd:db:ad:4f:62:
73:da:cd:20:92:3d:f1:ca:0a:99:73:a2:ef:65:7f:5b:16:15:
ea:41:49:7d:9b:ce:8b:fd:1f:48:5c:56:6a:91:9b:dd:fd:eb:
0e:f4:f2:51:7a:74:60:59:fd:f4:8e:80:1a:c4:23:9c:05:9e:
a2:07:dc:fb:e7:f9:15:f1:8f:9e:55:9f:3a:da:81:54:c6:9d:
5a:42:43:2a:20:6b:91:84:00:fe:e8:d4:5b:1f:ca:32:28:95:
a6:34:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:58 2026 by rpki-client