Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: cvgvvuvnlNZoIN+p2RSDwk+gFgdqfyttUp01co8j1N0=
Subject key identifier: 32:44:2E:F6:A8:94:ED:DA:B6:FF:20:29:B4:5C:FB:E4:C2:62:FB:8F
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 019D38666EBF8083DE0A97907189598CFA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 0893
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: 1PI6S350mBwdhLWFs8vIdfJH3cwyCZPlSaePIR3g1qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6e:bf:80:83:de:0a:97:90:71:89:59:8c:fa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=32442ef6a894eddab6ff2029b45cfbe4c262fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:5d:d2:cf:50:0e:39:c4:79:bd:cd:e3:43:
92:80:c2:3b:e4:1c:10:81:73:44:f5:33:59:8c:b8:
28:21:07:3a:d1:de:d5:bc:55:9c:24:b3:b4:f4:06:
51:55:6b:31:ac:e5:6f:f1:12:b5:4a:b9:19:f4:93:
f5:75:d9:35:d9:99:f9:c0:e3:01:0e:90:16:54:b7:
ec:f1:30:85:dc:d3:01:b2:6e:29:c3:89:fc:b2:77:
e2:97:3f:15:4c:54:70:82:4d:8b:6f:ed:3e:a4:af:
40:7c:6d:db:bc:cb:9a:83:ac:dd:b3:77:ea:18:ed:
65:af:d9:77:9d:88:c9:7d:bc:25:a1:22:50:9c:b3:
30:b4:86:b7:23:c8:e2:43:42:ec:bf:19:9d:63:b6:
ce:80:39:e5:0c:23:45:cf:6e:be:22:35:ee:a9:e1:
e7:f3:db:f2:c3:ff:1c:c8:49:66:ff:ac:13:3f:10:
bc:45:51:73:23:bf:95:ee:f9:4d:e3:e6:ea:6c:53:
5a:9e:ba:1a:88:a3:2b:e5:28:8c:db:d4:72:6a:a1:
aa:9b:b7:28:67:31:67:b6:d1:0e:17:18:17:74:0c:
5c:d4:32:33:c8:90:f0:05:19:51:e8:06:23:34:13:
8a:56:b2:d8:cd:ea:be:44:04:45:1e:23:1b:ec:4d:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:44:2E:F6:A8:94:ED:DA:B6:FF:20:29:B4:5C:FB:E4:C2:62:FB:8F
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:20:ad:ce:a2:f2:04:ef:07:2a:5e:54:9d:e8:ea:6f:0a:
33:56:d4:f0:ea:17:ec:d2:53:96:66:8d:b5:b4:35:8e:9d:c0:
bd:07:14:df:cf:17:48:2f:73:a4:58:1c:af:27:6a:e2:92:c5:
bb:fb:f7:a9:36:14:81:82:27:2c:e6:ba:45:43:2b:e3:2d:c5:
2e:17:c0:40:24:2f:ef:00:48:95:cd:86:ae:1b:9f:e8:26:a2:
20:9b:ba:dd:00:79:75:23:9e:17:d9:9c:b7:a9:30:ed:39:f0:
88:3c:0a:41:e4:c9:2c:e6:0a:92:62:ab:c1:02:b1:bb:33:9f:
eb:7c:1f:b4:71:1e:2e:87:2b:5b:c3:43:4a:b6:7f:b9:97:ec:
8a:2d:13:8c:0e:84:25:22:6a:97:4d:d2:e7:c3:72:29:6c:f4:
66:3c:f5:22:74:b0:b8:c3:9f:3f:ae:38:e2:77:57:d3:24:f4:
12:23:90:88:3f:4c:1c:46:94:6a:5d:79:bc:56:7f:e4:d8:02:
a3:26:c0:00:ae:e5:63:df:2a:38:2a:e4:32:fc:31:df:13:30:
6d:5d:64:35:8d:58:bb:72:52:1a:7f:0b:bc:a1:36:e0:e1:ba:
c7:0d:00:40:a4:d8:f5:07:6a:1f:e9:3c:67:ae:44:34:92:57:
ca:79:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:40 2026 by rpki-client