Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: Q69RmTay7GtSoJzkXZzf9oLlmZxD0NQe18eQKj0O8XQ=
Subject key identifier: D4:1D:8D:FF:1A:3A:08:77:40:DA:1D:B6:34:67:7A:5D:1B:62:BF:A4
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019D38D39BEF7DACC055A05DE3CF997D49B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 099E
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: PFLWqZXEhGSjSe27HXXBR4MJTJc.roa (hash: EgW8y7jSNiN5c+nvOeQLbNW7t5xsejb8y+r01vtFLbM=)
2: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: 7N/QF6vx1ieGoGnCsEL4I7GwI1ZBzqwom9PkJl9AEH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9b:ef:7d:ac:c0:55:a0:5d:e3:cf:99:7d:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=d41d8dff1a3a087740da1db634677a5d1b62bfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:8f:47:1b:03:de:fe:54:3b:58:3b:3c:c0:
9a:db:05:08:60:7c:28:84:fd:23:79:71:62:5a:c2:
48:ed:23:42:1e:ea:a3:63:83:4c:0f:72:9b:dc:a1:
f5:bf:09:d0:b6:d5:9e:83:23:06:80:84:9f:44:35:
91:29:a5:4b:98:aa:ae:6e:a0:7d:cd:df:e5:e5:2b:
fa:47:9a:7d:3a:99:fd:86:ae:c5:93:a7:20:d4:ea:
59:dd:3a:6f:51:29:18:a7:e6:7b:b7:c6:d2:7c:65:
35:e8:a7:40:5c:a1:54:ea:d4:ce:0d:88:df:e8:9f:
9a:24:41:b4:1b:2b:64:0e:90:97:64:b7:8d:a9:95:
78:55:a7:25:4c:6d:b4:21:f3:40:72:1b:9e:f9:0b:
0a:e8:bb:fb:4b:10:e3:08:c8:5a:65:b0:1b:c8:cf:
c9:82:55:36:19:92:87:71:65:d2:55:07:4e:0c:f1:
78:1b:ea:11:2c:f2:40:67:e8:42:6b:10:7a:d8:04:
a7:7a:e2:5c:b9:ac:19:fe:a2:92:bf:e5:70:41:1d:
18:9f:28:fa:22:a9:28:ba:b1:de:20:f9:0d:11:49:
5c:63:09:01:b7:92:f4:2a:5e:db:51:3a:9e:bf:cf:
1e:09:73:3b:69:7b:b1:60:d8:26:f8:f9:80:98:ba:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1D:8D:FF:1A:3A:08:77:40:DA:1D:B6:34:67:7A:5D:1B:62:BF:A4
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:df:f6:e2:5f:39:e3:c0:fe:f6:bb:8d:8d:77:42:ca:70:19:
09:e4:86:45:02:9c:36:d4:b9:8f:61:af:83:82:c0:76:7a:1a:
97:d2:01:2b:ce:f9:de:ff:30:6d:22:b2:95:1b:d8:b9:07:b8:
92:f0:66:c1:ac:f8:bd:1a:be:e6:05:f1:f9:68:b2:07:f3:01:
a4:ac:7c:2d:1a:83:74:6f:22:23:53:17:7f:a8:af:ae:cc:e0:
6b:e0:82:1d:6e:61:27:95:f7:52:ce:55:ba:86:46:6d:1d:33:
40:7f:c5:c5:be:b8:df:6e:1a:67:e4:c8:3b:09:28:26:8f:c8:
01:42:58:a8:1e:36:6a:64:d8:f0:f4:54:b6:84:48:49:99:91:
4c:82:4a:c5:9a:8a:55:11:ef:bf:83:4c:e5:d5:4a:e2:18:64:
2d:dc:23:8d:1e:e4:64:76:38:d4:9b:32:71:d9:81:bc:53:13:
68:92:a9:e4:b2:51:70:95:a0:b2:2d:f0:6f:c5:0f:bf:49:ac:
5e:a3:ab:8e:57:f6:0a:10:b3:de:f0:e0:32:06:f5:c0:e5:6b:
b1:6f:e8:da:44:e4:10:17:f5:8c:4a:1a:61:e1:52:59:dc:ff:
49:69:d0:58:2a:4a:18:68:52:7f:38:23:95:52:b3:0e:80:01:
52:72:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:18 2026 by rpki-client