Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: Ef9f4vcGHQAWiL+qP14TMn7ZXYkOnSb4goDT0BZvKHo=
Subject key identifier: AD:F4:D1:CF:9D:59:E7:39:42:03:67:74:32:3E:25:0E:C0:4F:1D:10
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019EB6C591AB95A47B0401B4F842F0A6CC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 124C
Signing time: Thu 11 Jun 2026 13:01:01 +0000
Manifest this update: Thu 11 Jun 2026 13:01:01 +0000
Manifest next update: Fri 12 Jun 2026 13:01:01 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: +4aEMrQA36tMc5EhE/m0SD/stgEf3Eg5CJizNJQxsBI=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:91:ab:95:a4:7b:04:01:b4:f8:42:f0:a6:cc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Jun 11 13:01:01 2026 GMT
Not After : Jun 12 13:01:01 2026 GMT
Subject: CN=adf4d1cf9d59e73942036774323e250ec04f1d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:65:29:08:5c:b7:99:57:d9:1b:c6:91:d2:
11:d7:ea:c3:08:b1:de:87:b6:de:7f:56:9d:e4:5a:
a4:a9:0e:cb:c5:a1:e1:c3:42:55:36:35:3d:ae:a2:
55:5d:7b:be:d2:a5:78:97:bd:02:67:5c:20:13:11:
82:30:71:c6:d2:b0:bd:ac:92:54:84:1f:2c:e2:69:
15:77:d3:e5:68:12:62:3c:0f:e1:a2:b0:5d:d6:06:
c9:86:20:0d:71:16:46:0d:ac:e6:24:4b:02:1f:60:
3b:09:fc:19:63:a3:97:99:0b:26:59:19:41:37:84:
f7:d2:de:4c:cf:77:93:63:5a:4c:1f:55:8f:7c:24:
f3:f0:80:11:0e:75:f7:e0:f4:78:7e:6a:14:a7:be:
20:ab:eb:d5:0f:92:5d:ac:14:40:fe:e8:ee:58:88:
73:40:2a:e7:79:02:c3:67:b2:67:2a:83:05:dd:b0:
b2:64:46:89:ca:3f:95:5d:7b:0f:a4:86:f1:1e:ad:
3d:6d:79:19:24:bf:34:f8:1f:a8:f6:66:3c:d3:0d:
7b:cc:92:4c:90:6a:08:83:34:fe:63:9a:01:d2:35:
ab:67:02:e3:74:e7:c2:60:d9:88:b0:c4:3c:06:ff:
a0:e2:f1:fe:9a:ee:07:78:5e:57:d9:e2:9b:e7:72:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F4:D1:CF:9D:59:E7:39:42:03:67:74:32:3E:25:0E:C0:4F:1D:10
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1c:73:cf:5d:4a:a4:3c:b2:0a:de:3a:af:0e:e2:62:68:fa:
19:6c:1e:80:0f:a2:cc:e4:ab:16:1d:90:3b:83:a2:ac:27:86:
f5:80:d8:7b:0e:be:32:50:67:08:7e:4f:16:a0:e5:b6:1f:fb:
b6:35:db:db:97:05:23:8e:c6:3a:ec:2d:ef:b8:6d:f4:b7:6d:
d3:74:61:b2:63:92:d8:74:f8:f9:fa:ed:78:58:09:5c:49:ba:
1c:6b:bd:4a:23:2d:79:e0:2e:ec:49:e4:52:e7:02:f0:49:31:
a8:65:80:7c:5d:fd:5c:24:c8:5f:5a:1d:af:78:1a:17:10:59:
2e:65:c3:ab:17:83:8a:07:8e:42:86:3e:fb:56:21:10:98:2b:
99:bd:71:25:70:7a:9b:b4:98:0a:d5:75:25:cc:fe:7f:43:c9:
7f:0c:9e:3c:2d:06:b5:b8:26:4d:48:d1:15:b3:eb:8b:33:34:
44:66:e9:cc:24:ba:e1:a3:0b:18:ff:4c:e5:a9:b5:5b:7f:8a:
8b:42:e6:79:c0:75:2a:0c:7d:29:21:6c:ef:c9:84:74:d7:34:
99:66:b5:a4:28:8a:ea:41:8f:5b:5c:d1:f5:b9:0e:5d:e1:e3:
20:9f:4e:d9:20:79:3f:35:03:40:62:33:0d:77:9f:19:6c:fd:
51:b9:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:05 2026 by rpki-client