Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: Wz69vdHh2/Fw3ZB8OawiASLDFZOyrfcxbLOLfMPmCSo=
Subject key identifier: AD:84:05:CC:17:38:4F:FC:1B:0C:E4:EC:CD:0E:29:71:08:40:1B:6D
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 01A17E85BB7F3876786A21AD1CE93217B542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: 0633
Signing time: Tue 27 Oct 2026 18:00:55 +0000
Manifest this update: Tue 27 Oct 2026 18:00:55 +0000
Manifest next update: Wed 28 Oct 2026 18:00:55 +0000
Files and hashes: 1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: A5wThuEx89HRrvmZ2Yv604xaVJxqopP2Nltto2Yu3BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:bb:7f:38:76:78:6a:21:ad:1c:e9:32:17:b5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Oct 27 18:00:55 2026 GMT
Not After : Oct 28 18:00:55 2026 GMT
Subject: CN=ad8405cc17384ffc1b0ce4eccd0e297108401b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:10:f5:b6:dc:70:55:c5:d9:0c:99:f1:5f:
b4:77:6a:bc:e6:5a:07:6f:dc:94:3a:36:9e:41:aa:
89:14:6b:8e:cd:e2:ee:52:04:39:86:36:86:d3:54:
fc:92:8d:cd:59:e1:f5:a7:08:50:8c:6a:d9:d2:5a:
d2:ca:55:2e:6e:75:7e:43:d3:8e:c8:8b:da:8a:88:
eb:19:62:55:5c:8f:62:06:71:f4:96:87:e8:4c:4b:
eb:0e:2b:6c:84:e0:48:c7:81:a0:35:5b:02:f7:31:
76:3d:67:ed:c0:84:65:3c:68:15:a3:40:ca:2a:99:
7a:2d:4e:20:a8:e0:87:78:73:8d:23:0a:60:82:79:
f1:fa:b1:40:77:1d:38:0a:ed:10:29:06:0b:74:f3:
b3:5d:62:8d:ad:e8:1d:f0:ef:fe:44:47:d0:97:b7:
4f:45:42:b4:1d:5f:6f:d0:fd:2c:fd:77:5c:ad:6a:
84:78:4a:2b:83:89:59:b5:0e:df:41:7b:f3:7c:43:
f5:f3:71:0b:00:06:a6:67:a6:a1:3e:d3:94:e8:5c:
1d:e4:35:47:86:0a:72:39:41:dd:c5:d6:8f:8e:2d:
39:fd:67:d4:4e:65:c1:80:57:be:a4:31:65:8a:13:
6c:0b:83:1c:99:52:d5:37:0e:bb:b1:ec:4e:52:5c:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:05:CC:17:38:4F:FC:1B:0C:E4:EC:CD:0E:29:71:08:40:1B:6D
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:fe:68:30:15:20:b5:18:91:64:5d:37:dd:31:cf:07:66:
56:f1:d8:72:03:bc:63:4b:61:a1:f4:35:0c:ad:c7:96:85:0b:
39:3b:09:4e:13:6a:ce:6d:ea:91:7b:29:2f:80:41:f8:d6:8c:
3e:9c:35:aa:40:c9:8f:d6:c5:bb:bb:cd:c3:b4:f7:54:ab:c5:
4b:f7:f0:da:fa:6e:0e:95:7d:ca:48:f6:85:b2:90:55:e5:24:
02:0e:99:61:2d:90:ca:97:00:90:27:7a:88:ba:cf:70:89:8a:
f0:02:e9:16:2e:0f:0f:49:b3:7f:b3:d3:d3:8b:7b:b3:c7:3d:
06:40:23:e0:c1:66:a7:d3:48:04:77:ef:97:c8:b8:21:68:f8:
a9:97:7b:0a:27:a8:4b:c4:89:07:ef:0f:a8:2c:20:07:b4:c2:
8c:a5:de:c1:bd:eb:aa:55:39:27:81:b1:7e:f3:6a:56:b2:04:
a8:06:37:f2:00:3f:6b:44:7a:15:87:30:38:bf:68:33:e4:4c:
74:fd:58:bc:2a:2b:fb:9b:e4:81:7f:f4:41:19:55:d6:91:92:
3f:b9:31:9d:48:84:07:da:9f:c9:96:2e:97:44:d5:82:d2:26:
27:13:08:9d:e1:13:be:7e:3b:2f:75:5f:3a:5f:3e:5c:eb:9e:
ec:a8:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:43:56 2026 by rpki-client