Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: Nw7BUlp3dqmb1ElrVj4jGUgyQPIVdMc+/+cgkUQjgyY=
Subject key identifier: B4:EF:9C:A5:EB:30:0F:E8:17:C2:B2:10:29:9F:EE:07:EE:99:E7:1C
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019D3752AA54938E5131DDB33A6BCC58E778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 102F
Signing time: Sun 29 Mar 2026 02:00:57 +0000
Manifest this update: Sun 29 Mar 2026 02:00:57 +0000
Manifest next update: Mon 30 Mar 2026 02:00:57 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: mqfw7RmdYnHQy/ksa6GBXiHTrl7MkPR0sP3JOtxdTJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:aa:54:93:8e:51:31:dd:b3:3a:6b:cc:58:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Mar 29 02:00:57 2026 GMT
Not After : Mar 30 02:00:57 2026 GMT
Subject: CN=b4ef9ca5eb300fe817c2b210299fee07ee99e71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:56:29:18:13:1b:ff:56:6c:2c:d3:3d:f8:
c2:63:7a:4b:30:82:8e:f0:9e:de:a1:23:a0:d3:f4:
3e:87:d6:dd:5c:4e:6c:f9:63:a6:da:3a:df:e0:4f:
0e:5a:0c:11:c9:18:22:4f:22:5b:c1:9d:4e:74:7f:
19:9e:0c:56:7a:43:08:9e:22:b7:4d:07:39:73:ac:
26:85:43:3f:6f:a6:4c:72:25:6c:6e:67:c4:17:d2:
e7:08:7d:e9:56:e0:2c:8c:43:8a:cf:ae:39:bf:68:
70:a3:ea:a3:78:1e:6a:c3:20:41:78:da:2c:8d:99:
a8:83:34:64:c2:cf:78:b3:31:f4:c5:34:f2:2c:13:
05:18:8b:52:72:3a:63:c7:6e:19:c9:9e:77:bb:32:
e3:b3:19:1f:8c:3a:1f:a4:a4:57:1b:ab:20:29:b2:
5a:5f:8f:90:d2:ea:9e:7b:fc:10:0e:11:d8:d3:b5:
62:7b:1c:ed:28:8d:a5:11:fa:8d:fa:63:64:ec:50:
09:cc:5d:84:7d:39:f2:54:80:e0:ae:3e:55:33:7f:
95:8b:08:a3:27:81:b2:f0:27:34:b4:df:7d:5a:dc:
a3:45:65:a8:d8:39:91:f7:ec:0f:bf:95:04:6b:bf:
3f:9f:0b:88:72:02:e4:16:60:20:c7:ec:95:f2:35:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:9C:A5:EB:30:0F:E8:17:C2:B2:10:29:9F:EE:07:EE:99:E7:1C
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ce:cf:68:87:c8:6d:1d:b1:02:c1:b6:e6:89:07:0f:b5:a4:
b4:9e:bf:90:bd:65:87:82:ec:db:d6:6e:ba:2c:ea:32:34:82:
1a:cb:04:a9:7a:08:8e:f9:72:a0:b3:a1:12:e0:bb:1b:e0:10:
46:18:fc:69:15:df:34:e6:67:51:a4:bb:22:b3:9e:73:f4:bc:
ef:a0:33:55:b4:6c:a7:72:75:b7:1e:76:a6:51:5d:2a:b3:de:
10:ee:e8:00:91:45:b4:00:75:e8:37:b6:f2:18:c5:55:49:ef:
8c:33:71:98:0c:50:02:3a:c5:b0:04:bd:99:3c:39:d8:bb:88:
fb:14:8c:6f:8b:10:87:67:4b:dd:71:e5:b2:92:cf:e7:cf:20:
13:b4:8c:23:61:18:24:d5:a0:d5:ff:7f:7e:ff:8e:0a:70:76:
31:71:e0:28:3a:b4:37:31:dc:58:d9:ee:c6:70:49:07:a7:27:
79:c3:1d:26:95:a9:5e:8d:b1:1f:bf:77:e0:ef:bf:a7:89:d0:
26:04:47:4c:3f:b7:68:8c:6a:fe:86:ae:df:78:e6:58:9a:ab:
21:98:45:79:93:8a:29:09:ce:6b:3d:b3:a1:05:71:ed:6f:6d:
9b:a0:da:b5:bd:e7:b4:57:1c:fa:36:72:cb:cb:a6:62:27:be:
be:d9:17:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UqpUk45RMd2zOmvMWOd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjYwMzI5MDIwMDU3WhcNMjYwMzMwMDIwMDU3WjAzMTEwLwYDVQQD
EyhiNGVmOWNhNWViMzAwZmU4MTdjMmIyMTAyOTlmZWUwN2VlOTllNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXRWKRgTG/9WbCzTPfjCY3pLMIKO
8J7eoSOg0/Q+h9bdXE5s+WOm2jrf4E8OWgwRyRgiTyJbwZ1OdH8ZngxWekMIniK3
TQc5c6wmhUM/b6ZMciVsbmfEF9LnCH3pVuAsjEOKz645v2hwo+qjeB5qwyBBeNos
jZmogzRkws94szH0xTTyLBMFGItScjpjx24ZyZ53uzLjsxkfjDofpKRXG6sgKbJa
X4+Q0uqee/wQDhHY07ViexztKI2lEfqN+mNk7FAJzF2EfTnyVIDgrj5VM3+Viwij
J4Gy8Cc0tN99WtyjRWWo2DmR9+wPv5UEa78/nwuIcgLkFmAgx+yV8jUxawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTvnKXrMA/oF8KyECmf7gfumeccMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeM7PaIfI
bR2xAsG25okHD7WktJ6/kL1lh4Ls29ZuuizqMjSCGssEqXoIjvlyoLOhEuC7G+AQ
Rhj8aRXfNOZnUaS7IrOec/S876AzVbRsp3J1tx52plFdKrPeEO7oAJFFtAB16De2
8hjFVUnvjDNxmAxQAjrFsAS9mTw52LuI+xSMb4sQh2dL3XHlspLP588gE7SMI2EY
JNWg1f9/fv+OCnB2MXHgKDq0NzHcWNnuxnBJB6cnecMdJpWpXo2xH7934O+/p4nQ
JgRHTD+3aIxq/oau33jmWJqrIZhFeZOKKQnOaz2zoQVx7W9tm6Datb3ntFcc+jZy
y8umYie+vtkX5A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:49 2026 by rpki-client