
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File: jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier: SmusmX+ZZEm5xJo2LacY8EWwBjoEgyhMbAtRmJzvxHk=
Subject key identifier: ED:9E:46:E2:E5:5F:34:FD:F7:34:EE:5D:AB:14:96:B3:09:09:6D:1A
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 019EBA341189027C00125EB0F1B760CA6D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number: 0CF9
Signing time: Fri 12 Jun 2026 05:00:34 +0000
Manifest this update: Fri 12 Jun 2026 05:00:34 +0000
Manifest next update: Sat 13 Jun 2026 05:00:34 +0000
Files and hashes: 1: KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa (hash: 0RPtm2bqma6nOnpNbHsYWDjHVvYXOYQDlwmuFFsHb6M=)
2: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: HPyE3AQbBGVqaDi8lnqr3X+0z172aw4J7V6JC2XbKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:11:89:02:7c:00:12:5e:b0:f1:b7:60:ca:6d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Jun 12 05:00:34 2026 GMT
Not After : Jun 13 05:00:34 2026 GMT
Subject: CN=ed9e46e2e55f34fdf734ee5dab1496b309096d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:21:04:fe:ae:17:ba:a2:2d:a4:fb:6e:c4:
53:1e:7b:09:9e:70:9f:ad:b9:e2:ff:22:a7:ea:a4:
c2:29:47:a9:87:4a:43:20:39:5e:d0:19:79:9e:54:
29:ff:47:b1:c6:cd:0f:5e:63:e1:c4:7d:ca:60:c4:
3d:53:b8:7c:c1:c5:5d:6e:4b:5d:f6:13:32:fb:8e:
2f:a8:20:7f:c1:2a:02:d4:7a:b7:5c:6d:fe:d4:f5:
a3:70:c9:01:04:85:f0:6f:40:9f:62:9a:a5:bb:7c:
e8:21:4c:2b:1e:dc:f9:a9:0f:bc:26:bd:5c:e0:71:
cc:0f:39:cd:5e:3e:9e:e8:c3:e3:56:dd:b4:4b:2a:
62:5b:1d:32:64:d9:e5:3e:d0:cb:04:0e:bf:cd:f1:
9f:67:43:80:b9:84:0f:55:c2:34:dc:eb:f8:b9:53:
0b:c2:34:f1:d0:b9:c7:4a:df:30:c7:f3:11:3a:f8:
14:24:bf:3f:38:a3:b0:52:71:43:5b:5e:04:2e:56:
a1:64:53:28:05:ac:87:4d:93:f5:da:55:a6:62:70:
95:bd:b1:f3:e3:76:9f:06:19:d9:8c:95:ab:93:dd:
58:03:6d:f7:44:56:ba:23:e5:5d:a7:b3:2b:27:53:
90:7d:76:d1:e7:ba:2a:1c:9e:7f:7a:b2:c1:cb:e7:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:46:E2:E5:5F:34:FD:F7:34:EE:5D:AB:14:96:B3:09:09:6D:1A
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f9:8c:73:b8:aa:d3:6c:9a:ca:d1:db:16:4f:00:c9:aa:1b:
b3:97:fd:1d:f6:ef:f8:0e:03:98:f4:a0:8f:a2:94:fd:1b:2d:
ed:75:61:db:0e:d5:b8:ad:8d:b9:61:28:88:31:77:06:f6:8d:
91:09:d3:f1:1d:6c:6f:14:61:6c:d2:11:91:d9:fb:05:8a:f1:
d0:7f:3b:33:9e:e3:06:18:bd:02:97:10:b0:30:11:0b:97:79:
3f:e5:3d:37:21:fc:5a:1a:b8:a4:a4:b6:81:80:3e:b6:58:ef:
ab:a4:71:4e:96:c0:de:73:9f:3c:40:08:92:f5:04:1b:e2:14:
fc:4a:41:f1:b9:7a:7b:f4:4b:ab:60:45:67:ab:a3:33:90:6e:
31:71:d1:08:41:c7:52:d5:93:ab:ec:c9:0d:7e:fb:e6:5a:ff:
a4:b7:15:9b:eb:45:11:d0:ce:1c:7a:a1:5e:38:5a:51:b9:b5:
a4:86:37:6d:ee:21:f6:0f:5a:47:05:3e:ad:e4:db:bf:a6:40:
e9:2b:af:be:d7:06:ad:60:ce:1f:46:72:c0:a8:57:8d:49:bc:
dd:aa:8f:74:7b:d7:9e:d6:27:5e:7b:ba:63:6b:92:d9:65:5d:
85:d7:07:84:0f:8c:ff:27:ba:d1:0b:4c:45:4e:6b:72:12:7d:
9c:8b:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:45:58 2026 by rpki-client