Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File: jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier: eNaupEPHn+Sf7HVC0P6BpWjmXrCc+A+b5IR402JfD4U=
Subject key identifier: D5:EA:67:BC:D5:3D:C4:7D:A5:2C:74:35:28:88:02:F4:10:38:FE:74
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 019D37F6F0E9F685D435FBFC6006289B167D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number: 0C30
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: e1EKq4OuH5sIXBvizc8AlZe+3MvayG7ioLoygGgcwLk=)
2: w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa (hash: LNZ6lyl5sjWLQK11LqKZIO+Pewy+8JnS92wQrFux3FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f0:e9:f6:85:d4:35:fb:fc:60:06:28:9b:16:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=d5ea67bcd53dc47da52c7435288802f41038fe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:cd:d1:ff:10:c6:b3:92:a5:62:5e:79:a9:
67:58:90:48:81:63:3f:ff:b1:86:df:ac:ed:7d:f3:
0e:03:0c:dd:cc:ad:72:82:40:bf:44:f1:d5:5c:f2:
15:42:9c:bb:50:4d:3d:5e:6b:d7:90:b3:d5:0c:93:
99:35:f7:cf:41:43:9a:d6:fa:cc:2c:e0:3a:6e:c5:
34:8a:e6:5f:6b:8a:46:83:0d:cd:af:4d:60:5e:95:
fe:f9:47:cb:13:3d:06:f0:32:cf:56:11:0e:35:95:
bc:3e:3a:ec:da:60:6e:cd:6e:60:11:4b:30:3f:02:
5d:54:1d:6b:64:1d:39:5d:5b:18:f5:e6:e7:e2:23:
ff:b1:88:54:dc:e8:d2:d0:bd:b5:fb:7a:c5:d9:7e:
d7:58:ec:1f:40:da:ab:2e:cd:9c:39:92:15:fc:6d:
10:5e:ee:b3:b8:c7:1b:fe:81:f1:50:ae:6d:c1:29:
01:53:d3:cf:06:b9:ae:ec:84:9d:c7:c8:9f:74:b1:
fe:35:dd:21:dd:47:dd:a4:36:e5:81:a2:78:4e:03:
33:dd:27:0e:1f:ef:8b:fa:c5:d4:21:9b:92:fc:62:
3e:ba:cc:68:d3:e6:6e:7a:1f:23:95:e4:82:bd:d2:
21:f3:41:8e:5a:4d:59:1e:14:ac:02:df:c0:af:93:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:67:BC:D5:3D:C4:7D:A5:2C:74:35:28:88:02:F4:10:38:FE:74
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ee:16:40:ae:14:e6:38:69:d0:ba:e2:dd:ad:da:4b:a3:80:
18:67:1d:05:40:56:2f:bd:b9:bf:98:a1:3b:b3:c4:9d:47:54:
19:c5:1e:6b:32:b8:61:94:4a:23:f6:64:c7:57:99:c5:86:2c:
4d:b8:00:c9:65:c1:58:9a:b1:09:53:aa:fd:4f:7d:24:9a:cf:
e5:a6:4c:cd:1f:90:ef:2c:fe:52:6e:72:72:9f:6a:8d:67:bf:
55:9a:56:31:ee:ff:f8:1b:8c:21:8d:60:ac:10:e1:37:f3:ad:
70:a2:d0:68:b4:25:9b:76:7c:b8:3e:99:75:c0:7f:17:e5:e6:
26:7c:42:86:f0:dc:73:15:d0:58:e4:19:88:7e:a0:a4:1d:24:
66:8a:7a:79:24:66:57:ef:9d:db:e0:3e:5e:8e:fa:10:b9:54:
95:88:4c:45:f3:53:b2:ac:94:52:ea:c5:23:7d:ba:57:6c:45:
94:f7:65:12:ad:e0:0e:cf:81:bb:d1:19:ea:b5:1a:a0:91:cd:
57:da:0e:8e:eb:d9:fa:88:2c:28:08:5c:ac:90:a6:ac:d7:d3:
24:84:91:f5:eb:31:db:bd:61:60:60:15:bd:43:bc:aa:e3:b6:
5c:f3:23:51:9c:0a:ba:bf:dc:ec:82:81:5b:3f:6a:45:2b:db:
8e:0a:72:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:26 2026 by rpki-client