Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: Xs3BJoQFZ55mjfGmAwPeQOYVwboCEqhDsU/+f1/DQR4=
Subject key identifier: 3C:45:B9:F3:D8:6C:7B:44:63:5A:18:57:E2:2A:9E:B7:13:0B:2F:6E
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 01A0DC4D80CDB1DBB58D06D8F911FF259DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 1056
Signing time: Sat 26 Sep 2026 06:01:01 +0000
Manifest this update: Sat 26 Sep 2026 06:01:01 +0000
Manifest next update: Sun 27 Sep 2026 06:01:01 +0000
Files and hashes: 1: L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa (hash: upS3aOnw/wQ7yjWNv575VRnG3gYRLnA5O/bTU3MDbbk=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: QNfATaWndYrBZLyO+n9ckkyVCGnvG38kiwJvtH7c7kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:80:cd:b1:db:b5:8d:06:d8:f9:11:ff:25:9d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Sep 26 06:01:01 2026 GMT
Not After : Sep 27 06:01:01 2026 GMT
Subject: CN=3c45b9f3d86c7b44635a1857e22a9eb7130b2f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:bf:92:67:c6:0d:af:ba:10:51:4e:22:a7:
97:a4:63:c7:7f:02:94:84:45:d8:3b:9e:21:e0:12:
70:ff:8a:a7:16:92:5c:8b:4f:b3:eb:48:9d:a1:67:
78:4a:ad:b1:14:22:14:ce:90:cf:4c:8f:21:c3:d0:
cb:67:7f:85:2d:1e:6e:75:a0:cb:05:d6:94:66:80:
d3:8f:2b:fc:09:b0:19:c8:54:00:9f:8c:76:29:d7:
71:a0:b0:87:37:ea:50:ae:ad:d4:a4:bb:d4:a9:a0:
46:a0:82:5b:96:25:4d:b2:2c:81:d3:69:eb:9e:93:
c1:dd:58:7b:b7:20:9b:a8:f0:e8:2d:6c:9c:a2:9a:
2e:8d:29:97:c5:74:4e:af:f8:68:1f:2f:c6:a5:3a:
35:bc:2a:e4:4d:35:49:85:3c:8f:02:0f:35:6d:18:
36:01:48:a2:7b:f9:f9:7b:4e:83:d4:d7:94:61:33:
61:bc:d2:e7:85:b8:2c:28:02:92:f3:07:aa:fd:06:
8b:83:ca:ae:76:ba:15:37:30:1a:35:66:4c:90:27:
a4:7c:d2:07:6d:87:47:d5:df:1c:1a:f5:2d:03:74:
5a:4d:5f:a7:4d:52:3a:be:bd:bc:e4:58:9d:0c:85:
cd:52:0b:f5:bf:98:4b:c5:2d:10:5a:d6:34:56:52:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:45:B9:F3:D8:6C:7B:44:63:5A:18:57:E2:2A:9E:B7:13:0B:2F:6E
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:c5:6d:47:f3:fc:c7:4d:ef:ac:d0:e0:80:51:16:d1:c5:
54:93:2b:72:56:35:d9:d8:c2:ea:2d:1b:44:4f:bb:f2:82:af:
2b:5e:a9:29:b4:2a:c5:e5:ba:f6:5f:2a:dc:1f:cd:e7:94:f6:
61:d1:29:b4:41:da:a7:8c:9d:f5:38:36:06:44:a9:d4:62:c2:
86:ca:4d:a6:41:e5:ab:31:75:fd:9b:a1:47:6c:4b:d8:2d:75:
3d:2c:c7:b9:57:66:04:a6:3f:b0:48:39:f7:41:82:ed:4e:f2:
f4:bc:f3:d2:2a:8b:ab:fc:90:a2:c8:57:a0:f2:d1:af:84:07:
9b:14:18:53:d9:d8:9f:68:f2:74:f0:88:55:12:69:50:5c:29:
1e:91:f4:54:7c:e1:af:0d:54:34:6e:a9:59:8c:97:8e:a7:27:
fe:b1:23:0d:21:dc:ae:78:42:2a:36:c3:ee:f0:a6:30:ee:57:
57:47:79:f4:4a:78:d9:7e:19:79:12:43:95:29:7d:df:f9:f3:
9d:4f:eb:10:4e:28:10:7d:5e:61:fe:6d:3b:e5:2c:07:1a:98:
35:b7:18:e8:9a:e0:1a:18:7f:16:5f:19:a9:49:36:18:d2:3a:
c6:58:12:54:e0:67:a6:ce:8d:fd:3f:2c:71:70:f9:6b:ff:16:
a9:03:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:43:41 2026 by rpki-client