Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: q5tSZu1tmRf66YQtpoc42uqAtCvBgFbp+X2wVHiGvG4=
Subject key identifier: 5D:45:5F:3A:E0:31:23:A8:BE:3C:7F:0F:D9:85:4C:C2:D4:3C:DE:23
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019EB5B28FB25370F87E0B71F19BD3C5DD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 10F5
Signing time: Thu 11 Jun 2026 08:00:38 +0000
Manifest this update: Thu 11 Jun 2026 08:00:38 +0000
Manifest next update: Fri 12 Jun 2026 08:00:38 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: dtFPrzP1t7KWYsbMZJUMJXDPCMpixpk74B1jeB1PO10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:8f:b2:53:70:f8:7e:0b:71:f1:9b:d3:c5:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jun 11 08:00:38 2026 GMT
Not After : Jun 12 08:00:38 2026 GMT
Subject: CN=5d455f3ae03123a8be3c7f0fd9854cc2d43cde23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:da:8d:6e:2e:b5:57:a8:82:e7:e4:37:b8:
60:cb:e2:92:fc:70:f4:9c:5e:8a:54:fe:dd:29:f6:
f6:31:c0:c9:ea:49:ab:7e:bf:43:65:ea:27:3e:6c:
0e:8d:9f:d0:d3:94:86:c0:2f:49:9b:b6:4f:a7:d3:
9f:50:66:85:d7:86:45:cc:e7:46:68:9d:11:92:06:
12:a2:28:8a:2f:d8:5a:c5:f2:f3:b0:69:e7:5d:ed:
32:b8:36:ec:7a:98:f3:58:f5:60:38:67:5b:23:d2:
21:d4:4c:f1:96:b1:a4:48:ec:e2:9c:58:c8:84:f2:
9d:94:9b:51:fb:f0:52:c5:04:5b:7e:59:7e:74:10:
22:19:22:47:7d:47:4f:a1:18:54:fa:0b:5c:44:75:
70:cb:57:b2:03:6b:3a:89:3c:75:4c:89:ba:0f:12:
10:6d:73:9d:58:fb:bb:fe:b7:11:f1:a2:2f:07:03:
2b:5f:8e:23:17:a5:36:82:71:d5:4b:29:a0:e5:54:
c1:e7:74:93:6f:97:38:79:83:71:13:02:b7:63:df:
02:e6:c7:2d:35:30:33:a3:52:6f:9e:5b:39:85:d5:
90:85:e9:3e:f4:8d:16:bd:43:53:4f:94:ed:35:42:
1a:ef:d2:a0:3e:15:41:96:3d:2d:57:d4:2d:c5:84:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:5F:3A:E0:31:23:A8:BE:3C:7F:0F:D9:85:4C:C2:D4:3C:DE:23
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:38:d0:cd:11:10:58:73:92:ea:99:a3:ca:4c:4b:74:dd:c9:
32:55:ed:a4:7f:63:39:8e:52:e8:32:26:4b:f3:2a:05:9c:5d:
6f:e9:29:15:d0:11:47:de:70:03:99:69:18:d6:95:02:49:2e:
d2:30:1c:de:28:42:b9:f2:69:f6:ad:64:e7:43:27:af:8a:44:
1b:52:00:17:69:76:ea:bc:cc:1e:36:74:6f:25:b2:a9:7f:58:
77:35:8f:9e:4a:4a:0e:8f:1c:d9:5f:72:71:4a:3e:fb:ef:5a:
70:09:55:77:32:38:19:a5:0a:a9:9b:d2:0c:68:2d:c5:60:c7:
33:f7:96:24:9f:af:c1:0c:68:bd:f2:4f:82:84:7f:01:d6:d6:
c5:53:f1:a9:4a:c0:ea:24:cf:6b:4c:c6:54:8d:fa:27:1f:29:
b5:16:69:dc:68:31:80:68:e1:9c:86:f5:b5:e4:13:25:b9:f8:
bb:c4:a1:e5:4a:2d:c1:c6:73:32:8c:07:9f:f5:44:29:fd:83:
86:0e:b4:7e:1e:9e:a4:27:ec:b8:bc:1a:2e:60:65:a5:f0:9e:
be:de:d9:1e:64:30:96:2c:63:6f:e2:3c:4d:cc:07:e7:8b:6f:
d8:c3:ec:18:d8:d7:1c:c6:61:c1:9f:22:9b:15:71:83:8b:f9:
91:8b:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:49:34 2026 by rpki-client