Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: Yt3fIxisVo66uYLolyVt+h/0+kuzr/JSeJ5RkAJqqmg=
Subject key identifier: 26:6F:67:CB:79:20:BF:A7:55:A6:47:A5:C7:AD:0E:BE:3E:4E:B9:E5
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019F92B66B68F1D5FAF2139750E0F8F7B874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 10BE
Signing time: Fri 24 Jul 2026 06:00:56 +0000
Manifest this update: Fri 24 Jul 2026 06:00:56 +0000
Manifest next update: Sat 25 Jul 2026 06:00:56 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: Y9LoTywxzotnReP3orMG1YV7PX5o9ULmhf8joKahXCM=)
2: KYWYz37W-oiiVMTE12p7KDhTRJ8.roa (hash: u5WkIjTwcVuD735fZub81fTbRjzJme3krFppRq6V43o=)
3: VTea53OmJEHJwddWLIOrBXN7NCU.roa (hash: MA0ih7Cny2DYqbaaArx/Vqwv+xYc7aS/X6KjSMQOwx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:6b:68:f1:d5:fa:f2:13:97:50:e0:f8:f7:b8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Jul 24 06:00:56 2026 GMT
Not After : Jul 25 06:00:56 2026 GMT
Subject: CN=266f67cb7920bfa755a647a5c7ad0ebe3e4eb9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:74:ef:a8:6c:25:a9:76:b2:36:2b:cd:84:
b7:1f:ab:bd:3d:9a:48:29:3f:f1:27:23:57:66:e0:
3e:16:a8:d3:e7:31:9b:a6:e1:b4:62:e1:53:13:fd:
5b:86:60:84:20:e6:99:4d:85:20:81:e8:94:30:57:
b2:e0:6f:49:d3:92:59:82:2a:0c:e6:5b:01:06:d7:
71:9c:fe:58:c9:cd:ef:0f:1a:df:52:63:8c:cd:4e:
b9:90:3d:c9:e3:cd:ae:e5:bc:79:6f:eb:c4:ff:1b:
b0:8f:b8:16:20:f9:3d:5f:72:43:a2:43:59:7d:eb:
cb:94:45:de:27:94:fe:f9:4b:d0:7b:20:dc:e6:bd:
58:22:53:60:10:c1:90:ec:3f:26:2c:15:fa:2d:20:
fb:e2:b7:77:89:11:38:5d:4a:76:cf:d2:0b:24:54:
0a:5d:28:d6:2d:4f:45:a1:ef:c0:28:94:6c:0b:60:
0a:12:c3:6b:4b:e6:20:07:82:7c:31:84:ee:d3:b2:
50:91:d5:b5:9e:83:bb:12:a4:fd:bd:c6:b8:4e:8a:
90:7b:9d:c4:66:d9:0c:62:10:1f:12:64:e9:0e:36:
06:41:55:34:03:47:8e:7b:59:52:f0:55:a1:3c:0e:
4b:36:b2:4e:96:09:75:5e:65:01:34:fc:a1:b1:c1:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:67:CB:79:20:BF:A7:55:A6:47:A5:C7:AD:0E:BE:3E:4E:B9:E5
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:06:94:cc:0a:41:46:21:5e:f0:6c:d9:44:64:69:94:40:1a:
fa:58:8c:62:cb:1c:96:b8:16:c3:48:40:7e:9e:47:36:59:62:
7c:97:44:41:55:a9:aa:e3:d8:1a:18:d2:4a:d1:66:5e:78:34:
66:cd:e3:82:4c:c9:11:56:95:ea:cc:30:8a:20:26:51:22:55:
29:ab:36:33:fe:c8:71:83:5f:13:d3:fe:d7:42:fb:52:43:5f:
6d:83:ac:58:9b:0a:e7:d6:17:69:a5:77:9f:2f:82:9a:df:e5:
d5:72:70:b4:00:6d:58:9d:08:48:c4:d6:fb:33:6a:6d:fc:89:
5e:7c:11:36:8a:e7:0b:4e:42:18:76:ea:88:42:d5:b1:46:76:
54:e8:b9:dc:4e:5c:76:72:fd:a5:67:82:af:ab:b6:ad:cd:2c:
35:5c:3d:54:0a:2e:7f:be:96:08:d7:12:56:fd:22:74:29:9c:
22:1d:5c:c8:18:96:0e:23:aa:f6:28:12:c3:17:da:0b:46:30:
80:c2:b4:63:76:9e:07:89:be:95:df:24:5d:23:82:10:18:de:
8e:cb:a2:56:32:b4:ff:40:12:9e:c8:2a:0c:3a:c1:9b:ea:36:
86:ab:6a:0b:8c:e7:5d:ea:f1:93:f0:30:a5:cd:6b:ed:ab:25:
c4:55:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:17 2026 by rpki-client