Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: L4w+obzTLBUnQe3RH/BZLU0tHso7SRbVZwv7vcbqa5I=
Subject key identifier: F8:31:44:DE:18:F3:AB:09:10:BB:0E:AB:F7:EA:3E:F3:E8:9C:82:6B
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 01A180AB3FF81AA5A3F0386335EA91B4B5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 15DC
Signing time: Wed 28 Oct 2026 04:01:08 +0000
Manifest this update: Wed 28 Oct 2026 04:01:08 +0000
Manifest next update: Thu 29 Oct 2026 04:01:08 +0000
Files and hashes: 1: KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa (hash: hgvJkxvKTNR1g+ybNwe4M29US6Kg0T9+/9USB1UVBJc=)
2: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: BpEAhChpr1DEkvuAt2m1uAfkSNfbjL/kdDfvzxBB8IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:3f:f8:1a:a5:a3:f0:38:63:35:ea:91:b4:b5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Oct 28 04:01:08 2026 GMT
Not After : Oct 29 04:01:08 2026 GMT
Subject: CN=f83144de18f3ab0910bb0eabf7ea3ef3e89c826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:fa:a1:3a:b8:62:69:1b:9e:41:52:40:e4:
42:45:da:61:a5:81:c3:eb:82:31:70:99:94:9e:a9:
57:69:6f:14:0e:dd:a8:f1:a6:06:93:42:65:12:b0:
5a:b4:94:10:f5:b6:5e:56:34:6f:fe:4f:f6:fe:6a:
21:bf:42:a8:87:99:37:60:6f:a2:1c:f1:3b:7e:27:
42:a4:b0:77:49:4f:74:35:b5:b0:28:e4:01:86:52:
ff:cc:c2:be:f1:7c:b8:94:21:d9:84:e4:45:9e:91:
d0:30:31:d9:fb:3d:77:03:ef:b9:09:28:75:e4:01:
0e:32:49:f3:47:e6:d6:34:22:3b:fd:9b:87:5f:c1:
86:93:92:0e:1a:d1:08:80:84:2e:bc:49:2d:3d:85:
2d:0c:4c:55:9e:56:1d:ec:d0:68:10:49:76:b8:60:
51:6b:56:c3:89:e2:37:b6:0b:02:76:65:cb:51:5f:
33:52:54:40:2b:90:13:fe:eb:76:7d:09:0e:0c:13:
8b:ef:3e:81:1f:ba:7a:ab:7a:a3:8b:b8:9a:7e:cc:
11:f4:89:53:86:66:6e:36:21:f9:09:c6:2d:4e:e1:
91:a7:dd:fc:c2:1a:0f:a5:31:2b:8d:d9:90:f9:b9:
73:42:6b:4d:e2:d6:d4:d5:f1:81:66:67:d5:17:c8:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:31:44:DE:18:F3:AB:09:10:BB:0E:AB:F7:EA:3E:F3:E8:9C:82:6B
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:65:52:fe:40:22:10:71:bd:0d:71:68:18:dc:7e:d1:8b:6c:
bf:1b:54:4b:d6:eb:dc:4c:2b:b7:89:45:36:1d:7e:56:c4:e4:
52:7d:64:4f:e2:97:73:18:50:77:ee:dd:71:aa:55:1b:88:8c:
2d:33:de:2e:70:54:ad:de:57:6a:a0:ea:dd:db:3c:dd:ed:63:
29:1f:69:4e:04:38:dc:75:14:be:ab:b6:8f:5d:50:67:98:b7:
8e:55:be:b0:ee:77:6e:52:3f:33:ae:c5:71:6f:9f:a6:a1:cc:
38:2f:3a:94:24:2e:53:ea:14:f3:c0:54:b6:41:a5:9d:55:22:
cd:54:40:12:3f:01:81:73:de:dc:a3:05:5b:44:d1:51:11:b7:
15:e7:ee:05:bd:bf:29:d2:e3:d3:72:b4:33:a1:15:21:ad:46:
2b:f5:db:14:27:e1:ba:8d:3e:5d:9f:a2:58:83:cc:1b:9e:9c:
09:37:d5:78:3a:22:66:80:08:e1:23:de:a0:2d:8f:f2:17:4e:
c5:c8:a1:81:35:99:63:6d:82:a3:06:22:ae:3e:fb:91:37:79:
86:97:7c:83:89:6e:9e:06:f8:a7:53:f3:3c:1a:0b:f9:57:eb:
53:ba:43:fe:c6:54:c1:ac:b7:16:ce:8c:22:c7:24:4b:e7:40:
6d:52:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:19:21 2026 by rpki-client