Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: SVq3TpzGuj7idvV0DzIiiHLiEaXIm26S1qYnL1iK718=
Subject key identifier: 39:95:9F:81:BE:DC:BF:EB:61:BC:AE:64:6F:26:B9:5E:95:E1:3B:B8
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019FA0718710397522B516BC1098B7D6233E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 12C5
Signing time: Sun 26 Jul 2026 22:00:22 +0000
Manifest this update: Sun 26 Jul 2026 22:00:22 +0000
Manifest next update: Mon 27 Jul 2026 22:00:22 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: vypNdMHOS+Z36RZPB+PnyFmPU45lq732n1LQrdCwMy4=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:87:10:39:75:22:b5:16:bc:10:98:b7:d6:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Jul 26 22:00:22 2026 GMT
Not After : Jul 27 22:00:22 2026 GMT
Subject: CN=39959f81bedcbfeb61bcae646f26b95e95e13bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:6a:3d:83:ec:c1:79:c0:fe:03:68:f8:f3:
d1:2c:6e:bf:8c:8b:86:14:17:23:bc:47:78:05:35:
3e:a3:39:9c:7a:51:7f:8d:f2:0b:b5:46:3a:90:76:
f6:0e:f7:c7:71:b6:68:6a:d7:c9:89:b5:69:d6:12:
19:bd:f7:1b:f8:d0:97:f4:4c:dd:9a:4e:df:10:fa:
51:a5:92:f8:69:f1:67:fc:3a:8a:10:58:7d:27:2d:
80:57:d3:68:72:4f:dc:45:63:21:cf:3e:15:38:f6:
4a:b8:3e:86:21:f8:f1:c8:2e:dd:3f:41:2a:47:04:
48:8a:2b:76:1c:14:b6:02:db:3a:13:ea:6c:bd:49:
36:16:f3:6d:c4:b2:d5:e6:ed:a4:6b:21:66:b3:cc:
0a:ee:22:ea:17:fd:2e:61:73:8d:46:c9:28:2f:14:
f6:f8:6f:e6:04:36:0d:e6:5f:4d:d5:a1:00:95:8c:
39:d2:e4:db:cd:5c:30:50:8a:56:8d:74:b4:70:8a:
4a:08:d1:92:9e:89:6d:fa:ce:d2:13:da:0e:d4:4e:
47:d7:49:43:84:9c:c8:e4:43:5f:4b:ec:5c:fe:71:
14:1d:95:21:f3:3e:ed:18:64:34:d7:73:da:7d:e4:
aa:61:8a:8e:e1:fc:26:99:0e:58:ff:3e:9b:79:7d:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:9F:81:BE:DC:BF:EB:61:BC:AE:64:6F:26:B9:5E:95:E1:3B:B8
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5e:9e:43:d2:62:86:fb:86:08:78:bc:b1:02:84:30:ad:1d:
83:3e:da:42:dc:7a:d2:0d:c9:56:9a:ec:ee:b7:86:9c:c3:2a:
bf:b7:b0:5b:55:33:9c:eb:87:b9:e5:c5:1d:3c:7a:0f:cd:3f:
3f:88:3a:83:27:a7:45:de:c2:42:35:cb:12:7f:28:7f:00:19:
47:60:d2:a8:37:fe:77:ef:9e:9d:0d:b1:e1:6e:fc:b1:84:b5:
7e:b8:38:b3:76:83:bf:8a:e5:81:2c:80:98:b4:14:e0:f8:56:
a0:89:99:54:31:47:a8:1c:d4:0e:50:0a:10:2f:52:aa:aa:36:
d5:dd:13:ea:68:92:ce:46:86:0a:96:ef:09:b7:36:65:e9:0f:
af:ed:a2:52:53:01:d5:3d:c7:46:e5:bf:0a:95:8e:24:44:17:
a9:65:96:99:3c:5a:1b:ca:88:43:77:01:a7:e2:4f:4f:36:44:
22:64:ca:ea:90:40:e7:77:c5:66:f6:56:1f:cd:23:84:b6:36:
59:a1:77:b3:84:33:eb:bc:e2:36:29:a5:44:41:14:a1:1b:d1:
df:ce:58:5b:4e:8b:db:c0:83:71:6f:df:da:35:30:c8:0a:e5:
be:e9:f6:97:79:62:4e:56:44:51:87:47:c5:fb:d7:50:48:f7:
79:d1:fe:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcYcQOXUitRa8EJi31iM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2
NGUxYzAwHhcNMjYwNzI2MjIwMDIyWhcNMjYwNzI3MjIwMDIyWjAzMTEwLwYDVQQD
EygzOTk1OWY4MWJlZGNiZmViNjFiY2FlNjQ2ZjI2Yjk1ZTk1ZTEzYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUxqPYPswXnA/gNo+PPRLG6/jIuG
FBcjvEd4BTU+ozmcelF/jfILtUY6kHb2DvfHcbZoatfJibVp1hIZvfcb+NCX9Ezd
mk7fEPpRpZL4afFn/DqKEFh9Jy2AV9Nock/cRWMhzz4VOPZKuD6GIfjxyC7dP0Eq
RwRIiit2HBS2Ats6E+psvUk2FvNtxLLV5u2kayFms8wK7iLqF/0uYXONRskoLxT2
+G/mBDYN5l9N1aEAlYw50uTbzVwwUIpWjXS0cIpKCNGSnolt+s7SE9oO1E5H10lD
hJzI5ENfS+xc/nEUHZUh8z7tGGQ013PafeSqYYqO4fwmmQ5Y/z6beX0rdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmVn4G+3L/rYbyuZG8muV6V4Tu4MB8GA1UdIwQY
MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt
ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2
LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV6eQ9Ji
hvuGCHi8sQKEMK0dgz7aQtx60g3JVprs7reGnMMqv7ewW1UznOuHueXFHTx6D80/
P4g6gyenRd7CQjXLEn8ofwAZR2DSqDf+d++enQ2x4W78sYS1frg4s3aDv4rlgSyA
mLQU4PhWoImZVDFHqBzUDlAKEC9Sqqo21d0T6miSzkaGCpbvCbc2ZekPr+2iUlMB
1T3HRuW/CpWOJEQXqWWWmTxaG8qIQ3cBp+JPTzZEImTK6pBA53fFZvZWH80jhLY2
WaF3s4Qz67ziNimlREEUoRvR385YW06L28CDcW/f2jUwyArlvun2l3liTlZEUYdH
xfvXUEj3edH+hw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:18:06 2026 by rpki-client