Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: lqENVpH5nzlJ9kld37tiy2P1t0UqUmmkXvhASAobbUc=
Subject key identifier: 88:67:72:C5:86:C5:26:DC:9F:71:DE:97:73:19:26:31:D4:13:28:F8
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 01A0EC9CFA823CB2AE246657D2263A4834D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 1371
Signing time: Tue 29 Sep 2026 10:01:45 +0000
Manifest this update: Tue 29 Sep 2026 10:01:45 +0000
Manifest next update: Wed 30 Sep 2026 10:01:45 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: 9fjpG4i2H6v8ZugRdHNTmWoXJ3CqPI2gjjVmu91L3II=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:fa:82:3c:b2:ae:24:66:57:d2:26:3a:48:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Sep 29 10:01:45 2026 GMT
Not After : Sep 30 10:01:45 2026 GMT
Subject: CN=886772c586c526dc9f71de9773192631d41328f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:46:ab:65:24:e4:1f:5d:bd:6b:3e:65:83:
5e:09:d9:fc:86:6d:90:cf:51:60:64:6f:67:97:b9:
13:07:8a:15:c1:15:5e:60:b4:c8:a1:08:ff:be:4d:
09:b6:a9:a7:d5:e1:83:b3:ee:a3:b4:a4:12:fd:8c:
34:1d:97:26:c0:6e:33:d1:6a:7e:d7:c9:de:6a:a1:
22:9e:8e:e0:bc:be:2b:96:e8:6a:55:17:24:2a:35:
0a:dc:8d:3f:9e:55:ea:83:a8:7c:94:a9:26:f8:05:
fb:38:27:a2:c1:08:42:20:18:85:6f:e6:51:cd:75:
39:61:2c:81:88:ee:04:90:b2:82:9d:3d:43:8b:c5:
a2:59:be:5d:5e:1d:f5:95:9c:07:98:58:db:44:8a:
2a:5a:7f:62:6c:f9:05:93:8c:40:7b:f7:0c:23:49:
4c:d3:18:62:aa:4c:15:a6:3c:a9:59:4c:d2:ae:e5:
40:b9:7a:70:25:bb:1c:e4:8a:96:19:47:3a:27:d9:
15:ad:8c:0b:1f:b6:9a:f7:8c:c4:e1:6b:ed:0e:48:
24:b1:3e:67:42:ed:0f:67:26:38:88:7a:f2:e2:f6:
67:a4:76:25:ac:12:cf:93:57:fc:da:31:36:0a:74:
44:e2:bb:99:68:06:40:3b:f7:2e:5a:cb:b7:8a:dc:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:72:C5:86:C5:26:DC:9F:71:DE:97:73:19:26:31:D4:13:28:F8
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8c:fd:50:f0:d8:f2:dc:67:5b:78:18:8a:1d:dd:07:a0:50:
9b:81:e3:16:cc:b9:d0:c7:78:c9:c7:dd:ae:b5:6c:0d:5c:f8:
35:fa:a3:7e:4d:7e:30:b4:8c:f4:14:e8:7b:ea:0c:4f:63:03:
a3:22:b7:a6:23:02:36:c3:ea:16:9e:13:8f:08:65:89:f5:a3:
70:1b:93:1d:28:d3:20:40:75:c6:4a:bc:85:3c:d0:57:4b:dc:
a5:ca:31:b8:95:a7:3c:18:02:ba:c4:a6:f2:6c:d1:8f:ab:bc:
12:c1:28:1e:a7:56:5f:39:a9:e6:6a:27:44:7a:2e:ed:da:ce:
bf:3e:91:df:27:d5:a3:1a:22:2c:b3:5e:58:43:43:1f:7c:3a:
ef:a1:67:63:93:04:4d:18:4d:10:ea:fd:63:13:da:de:ee:e1:
1e:ff:86:e3:02:35:78:5a:43:1d:eb:aa:11:37:50:4e:33:ff:
52:cc:1f:3e:3e:42:31:46:1d:5e:92:4e:a4:1f:f6:b7:ee:08:
b2:59:75:0f:fb:ec:1a:d3:c9:7d:26:cb:23:ef:06:6c:3a:3d:
b5:3a:9b:64:ae:a8:d2:50:ea:51:f0:6d:05:18:6c:7a:c6:2f:
82:2f:4f:ed:16:cc:e2:e5:e5:74:42:7d:5e:5b:6c:87:f8:5a:
9e:ec:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:28:14 2026 by rpki-client