Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: qk22VyCOh5qG5rEmEUl7TnlRB5mTOQlLOYUbhnDHjdI=
Subject key identifier: A8:61:5B:3F:1A:C9:65:9B:E0:B7:D8:2E:24:2D:BC:A9:04:57:3E:69
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 019D28BBAAC0EFF8FE1BF4A3C374CFF5CD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 0799
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: e8VivWGNI4U+ZgkScmRFxmFLAIcLr6asMVHfvrapjF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:aa:c0:ef:f8:fe:1b:f4:a3:c3:74:cf:f5:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=a8615b3f1ac9659be0b7d82e242dbca904573e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:fe:d9:69:bb:28:72:89:8f:2c:83:a5:43:
9e:19:72:3d:7c:0c:de:f0:cd:4e:c5:ce:9d:d3:27:
65:20:11:b7:a0:0d:d1:e2:4c:63:32:78:b5:22:09:
8e:d4:91:87:19:7e:d3:a3:fb:37:fb:f8:4a:ad:4e:
36:52:9f:3b:ac:34:c6:7f:41:4c:68:b0:a0:85:24:
dd:80:f7:fb:34:af:d4:ec:82:fd:65:c5:b9:f6:1c:
2d:81:40:51:ee:4d:35:5f:61:35:3e:27:6d:7b:99:
91:69:49:a6:90:05:41:b1:4f:00:30:78:b7:18:cf:
af:ba:83:7d:0f:e3:3e:97:03:2e:81:8c:22:03:08:
2d:40:a0:60:b9:c0:cb:12:91:6f:17:46:69:f1:24:
1e:ad:0e:5c:92:a9:de:ef:1a:c1:cc:3f:42:35:a1:
26:d4:74:00:ec:84:1d:fb:c6:ea:8f:db:9f:43:36:
c1:d6:34:af:bb:fa:4f:32:0e:9d:99:28:21:a6:2c:
08:c2:69:91:23:92:14:01:a4:2f:1d:53:2d:86:23:
dc:1e:92:69:79:f8:c9:1a:48:6b:a8:51:a8:04:08:
4b:c5:0f:5c:3f:3b:d6:8d:62:75:78:b8:93:99:93:
05:a0:0e:6a:09:41:d5:33:b1:fd:ac:48:02:6c:92:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:61:5B:3F:1A:C9:65:9B:E0:B7:D8:2E:24:2D:BC:A9:04:57:3E:69
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:27:c0:e2:00:55:75:e3:2b:b8:12:47:68:3a:25:8b:2c:
64:0a:79:8a:1e:0c:50:5d:72:1d:dd:65:b7:9f:67:da:a5:d3:
cb:bf:6d:a8:66:f9:d3:c0:5e:14:35:a0:f7:a9:32:6e:00:ae:
ae:a9:d0:c0:20:dd:df:f2:92:75:ad:c5:f3:6f:d8:be:c5:e4:
55:84:41:ce:47:8d:d1:ba:d7:a3:d2:42:10:27:33:46:22:5e:
1d:8b:f8:34:72:6c:c3:e9:b7:46:77:bf:b2:b7:db:2d:36:fc:
77:06:e5:93:4e:2e:fc:10:a2:d8:98:e9:fe:32:7c:aa:0c:85:
62:b7:0a:ee:86:88:56:e5:1e:ff:d7:de:cf:50:8d:9a:78:be:
88:bf:51:2e:d2:62:88:33:05:4c:3c:fc:05:29:c6:c4:cd:32:
25:17:44:1e:02:03:89:2d:16:5f:7a:1d:d1:89:0f:69:2f:57:
47:bc:52:19:b0:7b:04:60:fd:e2:ec:9b:ea:c4:18:0d:7c:69:
79:f4:2e:c5:de:fb:d7:ce:88:52:e6:b0:0c:d5:22:55:bd:be:
0f:ef:f4:5b:f9:32:48:0d:3f:dd:b8:51:4e:26:ad:c0:55:40:
93:19:ed:d6:80:f0:9a:2d:62:94:15:0c:2b:9a:88:31:c8:fe:
64:59:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:51 2026 by rpki-client