Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: gxDfQCXWjq5XvgF8GHes35m8nxB97ZTI+y648NShfsM=
Subject key identifier: 43:C3:50:EF:6A:24:5B:FA:84:98:76:7D:52:30:6F:E9:16:53:7B:89
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 019F0DACDDA7877EB931EA92939059B1854E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 127B
Signing time: Sun 28 Jun 2026 10:01:00 +0000
Manifest this update: Sun 28 Jun 2026 10:01:00 +0000
Manifest next update: Mon 29 Jun 2026 10:01:00 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: 3Xrc9aeydcpqWAL33TrU16U9GK4X+tKfbjZmA3O0KLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:ac:dd:a7:87:7e:b9:31:ea:92:93:90:59:b1:85:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Jun 28 10:01:00 2026 GMT
Not After : Jun 29 10:01:00 2026 GMT
Subject: CN=43c350ef6a245bfa8498767d52306fe916537b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:86:ff:a2:99:f3:4c:20:51:b3:25:a2:0f:
f6:f2:02:5d:1b:2b:92:07:73:b3:01:90:b2:99:8b:
ef:fa:3e:13:e4:0b:14:4b:d1:df:da:4b:ca:4f:01:
d3:98:d4:40:e2:1e:b6:40:ee:60:05:02:96:26:6f:
99:80:49:d5:64:aa:4c:03:82:bd:7e:84:2d:7b:b3:
f0:cd:18:4c:e9:56:39:52:b0:18:31:bd:94:2c:37:
ac:4f:2a:ec:b1:10:b8:11:05:10:24:0e:2b:68:8c:
ff:57:a3:7d:e7:02:39:d7:6f:d2:87:5d:8a:fb:2c:
ee:b1:b3:28:77:a7:ae:98:0c:c3:5e:32:21:7e:bd:
3a:ce:0a:f3:b7:a8:0b:35:6c:5a:d9:1d:1c:c8:cc:
12:06:9b:2e:7a:0f:51:ce:e5:28:58:31:49:26:83:
21:13:13:a6:49:64:7a:93:c8:f5:a3:c5:a7:5c:37:
88:59:62:33:2c:a1:d2:ce:0c:92:3b:c4:cf:60:53:
b0:d9:0c:79:28:cd:a1:74:61:39:3e:d6:86:f4:07:
9e:47:88:59:8c:4c:04:2a:5a:8c:c9:e1:08:e8:4d:
60:11:13:4d:4d:7a:bc:b8:ee:da:eb:b0:7b:9f:1f:
ca:13:e8:09:f9:61:30:e1:7b:6a:99:6c:b9:e5:73:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C3:50:EF:6A:24:5B:FA:84:98:76:7D:52:30:6F:E9:16:53:7B:89
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f6:ae:c7:c3:93:e3:00:d0:3b:3d:7c:83:fd:98:c5:00:e5:
57:51:a0:36:d7:2b:b9:41:63:1d:35:08:87:d0:7a:09:af:9c:
a8:44:94:d9:15:f4:df:1d:7c:4d:ac:30:fb:58:c7:e9:f2:2b:
f0:d5:f6:8f:cd:ee:a6:6f:7f:ec:f6:d9:41:00:43:c9:90:5f:
f0:f5:8a:7e:fb:3c:ab:cc:c6:eb:13:a2:55:3e:c9:cd:29:ba:
e1:4b:2a:e6:16:ff:80:91:56:73:b2:a8:a7:b5:17:8e:2b:e9:
0f:b3:e8:0c:0c:2f:6a:93:f0:88:4b:b6:39:e9:cd:8c:56:f2:
cf:e7:5a:81:61:fa:b9:06:41:9e:b6:6e:b3:9a:4e:12:15:bf:
be:2a:00:b3:03:cc:d1:b4:61:fd:33:31:88:59:cc:b0:e8:eb:
16:1d:bb:a5:3e:02:31:a4:62:f0:ca:3d:7d:cf:97:ce:06:85:
5b:5b:71:68:1d:17:fa:c3:c5:b0:07:21:b6:06:f2:a5:21:aa:
52:86:a0:6a:ce:08:d3:5f:87:29:91:54:30:be:0b:76:95:33:
c0:b8:8b:e4:eb:dd:91:ca:a8:92:9d:24:67:4d:3c:48:7b:f6:
0b:1c:4a:84:bb:22:c5:d6:d2:fd:40:ae:2a:90:50:0c:ff:02:
6d:13:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:56:58 2026 by rpki-client