Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: BiNXP0ZlgUyJk9VnyWghQAdDZKWOdWmZsnCBU/KmbVo=
Subject key identifier: A5:98:3F:C8:9F:5C:38:83:E2:70:74:18:DE:5E:4F:22:2F:5B:72:74
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 019D371B6BF98137AA3817E197C6F761F358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:37 +0000
Manifest this update: Sun 29 Mar 2026 01:00:37 +0000
Manifest next update: Mon 30 Mar 2026 01:00:37 +0000
Files and hashes: 1: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: TUV1kAZGPUSS/lgncrlbFHdZvLRiT/zWqp86yq7OG+8=)
2: p_L2QpRj3ttW5zYJBodD2QWnHQk.roa (hash: jJxb3YNiA4DSQOly6eBKE2Fc+ul2//HbGqi6YUq+XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6b:f9:81:37:aa:38:17:e1:97:c6:f7:61:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Mar 29 01:00:37 2026 GMT
Not After : Mar 30 01:00:37 2026 GMT
Subject: CN=a5983fc89f5c3883e2707418de5e4f222f5b7274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:d0:f9:51:e7:6a:59:cb:dd:1c:b9:d5:15:
fc:b6:4a:a5:eb:ef:07:dc:2d:f0:9e:53:1a:b3:e9:
47:c0:80:1a:16:68:c1:99:43:e4:9b:2a:8d:bf:a2:
b0:39:75:e2:f8:81:75:df:1e:8d:e2:e4:c7:ed:77:
42:17:ab:71:14:6f:bd:1a:03:6d:1c:97:17:66:d0:
64:fa:cc:4a:0a:4d:d2:aa:56:e0:a3:99:6f:c1:e0:
5e:ca:05:49:35:8b:56:04:c1:eb:a4:cd:6c:1a:1c:
d5:29:af:7e:f6:73:da:41:ab:b1:66:b4:28:d2:a2:
56:fd:df:45:5a:59:c6:a2:03:2d:eb:f7:06:d8:2b:
98:25:17:28:c3:a6:8c:2c:61:d9:52:64:fa:cd:4d:
41:ae:81:a5:25:94:fb:4a:e7:8d:43:94:28:b2:a2:
01:e6:22:50:0e:52:a8:25:a1:1b:19:f8:ba:a7:d1:
2a:b9:b0:0f:85:62:44:d7:e5:14:e2:33:7c:45:f6:
c1:b7:90:66:af:2e:b6:83:89:f8:86:8f:35:12:96:
c7:ea:48:89:2a:88:59:56:e2:76:65:7c:1b:fb:eb:
d8:e4:c9:fd:20:9b:70:dc:69:3a:90:9a:55:b0:0d:
2e:24:c2:0a:b7:c9:e5:2f:c2:bf:6f:0a:20:77:95:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:98:3F:C8:9F:5C:38:83:E2:70:74:18:DE:5E:4F:22:2F:5B:72:74
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:1f:75:2b:f9:87:39:e4:c3:ff:62:c5:c9:6c:5e:45:41:9b:
fd:30:67:a6:b6:be:74:c1:52:f7:f9:82:ea:52:ae:38:63:7f:
d2:69:a2:39:f1:25:0b:c9:65:72:54:d9:ec:1e:2d:15:d5:b3:
cb:3b:b2:fd:ad:1c:82:96:24:05:0c:37:42:da:30:66:5c:10:
2b:03:1e:ee:ff:12:2e:57:ce:20:84:50:fc:db:4f:78:2a:88:
c1:af:2c:e4:ca:a7:51:a3:3a:8f:61:45:c4:ee:8c:6b:29:42:
e9:5c:01:14:c9:8f:13:35:7a:f1:8e:34:50:41:f1:95:47:4c:
3f:f2:06:18:3e:77:64:3f:77:7a:5f:9c:7b:0c:c3:2a:40:e6:
25:77:6e:38:9b:60:82:66:2d:67:d0:6a:10:26:80:19:f8:73:
32:a8:40:2e:c0:b2:7b:9c:94:81:b2:37:9f:9c:e0:ea:9f:9a:
ae:b8:c3:bd:2b:39:4f:38:cd:33:2d:95:5a:7a:cc:4a:4c:76:
0f:60:85:de:b0:72:bd:d0:e5:2d:9a:79:61:de:0a:ea:b5:89:
c5:03:02:a0:9e:41:01:b3:20:f0:c2:a4:a3:ae:4d:fd:f5:ab:
f9:46:13:9c:ae:86:91:96:32:93:41:da:fc:7b:ef:02:73:8d:
26:71:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:30 2026 by rpki-client