Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File: jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier: KWfk+WGI4xM8QD2Pi6Q4QPBDaUFU2HpJNzeBO3DZYlY=
Subject key identifier: 19:7C:7D:65:41:CE:5D:0D:8B:08:1A:18:CA:7C:21:CA:85:5F:66:27
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 019D28842ED70887B6C983BB4D4BB4E68387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number: 0C28
Signing time: Thu 26 Mar 2026 05:00:44 +0000
Manifest this update: Thu 26 Mar 2026 05:00:44 +0000
Manifest next update: Fri 27 Mar 2026 05:00:44 +0000
Files and hashes: 1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: XHN1E8WSAQPGC8ANv8RrstfsoFBu5BpFSdXGYsqW00A=)
2: w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa (hash: LNZ6lyl5sjWLQK11LqKZIO+Pewy+8JnS92wQrFux3FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2e:d7:08:87:b6:c9:83:bb:4d:4b:b4:e6:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Mar 26 05:00:44 2026 GMT
Not After : Mar 27 05:00:44 2026 GMT
Subject: CN=197c7d6541ce5d0d8b081a18ca7c21ca855f6627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:88:69:b0:cd:92:03:b5:99:d2:bc:70:28:
8b:8a:3b:c4:1e:15:1e:ec:52:a9:4b:48:5c:2c:16:
50:5c:87:97:84:20:f5:b8:df:8b:18:fa:b3:1c:ac:
f1:78:a2:56:41:7c:1e:d0:d1:af:c5:84:59:f7:b8:
52:39:cb:4b:f3:15:7c:48:21:f5:ab:8c:be:47:15:
01:92:62:f0:23:e5:56:5e:56:92:ae:6c:c7:82:87:
3e:08:3f:4e:b4:96:1f:b9:02:c1:b7:27:59:a2:a8:
fa:63:77:e7:3b:56:ff:bf:2d:49:b1:72:23:58:cf:
18:12:50:93:0e:6a:fc:ac:ea:64:35:f3:d4:aa:6c:
98:4d:7d:aa:0d:1c:49:1e:59:3c:ef:55:35:2c:65:
78:06:b6:a1:f4:ec:ee:d7:1e:69:5e:3c:25:bb:8e:
ce:bd:00:5b:bf:05:3b:81:b0:2d:98:36:14:cb:60:
cf:fa:29:95:d2:84:1e:54:62:84:17:87:a2:b8:e5:
0c:d6:dc:b5:5c:f0:97:6e:b8:68:78:15:94:08:06:
90:bb:6a:ec:55:85:75:c5:bf:a2:04:12:70:a5:e1:
a3:a1:e0:ea:58:84:82:70:1b:b7:58:4b:63:0a:6b:
b0:94:77:5c:2d:17:46:91:6a:70:ff:ea:99:54:fc:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:7D:65:41:CE:5D:0D:8B:08:1A:18:CA:7C:21:CA:85:5F:66:27
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0a:5d:19:e3:b9:f4:91:4b:4b:83:83:2e:02:af:a1:a5:cd:
5f:4b:81:a3:66:1c:1b:0d:60:10:64:3f:06:bd:a3:d5:a9:e6:
d6:d0:bd:83:34:4b:26:da:ec:70:03:62:76:32:f6:84:2b:bf:
4e:e9:74:31:d2:fe:0c:05:60:9c:2c:b1:f7:30:7b:71:aa:b5:
26:e3:b6:d1:1c:f4:28:fd:bc:b3:90:08:28:af:b5:51:1f:18:
57:03:8b:0a:1b:33:76:c1:b9:c9:75:6d:62:39:ca:6e:cd:30:
22:02:2e:5c:66:88:81:17:74:95:3a:e8:d3:07:e7:17:61:95:
a8:00:7b:9d:90:d2:1a:17:db:2b:52:86:af:93:78:d4:7c:b4:
0c:d7:8c:35:d5:f5:d2:c8:85:0e:97:12:e8:94:fd:3c:9c:3a:
13:ac:e0:6d:0a:a4:86:30:be:f8:bc:8a:e0:f9:17:ac:1a:e1:
38:9e:9f:57:52:0f:d4:c5:df:8b:2c:30:16:ab:8c:4f:97:d3:
22:9f:0c:82:ee:05:19:a9:37:82:1f:91:cd:eb:43:d1:16:0a:
e2:f3:c5:65:63:08:43:c2:f2:d6:fa:a2:57:ca:8a:ed:03:3b:
bd:58:d9:61:e1:73:0e:c0:cd:47:ca:52:7b:74:a5:8f:69:99:
ee:78:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:54 2026 by rpki-client