Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: WazPEf4+J04r6qXQNvv0MWYVs6MjMouMni7neUUUp+c=
Subject key identifier: 40:5B:F1:48:A4:00:EE:49:17:AA:99:EF:10:A4:98:7B:43:DB:19:AC
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019CE447C691241D7C64700B498E7F97ABEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1640
Signing time: Thu 12 Mar 2026 23:00:34 +0000
Manifest this update: Thu 12 Mar 2026 23:00:34 +0000
Manifest next update: Fri 13 Mar 2026 23:00:34 +0000
Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: BjtyQhj3HoJYNY/S/x/0o9dcncA0AR6NVt6hmaGsAUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:c6:91:24:1d:7c:64:70:0b:49:8e:7f:97:ab:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Mar 12 23:00:34 2026 GMT
Not After : Mar 13 23:00:34 2026 GMT
Subject: CN=405bf148a400ee4917aa99ef10a4987b43db19ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:c1:b4:4c:c4:e2:32:28:f8:e5:b0:bc:9c:
cf:73:5b:71:d0:41:8d:cc:4c:04:46:b6:c6:90:32:
a7:9d:04:26:cb:5d:0e:cb:ab:3a:7f:4c:27:6d:04:
5c:33:bc:da:78:93:8d:c3:f0:58:cf:11:c3:81:2b:
b8:00:81:50:f1:0a:71:29:1a:0d:8f:a2:ac:78:14:
8b:b5:f4:6d:04:a8:f5:d8:8e:9b:0e:d3:2d:f9:12:
c8:b0:18:cb:7f:29:5f:17:df:31:d7:a2:c9:63:69:
5f:92:06:86:da:3c:28:1d:98:7a:5b:3e:47:ad:22:
f5:70:4c:15:46:41:21:c9:c8:ef:39:78:97:91:b1:
c2:9a:02:bc:0f:7b:bb:20:cb:a1:83:5f:85:8a:eb:
e0:b6:ee:b9:f5:e7:06:94:30:85:bb:fd:34:50:a7:
8c:a6:bc:57:df:77:51:63:87:fe:ac:b5:31:56:31:
90:af:c3:dd:30:4b:d0:47:0e:71:1f:21:c5:97:dc:
4b:fd:4a:ff:48:49:0e:89:6a:5c:4a:47:a0:ed:a5:
6f:56:73:2e:f7:32:98:a1:d3:af:34:a8:1a:a7:ef:
5d:09:4d:14:e0:45:c4:07:27:fe:0a:1e:fe:db:10:
bf:8e:6e:08:1a:6b:93:a0:2a:bf:6b:c6:d7:80:0a:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:F1:48:A4:00:EE:49:17:AA:99:EF:10:A4:98:7B:43:DB:19:AC
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:09:58:49:69:d0:3d:57:42:dc:bf:4e:bf:6b:02:e5:43:b7:
c3:7a:e0:9c:5a:35:38:0d:cd:a7:11:5c:8f:48:c4:de:b2:3b:
59:93:3d:b2:ae:1a:77:a4:1b:73:e8:8f:1f:59:93:f1:6d:07:
b5:23:57:b4:73:7f:78:69:97:d6:f9:39:b6:d0:4a:e7:49:7e:
6a:e4:15:f2:b0:10:31:3c:57:71:7d:b8:2b:83:96:04:30:6b:
a9:09:a5:55:42:ce:c3:83:90:74:23:4b:cc:ee:24:d1:ad:e9:
69:25:fa:4f:59:42:c4:8a:59:c1:35:4d:7d:35:a2:8d:55:3b:
80:12:a5:36:9e:ac:36:28:14:0a:2d:10:e0:28:fe:1a:ea:56:
f8:7a:b1:7c:01:55:6d:b4:d5:2a:23:83:22:7c:77:1f:3c:cd:
5a:4c:75:be:c6:36:08:48:ae:a6:2f:ad:95:c0:2c:61:e3:01:
4c:1b:9e:e7:58:e9:46:f2:57:15:30:c6:a9:b1:ee:43:2b:bb:
b9:a7:09:f4:79:5e:6f:37:00:19:c7:3f:bf:ed:3c:9b:25:41:
96:e6:54:05:6d:fe:b4:b0:37:1c:b0:af:19:2d:3a:e0:db:8e:
02:b0:5c:7c:c9:0e:23:17:2c:a5:42:9b:f6:e5:6f:4d:b2:36:
8c:1b:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:50 2026 by rpki-client