Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: KM4v4/qsfjT1raP74gWNZyiRzVgkLAU5zYB9w9uWEtM=
Subject key identifier: 1E:45:C0:90:A5:E1:87:95:C4:53:22:71:09:6F:96:12:41:52:A2:2F
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 019D2703BB7A712DAA413039C3EEC999BD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 1604
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: yom4XoQh6+IOxU9z9tTdHWss76GRaPv6QSmg5ZsBCsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bb:7a:71:2d:aa:41:30:39:c3:ee:c9:99:bd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=1e45c090a5e18795c4532271096f96124152a22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:e9:a6:8f:3c:00:e7:03:43:f6:68:c0:6a:
56:41:17:21:35:7f:b9:96:b8:b1:bf:ab:a2:6f:b6:
6d:3f:ab:17:10:0e:47:69:4d:34:8c:64:ac:09:cc:
c1:07:74:c3:74:9b:8a:40:10:ad:88:e6:2e:67:f2:
60:f2:d7:9d:8b:e1:76:b7:90:91:6d:c1:c7:4c:29:
a6:3e:79:1d:be:90:e7:06:ee:8a:dc:9e:00:80:ef:
88:b7:4c:09:81:aa:c5:55:c8:8a:c3:13:fa:60:b3:
f6:fa:c5:7d:50:83:ab:b7:5f:c1:45:7f:c4:42:1b:
a5:4f:51:0e:a7:15:95:be:63:f4:8c:9d:b3:dc:99:
61:03:44:71:6e:51:e6:a8:e7:dc:15:88:79:f6:21:
b3:59:0b:88:44:77:4c:9d:4e:50:a6:cf:67:54:5a:
36:e8:6d:8f:d9:05:5f:3e:b4:4f:68:24:7f:51:14:
4e:15:8e:27:e2:a0:24:85:f5:60:3f:71:f7:74:ab:
76:81:d9:b9:90:56:bb:90:cc:f1:42:2f:c7:80:1a:
d4:ee:c5:43:4b:15:af:fd:97:15:64:58:1a:57:d9:
d8:ad:79:38:c8:13:95:a1:88:d4:02:ce:78:8e:a8:
35:d9:5a:6c:17:ae:f6:9c:45:25:ea:42:1a:4a:7c:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:C0:90:A5:E1:87:95:C4:53:22:71:09:6F:96:12:41:52:A2:2F
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e0:05:61:de:c4:e4:11:56:11:1a:aa:f8:f0:93:1e:83:3b:
ee:a9:0d:0a:4f:61:08:b9:9f:8e:8f:95:2c:ac:fa:87:41:3e:
56:54:f9:37:17:14:a7:ca:74:f0:3c:69:d3:0a:86:c6:d6:57:
c9:6d:04:13:0b:da:f8:8b:50:8b:46:44:20:d1:2b:35:95:f6:
72:5c:08:2f:6e:3c:14:9e:c6:6b:e6:a1:e4:2e:ea:45:c0:a8:
3a:4a:cd:9c:30:12:71:44:41:3d:e4:0a:f0:dc:ff:a3:8b:f3:
ad:20:b4:0c:72:da:a3:f2:1e:78:c1:a5:4a:c1:5d:98:c5:1b:
b2:a4:6d:af:b2:93:2d:7e:55:6f:5e:23:b9:2b:32:63:c3:74:
db:8d:05:a6:ef:01:92:ba:eb:29:20:51:b3:ab:d9:6d:ed:2c:
6c:21:88:8d:b6:e1:0c:f3:9d:a2:be:16:bc:25:65:87:69:8f:
d0:95:90:47:08:fa:5c:b4:f4:10:cb:2d:9f:f1:46:5e:db:84:
ee:c3:8e:c0:12:56:e2:c1:ec:ed:63:73:44:43:5b:82:77:a0:
5e:3e:d2:d6:b2:1e:33:32:03:97:e9:bf:87:10:82:8f:c3:be:
72:2d:a3:69:56:49:aa:5f:8f:dd:9d:b4:74:2f:50:fa:1b:d9:
9c:39:8e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7t6cS2qQTA5w+7Jmb0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTVmNGEzYTdlYzY0MGM5MjM0NTA3OTk0YzBjNjVmMjhl
MmZjNTkwHhcNMjYwMzI1MjIwMDQ5WhcNMjYwMzI2MjIwMDQ5WjAzMTEwLwYDVQQD
EygxZTQ1YzA5MGE1ZTE4Nzk1YzQ1MzIyNzEwOTZmOTYxMjQxNTJhMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlefppo88AOcDQ/ZowGpWQRchNX+5
lrixv6uib7ZtP6sXEA5HaU00jGSsCczBB3TDdJuKQBCtiOYuZ/Jg8tedi+F2t5CR
bcHHTCmmPnkdvpDnBu6K3J4AgO+It0wJgarFVciKwxP6YLP2+sV9UIOrt1/BRX/E
QhulT1EOpxWVvmP0jJ2z3JlhA0RxblHmqOfcFYh59iGzWQuIRHdMnU5Qps9nVFo2
6G2P2QVfPrRPaCR/URROFY4n4qAkhfVgP3H3dKt2gdm5kFa7kMzxQi/HgBrU7sVD
SxWv/ZcVZFgaV9nYrXk4yBOVoYjUAs54jqg12VpsF672nEUl6kIaSnwJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5FwJCl4YeVxFMicQlvlhJBUqIvMB8GA1UdIwQY
MBaAFCSl9KOn7GQMkjRQeZTAxl8o4vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUt
YmRkOWI0MzAzYzk2LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUtYmRkOWI0MzAzYzk2
LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeAFYd7E
5BFWERqq+PCTHoM77qkNCk9hCLmfjo+VLKz6h0E+VlT5NxcUp8p08Dxp0wqGxtZX
yW0EEwva+ItQi0ZEINErNZX2clwIL248FJ7Ga+ah5C7qRcCoOkrNnDAScURBPeQK
8Nz/o4vzrSC0DHLao/IeeMGlSsFdmMUbsqRtr7KTLX5Vb14juSsyY8N0240Fpu8B
krrrKSBRs6vZbe0sbCGIjbbhDPOdor4WvCVlh2mP0JWQRwj6XLT0EMstn/FGXtuE
7sOOwBJW4sHs7WNzRENbgnegXj7S1rIeMzIDl+m/hxCCj8O+ci2jaVZJql+P3Z20
dC9Q+hvZnDmOcw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:41 2026 by rpki-client