Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: 5nREboXPcaGm73P8RuJ+bm37sKxzrE4W2vpgHgzNVlg=
Subject key identifier: D4:B6:1D:0E:48:21:0E:43:1C:64:55:33:6A:AA:DB:34:81:0E:53:52
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 01A1890938A92B3D4B4BA78E24E923816E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 13C2
Signing time: Thu 29 Oct 2026 19:00:45 +0000
Manifest this update: Thu 29 Oct 2026 19:00:45 +0000
Manifest next update: Fri 30 Oct 2026 19:00:45 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: YI2n+CU9ssGggHg0E2XXpUi7VpW8Yvw+FNsrxf/6lTE=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:38:a9:2b:3d:4b:4b:a7:8e:24:e9:23:81:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Oct 29 19:00:45 2026 GMT
Not After : Oct 30 19:00:45 2026 GMT
Subject: CN=d4b61d0e48210e431c6455336aaadb34810e5352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:13:81:5a:14:5a:c1:ab:4c:ba:2d:e3:30:
32:02:aa:be:a6:ce:ba:95:9a:fe:32:03:22:75:0f:
6e:08:fa:37:29:f6:bf:34:30:81:de:c2:85:8c:22:
aa:a9:59:f8:c9:c5:26:5f:39:af:40:29:4f:14:48:
65:f9:0e:07:9f:25:1e:75:b5:36:d8:a2:11:23:cd:
da:14:36:66:b2:86:24:08:d3:66:a0:2c:3b:99:4b:
ac:f2:00:e2:f6:f4:57:e5:20:8d:d6:40:8e:7e:1c:
4f:89:88:bb:cf:29:d3:08:90:df:7d:78:7b:0e:29:
9e:c4:ec:98:a8:75:5f:60:ba:61:65:3b:86:59:79:
9c:77:58:e2:39:96:66:9e:e9:1a:d3:3f:32:bf:2c:
0d:a7:17:1e:5f:a1:0c:68:e5:11:16:fb:b8:14:0e:
82:c7:3c:2b:63:8c:8c:ea:1d:01:40:a7:55:9e:dd:
9d:fe:70:96:a3:b7:c4:44:44:9e:31:eb:1c:03:37:
cf:07:a3:5d:c3:18:68:81:9e:83:4a:7b:31:74:59:
aa:1f:e4:f2:3c:7c:1e:94:2d:0b:d4:27:61:ce:9b:
c3:42:95:db:6f:3a:8c:87:9e:7c:f7:86:07:05:e2:
8f:30:e9:82:33:35:53:3f:d1:e6:c8:30:7f:c1:c2:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:1D:0E:48:21:0E:43:1C:64:55:33:6A:AA:DB:34:81:0E:53:52
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:5d:67:0f:fa:9c:9e:88:0a:df:70:3d:21:f5:cb:70:08:
58:ac:46:a9:b9:2a:25:68:9d:9c:61:ba:82:d2:f1:e3:ba:e3:
b8:30:e6:0d:29:a6:32:64:9f:9d:5f:24:31:52:15:4b:c2:18:
58:aa:3f:3c:5e:eb:ca:92:6a:14:8e:36:34:c6:85:51:18:80:
86:96:a0:f2:49:27:61:d2:c8:02:49:4b:1a:ba:05:19:94:d0:
23:ac:3a:80:43:ea:c7:ca:9b:20:c2:8f:0f:7a:c0:6f:e1:d3:
d0:d6:2f:6b:ce:28:03:02:db:54:ce:45:74:07:f1:7a:b1:d3:
1f:0d:2a:25:8d:8f:21:49:50:87:a1:46:47:b4:86:53:bd:ce:
5d:87:99:51:d3:a9:25:39:f4:0d:42:d7:56:94:2c:85:37:53:
b7:bd:fe:f6:49:27:7a:a7:03:46:2d:fe:87:36:9d:d9:c9:73:
cf:18:a4:ba:f9:6c:7e:03:7f:50:f4:6f:c2:f2:6f:91:73:ff:
36:55:21:76:c7:2f:88:b4:92:01:77:83:12:3c:2e:16:ce:2b:
ef:36:7a:3b:f6:a9:7b:8e:b6:2b:6c:1f:ed:e3:59:06:91:f1:
b3:a2:ae:58:39:d0:94:84:b2:0f:94:4a:17:4c:79:7f:d6:6b:
81:11:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:55:48 2026 by rpki-client