Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: plhlTqJbSZSOCDJvw4NX54sRbRLO2OTa6GFRp+qnmRY=
Subject key identifier: 10:41:FE:36:46:D1:0D:EA:6B:2D:74:33:FF:DE:4C:0B:C6:F6:F2:CA
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019D38D3384087DA306DD0AEC1F47F2088D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 1665
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa (hash: LEtUsnx2enz1xXPb75ExcnyoapD60AYn9bvDFjrUga8=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: BcQxE8m5wUoBEfXsDna8bOv33m7erYCXVPcftVkode0=)
3: vQVu0E2WyUWmteW1X5tAGdPGMFs.roa (hash: DDmHO+xrIG9LaR66B2Dm2O9/yty+KAgFsRFZqnf/WgM=)
4: w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa (hash: u8EvZ7sZjq6P1Wyu+J9n9xS5J9Sdw9tfnALdi/q2jLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:38:40:87:da:30:6d:d0:ae:c1:f4:7f:20:88:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=1041fe3646d10dea6b2d7433ffde4c0bc6f6f2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:c6:83:ac:67:b8:e8:45:4b:38:ca:fc:e3:
b4:53:1b:ac:01:a4:8f:61:fd:37:9a:f5:65:ce:0e:
d9:24:6d:75:cd:3f:f3:91:7d:45:6d:7f:a6:8a:80:
44:69:47:3c:53:35:52:dc:37:0f:b1:26:50:6d:b5:
8d:8a:f6:b2:36:86:fa:8e:0d:cc:36:df:20:58:71:
ab:ae:99:04:25:cd:61:17:23:d8:fb:d1:8d:1c:af:
3b:10:fd:1a:5e:b0:d4:c3:5d:36:9b:85:eb:b0:27:
a8:bc:9a:b8:15:6f:09:ce:ca:90:33:e5:54:a0:5b:
84:6d:e4:6b:24:40:95:c1:9a:cb:bd:c7:01:7c:64:
dd:3b:21:f8:4a:51:cb:f5:84:5f:a5:df:31:da:ab:
ec:c5:91:a0:e8:c4:82:71:fa:27:55:a7:1f:23:3f:
be:23:9e:ea:b3:b3:d6:2c:c5:f5:8b:c6:52:53:7e:
af:77:81:05:28:19:da:57:b1:74:fb:34:f9:51:82:
98:b3:73:a0:36:44:8a:36:b7:80:e3:9a:20:c5:68:
de:bd:4a:6f:50:3a:9a:59:53:37:16:c4:8c:a3:bc:
2d:cc:67:9c:cf:f2:aa:3f:fa:f6:ac:9c:c0:b3:7f:
85:05:37:48:f7:8d:f9:4d:9a:d1:00:66:04:1c:86:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:41:FE:36:46:D1:0D:EA:6B:2D:74:33:FF:DE:4C:0B:C6:F6:F2:CA
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d6:e3:05:b2:d9:88:0d:70:25:a9:09:b0:0e:3b:e6:97:95:
3e:3d:d6:ba:54:87:f8:01:dc:49:ac:44:74:80:06:99:9d:c2:
e5:32:b8:ff:7c:5f:0a:20:33:aa:f3:b7:be:1f:fd:f7:b1:32:
29:47:8c:cb:02:65:f3:62:64:11:d5:e2:cd:e1:11:83:65:df:
d1:be:67:b4:0e:af:64:43:cf:1c:e3:ae:07:51:30:ea:ac:e9:
cd:a3:bb:2b:f9:d8:66:84:09:e4:21:30:f5:08:94:44:46:77:
ab:b1:88:4c:bc:97:1b:59:a9:dd:4d:c4:94:62:78:a8:7c:2a:
13:8c:74:9b:2b:11:3c:ac:62:5d:be:7c:14:a7:f7:90:74:bf:
ef:db:c2:5e:30:e8:84:9e:86:85:15:93:f4:f0:ce:ac:2a:34:
0b:e4:21:77:b9:29:09:03:9e:0d:2b:58:56:15:0d:58:3b:fe:
a9:4d:a9:e6:9b:bb:b9:4a:b2:64:28:f8:8a:7b:f1:d9:bf:12:
26:c9:7b:43:67:0d:e2:b7:98:7a:c8:b7:2d:17:18:b2:f5:46:
28:30:af:40:6a:30:bc:71:b8:91:eb:82:c2:5b:05:1b:b0:19:
cc:30:76:2f:19:65:30:8c:0b:3e:1d:7f:ff:6e:e4:fe:a7:ec:
4d:d2:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:49 2026 by rpki-client