Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: WgiUEj7Y2mn3rX3Q9bCB6cNOAFp/srr9mefipJIb/18=
Subject key identifier: A9:D5:46:CE:1F:02:7C:43:D2:E5:F9:BE:4A:C0:3F:0E:66:D1:E2:BF
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 019D382E375B8BFD09D7195A936ACD078506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 07A1
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: I8c8JR9fIUEX5avPCvh4+1LHHKAQFOVyPeM4jmyyYNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:37:5b:8b:fd:09:d7:19:5a:93:6a:cd:07:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=a9d546ce1f027c43d2e5f9be4ac03f0e66d1e2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:ea:26:c3:e7:6c:6a:0f:a8:14:b1:78:c0:
1b:36:57:65:e2:c8:4f:05:3f:25:22:3b:d4:7c:46:
2a:7c:4f:45:c2:8f:f2:e1:86:83:45:ef:15:95:b0:
73:17:ed:42:1b:f9:aa:2a:d0:d0:bf:43:83:09:ed:
28:78:90:0a:1b:ea:9c:ba:9e:f9:45:99:e8:08:f1:
04:db:c6:74:db:b4:4f:f1:e2:e8:06:52:e4:95:46:
99:b1:85:ac:2d:11:82:f0:83:61:32:c4:86:3f:1c:
41:23:62:d1:eb:53:47:18:e3:f1:5c:96:f2:45:3a:
ec:cc:67:72:04:8f:0a:b3:2d:b9:b1:62:61:ab:35:
1d:cf:fa:ff:12:f4:4d:58:e3:ee:46:98:b3:de:9e:
b9:8e:b5:4b:7a:cc:a7:11:34:c3:35:03:b2:e9:89:
05:b7:eb:f1:34:7b:12:8b:7d:c9:d8:e6:b6:d8:4c:
88:7b:1d:15:df:3a:3a:08:86:b5:85:01:18:95:ae:
8f:7d:f3:0a:f8:4c:34:e2:5d:e3:5e:8d:fd:5a:73:
94:01:fc:d4:eb:20:a6:ef:0d:93:54:fa:81:e3:b8:
3e:e6:af:ea:d6:11:1b:2c:b1:7a:7f:2a:b6:a6:c5:
b4:28:78:14:cf:6d:09:c3:18:cb:3f:fc:30:cc:f3:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:46:CE:1F:02:7C:43:D2:E5:F9:BE:4A:C0:3F:0E:66:D1:E2:BF
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5d:27:3d:0d:24:f5:e6:39:24:82:bf:82:f7:d4:bd:ef:2d:
56:89:6d:8c:77:6a:68:cc:56:a1:35:af:e2:e5:7f:f5:da:d2:
ce:a5:54:2c:55:a9:c3:5d:5b:1c:eb:7a:85:ac:20:0d:d1:d2:
20:ca:32:32:9d:4b:34:4a:94:cb:5e:4d:28:ec:63:cf:f0:e5:
01:03:74:15:52:8a:9d:41:05:0a:fb:de:f6:b1:93:98:24:89:
f7:df:ab:7d:08:51:9d:2d:c2:61:f7:fa:d7:ac:e9:78:b0:2f:
0b:0a:2e:90:21:02:5a:6f:79:86:55:b1:6b:d6:d3:f6:94:1d:
80:38:63:64:cc:13:c6:f2:c7:7e:65:09:3f:d8:30:4d:1f:a8:
45:14:4d:66:1e:06:58:d2:df:8c:b9:ea:21:2f:20:89:84:fe:
7c:c8:cd:5d:39:f1:1e:40:eb:be:ce:d8:ea:4f:7d:ac:3e:ca:
0f:b3:b9:42:9f:cc:d0:c2:78:09:71:e9:cc:8b:d0:5c:bb:9f:
36:32:53:e3:bd:12:d6:01:ba:47:ce:7c:4c:9d:b8:43:5c:12:
e5:0d:2b:f2:aa:e9:8b:c5:3a:a4:43:40:ce:dc:56:83:bf:e0:
dc:93:0a:13:cd:69:1a:ee:ee:04:d0:55:f9:b7:15:45:6c:49:
83:b6:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:32 2026 by rpki-client