Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: 1bc67lQBliqWh3/jpOxWr+avidlIYCFIv9BBJtrkY94=
Subject key identifier: A3:4D:DE:44:3A:C3:22:FC:D7:CC:A7:7D:7C:5B:6C:F3:17:63:EC:40
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 019D390A57999F74B0520D2ED870FBA2E477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 02BB
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: mz5i+x1K+MQSXowUQhny1r3NsOtn/aDbpxA0imzjqLk=)
2: ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa (hash: VCOZaoQKdaHYdzLeM6vy+vaxjALR2cSdXmffmC82vmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:57:99:9f:74:b0:52:0d:2e:d8:70:fb:a2:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=a34dde443ac322fcd7cca77d7c5b6cf31763ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:cc:f9:a7:32:5f:bf:6c:82:b3:92:74:96:
4a:c3:86:3c:27:2b:3e:6c:a9:9f:e0:fa:cf:74:f0:
c3:3a:72:4a:8a:21:7d:e9:47:82:b2:fe:aa:a8:6b:
93:8c:9c:21:27:75:6a:5a:9d:0f:d4:14:7d:f9:5f:
04:bc:12:5d:f3:6a:2a:36:76:f3:ce:a5:e7:d9:44:
0f:af:1b:5a:e6:20:71:db:e8:2d:d2:57:e7:bb:d0:
16:3a:f3:05:4a:e7:9e:9c:b1:ee:75:f5:dd:1e:00:
6e:31:a0:7d:32:0b:e3:b2:cf:6b:19:c5:bf:ef:a7:
5f:38:7e:4c:34:ae:dd:e2:95:b8:12:a8:51:ac:3a:
a9:cc:e5:54:17:62:1e:7f:7c:8d:91:0c:ec:85:de:
6e:20:da:4f:03:b0:10:1a:c8:f2:ef:cf:83:31:55:
b4:c2:1c:60:0c:af:a4:72:2c:e0:21:3c:2e:36:84:
1d:50:94:69:fe:86:a5:94:2a:bb:79:ec:25:20:2c:
3e:c6:c7:9e:70:00:40:8b:35:10:4c:bd:28:c5:2f:
07:04:f9:d7:b5:73:a7:bd:f6:26:61:d8:ff:34:bf:
77:d7:3a:52:9d:08:96:b5:70:6e:f4:10:1e:9e:c1:
a4:fc:09:05:cc:3f:a5:59:8b:0f:7d:19:9f:76:37:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4D:DE:44:3A:C3:22:FC:D7:CC:A7:7D:7C:5B:6C:F3:17:63:EC:40
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c2:d6:1d:1c:34:d3:98:7f:29:a1:96:92:d1:63:00:e0:44:
a5:68:36:57:43:d2:1a:ac:82:e5:ee:2c:0b:93:85:77:a4:33:
07:94:89:64:2c:e2:20:fc:80:51:5e:22:d5:4e:f2:fd:ca:c5:
0d:67:c4:3f:3c:ee:44:16:f3:00:bc:85:4d:81:f4:cd:f6:e2:
ad:04:73:19:14:ed:78:2f:ab:d9:2d:4e:bc:60:3b:02:27:c7:
f5:c7:e0:e6:f3:70:d8:92:ef:0b:2e:0f:c5:14:b0:b5:84:84:
7a:c5:4f:b9:e3:21:f6:f0:9a:4f:4c:25:dd:bb:fb:f6:3e:4d:
3f:4c:83:d9:50:fe:f0:af:cb:14:c5:7a:36:30:0f:2e:52:72:
6b:b7:bc:47:33:e0:41:5b:80:b8:d9:4d:b5:09:4b:19:3f:e8:
dc:71:ca:39:58:89:05:13:5a:38:8f:67:a7:f9:e6:a4:d8:f7:
68:9d:41:fc:47:94:ef:15:8c:73:37:f8:4d:c0:9c:20:3a:2a:
27:bb:f9:70:80:31:6f:12:17:b7:47:4e:05:84:60:da:00:42:
79:50:cf:ff:b9:96:40:69:ef:50:2e:18:65:3d:5d:e6:17:4c:
b9:aa:68:5c:a9:0a:6a:a9:fc:fa:27:ff:d3:4b:c7:c1:e9:36:
db:e7:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:32 2026 by rpki-client