Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: Edu+yB8nThll7ukyA9Ak0yOtbfmgz4DpjXqXtYW+wno=
Subject key identifier: 38:AC:FA:4B:B5:EC:F3:49:98:57:80:23:F0:2F:FE:32:3C:F1:BB:63
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019E1DFE930F34B678FCAD55A9E993B63FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0FFD
Signing time: Tue 12 May 2026 21:01:23 +0000
Manifest this update: Tue 12 May 2026 21:01:23 +0000
Manifest next update: Wed 13 May 2026 21:01:23 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: VTl59PPUC+qmLCPS/dSTbMyIoOmu7W6nVUhqyRw4Uhs=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:93:0f:34:b6:78:fc:ad:55:a9:e9:93:b6:3f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: May 12 21:01:23 2026 GMT
Not After : May 13 21:01:23 2026 GMT
Subject: CN=38acfa4bb5ecf34998578023f02ffe323cf1bb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:2b:38:f3:77:22:93:96:2b:b2:b1:c6:1e:
6c:27:ef:97:f9:f1:f1:63:8c:e5:49:d1:3a:c1:39:
24:ac:14:6d:37:02:b9:66:d2:0c:6c:55:d8:e3:ff:
b4:5d:15:89:9c:08:d5:fd:a6:97:c9:02:25:3d:96:
cd:c0:2e:0a:54:a9:6c:ab:8f:9b:0b:81:cc:d0:0f:
b8:c9:99:11:c8:d8:4e:b5:44:8d:29:9a:f2:e8:54:
bd:7d:c4:34:84:e0:88:ad:1b:ab:ee:b9:32:9a:a4:
df:35:1c:a8:e1:59:ba:dc:26:bd:5f:c2:8b:7a:5f:
02:65:16:ca:79:2f:e8:72:7d:6b:ab:72:cd:9d:ed:
cf:77:9c:57:43:c7:0b:0c:1f:5b:1e:22:ae:8f:7d:
a4:c7:72:8e:df:71:2a:af:ec:d6:89:ff:93:a3:68:
d2:89:aa:04:64:6f:64:32:8e:01:6c:79:88:d7:70:
4d:76:84:8f:b0:42:84:a3:35:21:c1:54:70:7d:8c:
c7:e0:32:a9:17:d6:6c:3a:78:5a:23:45:5f:1d:3b:
02:79:b1:ff:05:0e:c5:94:17:7a:40:cb:80:50:f1:
31:6a:74:1e:f8:5a:48:1d:9a:06:80:33:ab:05:c8:
a6:ef:b6:28:1f:db:19:45:cd:cd:07:66:08:8b:39:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AC:FA:4B:B5:EC:F3:49:98:57:80:23:F0:2F:FE:32:3C:F1:BB:63
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:de:d1:ee:ad:2d:dc:ae:2a:a6:60:84:4d:5a:4e:4d:92:5d:
1e:d1:70:6d:8f:d9:62:26:dc:56:67:79:cd:9a:29:07:b5:80:
43:5b:8b:51:7c:65:b3:e0:61:7f:81:ff:ff:45:da:eb:b7:ed:
61:66:0c:bc:b7:e9:65:35:b2:21:c6:16:e2:6a:3b:2e:f7:d3:
43:6b:bb:36:fe:cc:a9:27:b7:af:11:5f:77:db:89:ee:80:b5:
af:b5:a2:cf:99:3b:0a:39:47:9b:c7:63:93:6c:f1:15:82:90:
da:46:9d:04:ed:ac:c7:b9:6f:03:a2:e9:5a:45:66:2c:01:92:
e0:1b:f0:45:8b:23:37:e5:70:ca:3f:f1:7b:57:a1:77:5c:e2:
a5:ee:86:90:09:74:fe:66:41:23:d6:2d:9f:e1:a7:e7:de:a6:
73:2c:d4:c3:9a:83:93:37:43:23:bb:e6:f5:fb:24:b7:b2:0b:
0f:b8:5b:f1:99:c8:af:30:05:11:09:2b:2f:0a:34:7e:62:8c:
c6:85:11:90:8a:db:98:3e:82:b9:15:66:6b:b0:15:ef:b6:06:
60:de:37:78:50:3e:c0:97:b9:2d:00:75:94:34:07:c8:bb:61:
21:9d:f2:e1:67:2c:56:40:1a:9b:fa:42:bf:95:ec:e5:86:ac:
69:18:cd:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/pMPNLZ4/K1VqemTtj/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTU1YmQ2ODM5NzU2Njg5NWIxNWVjYjk3ZmMxZDY1YzBj
ODc5Y2UwHhcNMjYwNTEyMjEwMTIzWhcNMjYwNTEzMjEwMTIzWjAzMTEwLwYDVQQD
EygzOGFjZmE0YmI1ZWNmMzQ5OTg1NzgwMjNmMDJmZmUzMjNjZjFiYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4UrOPN3IpOWK7Kxxh5sJ++X+fHx
Y4zlSdE6wTkkrBRtNwK5ZtIMbFXY4/+0XRWJnAjV/aaXyQIlPZbNwC4KVKlsq4+b
C4HM0A+4yZkRyNhOtUSNKZry6FS9fcQ0hOCIrRur7rkymqTfNRyo4Vm63Ca9X8KL
el8CZRbKeS/ocn1rq3LNne3Pd5xXQ8cLDB9bHiKuj32kx3KO33Eqr+zWif+To2jS
iaoEZG9kMo4BbHmI13BNdoSPsEKEozUhwVRwfYzH4DKpF9ZsOnhaI0VfHTsCebH/
BQ7FlBd6QMuAUPExanQe+FpIHZoGgDOrBcim77YoH9sZRc3NB2YIizl6KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDis+ku17PNJmFeAI/Av/jI88btjMB8GA1UdIwQY
MBaAFCSlW9aDl1ZolbFey5f8HWXAyHnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQt
YzM0ZTkwZDdmOGVhLzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQtYzM0ZTkwZDdmOGVh
LzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI97R7q0t
3K4qpmCETVpOTZJdHtFwbY/ZYibcVmd5zZopB7WAQ1uLUXxls+Bhf4H//0Xa67ft
YWYMvLfpZTWyIcYW4mo7LvfTQ2u7Nv7MqSe3rxFfd9uJ7oC1r7Wiz5k7CjlHm8dj
k2zxFYKQ2kadBO2sx7lvA6LpWkVmLAGS4BvwRYsjN+Vwyj/xe1ehd1zipe6GkAl0
/mZBI9Ytn+Gn596mcyzUw5qDkzdDI7vm9fskt7ILD7hb8ZnIrzAFEQkrLwo0fmKM
xoURkIrbmD6CuRVma7AV77YGYN43eFA+wJe5LQB1lDQHyLthIZ3y4WcsVkAam/pC
v5Xs5YasaRjN1w==
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:58 2026 by rpki-client