Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: HPnKrH8KR9fiX/meODqeMXwfXX3h+f0hgqt6PEKeUIA=
Subject key identifier: 5B:0A:5D:8A:0B:E9:56:D7:4F:86:DD:DA:49:3A:63:1F:96:6A:26:76
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 01A08DFB71E563E4D87384B00DE243560436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 1340
Signing time: Fri 11 Sep 2026 01:01:01 +0000
Manifest this update: Fri 11 Sep 2026 01:01:01 +0000
Manifest next update: Sat 12 Sep 2026 01:01:01 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: 2gnjP7Sv/nnExoJb2Om3gr1SOGEMCa1tDJ5glgY3xCA=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:71:e5:63:e4:d8:73:84:b0:0d:e2:43:56:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Sep 11 01:01:01 2026 GMT
Not After : Sep 12 01:01:01 2026 GMT
Subject: CN=5b0a5d8a0be956d74f86ddda493a631f966a2676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:92:5c:9f:bc:63:08:e4:79:32:0c:8e:68:
f4:9d:b6:96:5d:3f:cc:24:d8:4f:6c:ed:32:34:d8:
56:df:6d:56:fc:ab:80:ea:9c:c8:d0:99:38:55:06:
68:d5:9d:29:63:51:85:f9:b3:5a:f5:d3:0a:68:d0:
77:4c:26:10:6c:ce:e5:1b:27:8f:e5:87:22:6d:b9:
de:9a:54:ad:bb:14:9c:79:b6:14:a6:df:81:13:7d:
86:38:cd:cc:df:69:86:5e:43:cf:7a:5f:56:ed:57:
84:fe:79:c1:f5:4d:f3:a3:bb:89:43:62:84:62:92:
ce:bb:84:83:ff:19:16:cd:79:0c:1a:91:59:18:12:
ef:c4:47:90:f6:f5:d4:d5:ee:9c:b8:7d:ed:63:eb:
29:e5:bb:28:c4:e7:cd:fa:76:1f:6f:7a:60:dc:74:
b5:ca:60:b5:43:61:11:e6:d3:bf:6c:80:37:c0:38:
60:97:e6:2e:9c:d2:fb:70:3c:28:2e:4d:bd:12:64:
c3:17:03:6a:9b:a0:bc:85:f2:5e:e2:d1:8c:35:a1:
ab:a1:74:fc:94:7a:43:2a:bd:7d:cb:de:10:dd:1d:
e7:7e:71:ef:0d:a5:d8:57:45:67:d0:7f:74:f3:5e:
62:7b:23:0f:1a:7d:bc:ca:0d:3c:cf:b4:05:9d:ea:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:5D:8A:0B:E9:56:D7:4F:86:DD:DA:49:3A:63:1F:96:6A:26:76
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e1:a7:42:83:48:3a:c8:be:03:42:86:34:0c:92:8c:78:d3:
af:6d:87:fc:ec:93:1a:ac:c1:5a:a2:83:24:4e:6a:dc:6c:92:
9c:10:f6:79:29:98:5d:08:f3:00:0b:48:2d:95:8a:41:9e:cb:
cc:77:16:59:00:63:18:7c:7c:a7:21:e0:e5:94:77:28:46:8d:
be:d4:4c:a1:bd:a8:db:f1:26:a3:77:28:d4:73:b3:86:d5:13:
ef:5f:42:6c:11:4c:e0:27:f5:89:e4:1e:d3:03:d8:71:52:e7:
e6:98:d1:19:a6:52:68:fa:d7:54:c8:67:ff:35:80:28:65:12:
ab:5c:02:99:21:a2:9c:15:fb:f2:1f:1c:eb:c3:63:4e:90:39:
e6:7f:4b:cd:9c:8d:d8:a2:77:4c:22:60:67:a5:ab:69:73:f5:
f4:8a:4c:0a:98:d5:72:37:32:8a:77:a2:b0:73:6d:91:d0:99:
64:39:e8:96:b6:65:09:7b:1a:29:ff:e4:9b:29:7b:ff:57:95:
f1:26:37:42:11:ee:fa:b2:f5:d4:7a:c5:e0:59:dc:37:5f:32:
b9:84:57:c2:0b:6b:3f:56:b5:38:3b:34:50:36:76:b2:fd:59:
25:6b:c7:0e:d5:ae:60:04:0f:c7:53:54:99:8f:92:48:be:b1:
e7:f1:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:51:40 2026 by rpki-client