Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: IVoBIc3SFQW9lsKSi/LzLX3Vvx5J66V1B3YablrCnGM=
Subject key identifier: 10:71:00:A7:0C:79:22:FC:8B:89:BC:9F:81:6E:81:29:68:BD:E6:84
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 019D38D2BDB3E60FDC9CD97BCB0AC2BA2462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 0B1B
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: GyqUfMO0Omp9MapGvwm3OQxHuzY.roa (hash: eLOF15igrreolUrbJjNbYGfrAHmsABhFJ5BXUuXuCaI=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: 9cKFfH0AmrYPvaYdPih+OdK16EtAxVTenZybzGxYx/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bd:b3:e6:0f:dc:9c:d9:7b:cb:0a:c2:ba:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=107100a70c7922fc8b89bc9f816e812968bde684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:69:6b:1b:69:93:44:f6:8d:ba:70:cb:38:
72:e4:e3:e4:d5:9f:cc:55:34:c4:d3:d7:a2:f1:56:
53:df:ff:e5:65:72:d6:aa:b7:32:14:24:ea:d2:5c:
9b:72:76:08:e1:75:77:eb:50:96:a1:c0:17:ce:a5:
64:ef:0b:0f:ed:ef:e5:b9:18:d7:f2:ba:d6:ca:ff:
ef:fa:6e:5e:fc:35:22:61:d3:52:dc:c3:28:28:8b:
91:85:18:42:68:f9:45:5c:1e:f9:f5:59:07:fe:9a:
5b:83:df:cd:9e:fc:b8:7a:df:68:da:03:4e:c6:e2:
e2:c0:3d:11:f1:2d:4f:c1:f6:a9:d2:23:b9:22:46:
5f:a6:a0:17:0e:f2:37:d8:24:03:e1:c8:b9:a0:f6:
c2:50:98:53:c3:3f:c0:0e:48:de:92:27:77:b4:d6:
a1:a6:c2:cc:f0:75:93:7a:35:83:67:eb:e7:c1:25:
33:61:9e:c1:bd:f9:f2:4e:9a:bd:3f:ca:ac:78:77:
18:b4:54:fa:4c:f2:1a:f2:db:d5:16:70:12:c5:df:
1c:72:b7:eb:c2:31:f6:1a:4f:71:de:95:4f:60:59:
b2:5b:8e:b8:e2:57:4b:51:2c:c2:a9:aa:2f:af:fb:
64:2e:56:b3:3d:b8:db:7d:8b:62:a5:71:38:ee:78:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:00:A7:0C:79:22:FC:8B:89:BC:9F:81:6E:81:29:68:BD:E6:84
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:1a:c5:f4:8f:1e:96:f9:e2:a7:1c:a2:35:86:b7:e7:15:
37:a2:d5:90:fc:e4:41:37:dd:37:30:b9:63:31:fa:2f:b6:2e:
33:8d:50:10:e3:54:f6:48:c1:cd:72:61:9c:fc:7f:35:a2:62:
68:e0:f9:50:62:91:22:43:a4:f0:f2:13:8c:01:09:47:72:88:
59:8c:1f:5a:41:cb:18:13:c4:83:16:c4:47:e2:c8:c2:18:06:
78:a8:fb:0a:35:99:16:31:59:6d:fb:14:cc:bd:f9:1b:87:30:
71:e6:56:0a:e1:37:ec:d0:89:f3:ad:85:cd:0e:50:d4:ec:71:
6a:41:cc:ff:10:ba:24:68:75:13:cb:ac:72:cb:e9:06:e2:08:
4b:30:c6:b3:ba:43:7f:3d:a0:42:48:18:b9:c4:a5:80:2a:cb:
f3:8b:a0:7b:98:c0:05:c9:17:bd:df:e4:5a:b1:7c:3d:9a:46:
ca:7e:a1:90:a3:02:85:ae:97:73:cb:b5:a2:7e:9c:fb:6f:db:
fb:d6:3b:e4:d4:99:4c:e1:00:2e:1f:af:c9:31:70:4a:4f:d2:
dc:9e:1c:ae:da:46:0e:c8:cc:92:c6:d8:82:54:d1:1a:ca:c7:
ab:5c:0d:05:63:e0:18:a9:39:95:62:0c:0d:77:8a:10:43:09:
b6:7d:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:59 2026 by rpki-client