Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: C91etRW6Xzsoe/I2D7sjQCkVjlC1Du8DGyzlbAe/uoo=
Subject key identifier: 17:5D:5A:32:7E:B3:B5:0B:E0:1A:0C:52:08:52:78:1B:B4:B4:5F:5F
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019D26CD28D586AE625471085E0ADC139F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0F7D
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: UQGZ1n2rSaELFwdp1LqbePIZBT/jPs/cowUKfDzUPRk=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:28:d5:86:ae:62:54:71:08:5e:0a:dc:13:9f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=175d5a327eb3b50be01a0c520852781bb4b45f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:13:02:93:23:88:5c:ef:40:f2:df:24:8a:
ab:a1:ab:05:d6:c9:46:9d:c6:27:f7:c0:20:d0:29:
1d:50:0e:5e:51:da:0c:4d:2f:fd:a5:30:e8:43:72:
6c:9a:90:dd:19:af:1a:98:da:54:9a:90:c8:e2:60:
71:64:ed:9d:a1:d1:68:ec:3f:d6:7f:09:fd:d7:d6:
a7:52:3a:07:f2:33:63:9c:13:a4:70:9e:1e:9b:ab:
93:ed:0c:a7:a8:69:bb:40:13:d6:07:08:d5:73:c4:
ee:cf:20:9b:79:fa:7d:9e:1a:c1:a1:06:15:20:b5:
0f:df:4e:fb:1b:e1:be:dc:34:d1:c3:16:08:c1:4d:
d0:2e:53:2f:09:f4:ad:a3:2e:ec:3f:5d:69:03:f8:
ca:e2:62:43:9f:fc:a5:ad:a1:e6:6b:5b:af:40:37:
a4:6d:ab:2d:c5:f3:99:02:4e:ad:12:f6:32:8c:b5:
7e:17:30:a5:4a:82:6c:b3:b2:21:78:c4:2e:f7:b1:
3b:50:69:eb:e6:50:e4:73:79:20:38:a2:1c:bc:62:
24:9e:43:3f:98:bb:6f:9d:79:99:1d:c5:90:e1:b5:
59:fb:98:6a:7e:db:f2:eb:77:ad:0a:59:30:fd:d5:
bb:8d:69:e5:c7:94:45:b9:7d:e6:65:60:f7:b9:f1:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:5A:32:7E:B3:B5:0B:E0:1A:0C:52:08:52:78:1B:B4:B4:5F:5F
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7a:72:9e:0f:3c:56:99:ea:88:b6:0a:a7:a1:12:bb:a0:54:
c5:27:7d:f3:58:d1:15:45:87:b9:b9:6a:c5:a6:43:d2:a3:98:
37:fe:3c:a5:52:57:31:a9:57:fb:a1:eb:b2:8b:0d:e7:f6:89:
97:09:c6:9b:05:10:44:f5:8c:76:b8:a1:31:f6:d9:9d:f5:4a:
dc:e4:cc:79:20:f3:2c:40:1d:c5:51:be:35:d1:19:07:d7:51:
30:87:ef:18:a5:b8:11:83:8b:75:96:ae:8d:bc:45:d7:2a:c9:
1d:e8:f5:07:2a:a1:4b:82:65:8e:dd:7e:51:fa:5f:b5:34:a7:
b7:29:89:15:35:23:2c:72:c7:a2:0a:d4:ca:ac:cb:eb:cc:ef:
7f:36:e3:76:42:c9:33:1a:c5:af:74:8c:26:71:40:da:48:b1:
f7:0f:bf:cf:64:13:7e:48:c5:05:d0:57:8f:a5:19:5f:81:3b:
53:f1:42:54:ce:f8:d5:ff:d3:d7:4f:51:ee:d3:78:70:7f:24:
1b:de:f4:da:66:8b:a1:b5:8a:f2:a6:d9:81:ee:72:96:b5:22:
a7:c3:25:f5:65:38:8f:02:58:be:c3:da:91:8c:e4:ea:d6:7e:
ba:dc:f1:0a:24:91:eb:f7:3f:d7:b0:23:75:81:a5:2d:5e:c8:
f0:cd:31:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSjVhq5iVHEIXgrcE587MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTU1YmQ2ODM5NzU2Njg5NWIxNWVjYjk3ZmMxZDY1YzBj
ODc5Y2UwHhcNMjYwMzI1MjEwMTEyWhcNMjYwMzI2MjEwMTEyWjAzMTEwLwYDVQQD
EygxNzVkNWEzMjdlYjNiNTBiZTAxYTBjNTIwODUyNzgxYmI0YjQ1ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYcTApMjiFzvQPLfJIqroasF1slG
ncYn98Ag0CkdUA5eUdoMTS/9pTDoQ3JsmpDdGa8amNpUmpDI4mBxZO2dodFo7D/W
fwn919anUjoH8jNjnBOkcJ4em6uT7QynqGm7QBPWBwjVc8TuzyCbefp9nhrBoQYV
ILUP3077G+G+3DTRwxYIwU3QLlMvCfStoy7sP11pA/jK4mJDn/ylraHma1uvQDek
bastxfOZAk6tEvYyjLV+FzClSoJss7IheMQu97E7UGnr5lDkc3kgOKIcvGIknkM/
mLtvnXmZHcWQ4bVZ+5hqftvy63etClkw/dW7jWnlx5RFuX3mZWD3ufG14wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBddWjJ+s7UL4BoMUghSeBu0tF9fMB8GA1UdIwQY
MBaAFCSlW9aDl1ZolbFey5f8HWXAyHnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQt
YzM0ZTkwZDdmOGVhLzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQtYzM0ZTkwZDdmOGVh
LzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnpyng88
VpnqiLYKp6ESu6BUxSd981jRFUWHublqxaZD0qOYN/48pVJXMalX+6HrsosN5/aJ
lwnGmwUQRPWMdrihMfbZnfVK3OTMeSDzLEAdxVG+NdEZB9dRMIfvGKW4EYOLdZau
jbxF1yrJHej1ByqhS4Jljt1+UfpftTSntymJFTUjLHLHogrUyqzL68zvfzbjdkLJ
MxrFr3SMJnFA2kix9w+/z2QTfkjFBdBXj6UZX4E7U/FCVM741f/T109R7tN4cH8k
G9702maLobWK8qbZge5ylrUip8Ml9WU4jwJYvsPakYzk6tZ+utzxCiSR6/c/17Aj
dYGlLV7I8M0xlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:50 2026 by rpki-client