Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: eXy3KSrSrmKvXrzX+pLkILw0rOTP787kc7rqQQRLcCA=
Subject key identifier: D0:01:00:8E:BF:2A:05:22:47:8C:4E:13:BB:09:04:2E:33:05:1F:80
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019CE636DCC999CE7E5B600E9F7ECAA98F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1641
Signing time: Fri 13 Mar 2026 08:01:20 +0000
Manifest this update: Fri 13 Mar 2026 08:01:20 +0000
Manifest next update: Sat 14 Mar 2026 08:01:20 +0000
Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: 4isINyWgVS446J7Ld/M7aXvL46lg+wvIOjXUuPzfNEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:dc:c9:99:ce:7e:5b:60:0e:9f:7e:ca:a9:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Mar 13 08:01:20 2026 GMT
Not After : Mar 14 08:01:20 2026 GMT
Subject: CN=d001008ebf2a0522478c4e13bb09042e33051f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:3a:ca:9e:66:11:84:63:c5:17:0d:89:e1:
55:f7:54:bd:00:8f:8c:af:46:07:e2:90:c1:f9:b6:
5c:dd:4d:57:2f:5d:2e:db:9d:9b:9d:88:36:bd:30:
a5:85:bd:ec:da:eb:d6:6e:ea:b2:14:93:4c:c4:6b:
66:c2:22:79:f2:d6:83:16:6f:e2:52:d9:70:d0:c1:
f3:15:fb:61:bd:ed:77:3d:31:63:03:c1:75:2f:32:
14:a1:69:02:ba:88:08:ff:7a:8d:5e:2e:2a:37:f9:
eb:d0:b7:ba:ba:17:ab:e4:fc:5e:9a:96:2f:40:c3:
88:10:b5:14:37:42:ab:e1:ae:d9:92:1c:61:25:84:
8c:74:54:4d:b5:72:e5:e2:a0:31:b0:f5:4b:0d:32:
1d:94:53:b2:fe:0a:8b:69:fc:83:90:c0:bb:f3:7a:
04:f2:7f:d8:37:98:35:0b:6f:38:15:c2:5f:19:06:
a6:23:79:db:26:12:1e:c6:47:62:7e:cb:d7:fc:68:
5a:4c:79:84:c6:8a:d8:59:95:1d:b6:32:93:cb:cd:
1a:de:5d:2e:22:14:a8:54:86:86:e3:2e:7c:cd:7d:
1c:22:fc:11:40:1f:40:e0:fb:ba:56:ab:9b:5a:eb:
1a:b1:11:f3:ef:d4:36:fd:91:8b:6c:9b:0e:b4:06:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:00:8E:BF:2A:05:22:47:8C:4E:13:BB:09:04:2E:33:05:1F:80
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a6:3c:35:31:5b:cb:ae:d0:e3:63:0b:bc:f1:6e:7b:df:26:
08:c1:bd:e5:cd:c4:ad:49:11:9b:ff:93:0f:c8:6e:e7:00:30:
58:8d:4d:50:27:a8:9f:89:1e:a2:11:89:7b:ce:0d:2f:27:85:
78:83:24:de:ad:9d:ba:27:ec:52:d5:c5:6a:b2:3d:a4:6a:38:
df:3d:e7:55:fa:76:91:f0:8d:6d:e8:45:54:d0:d9:b6:6a:2f:
51:34:c2:44:55:a6:94:df:6f:89:50:85:8c:c5:45:6a:0c:4b:
0d:bc:70:ad:0f:4b:fa:74:ae:39:23:e2:96:c1:45:27:12:ab:
39:53:91:bc:ca:b7:03:7e:17:8d:32:59:98:72:ac:65:58:a6:
f7:79:67:c2:17:a9:86:41:4f:6a:01:61:3b:b7:3b:61:b8:93:
7b:cb:0a:2a:b3:bb:42:49:8d:8e:4a:d5:1e:c0:02:68:38:22:
ac:a6:4d:e8:f5:13:d6:79:0a:5f:8b:b6:b5:2b:9d:d1:3b:cd:
87:a4:e3:1d:87:a0:ab:e9:4d:88:4b:14:81:59:64:cf:75:eb:
ce:6c:46:af:00:9f:ac:74:b2:f6:fc:8b:2d:24:eb:6b:d1:a6:
90:b2:e4:39:90:cf:20:6f:df:ef:73:9e:59:83:ec:ca:e2:4a:
72:45:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:13:27 2026 by rpki-client