Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: am520evRwTHoS4eFDftZU34Itn0e9oEGooL4DKcU7IM=
Subject key identifier: B2:CB:F3:1A:5E:68:8B:44:1C:82:9D:AC:36:0F:CC:F4:30:AD:E3:A5
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 019D329A5B626DAEF33C66223B6EAD47B6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 0890
Signing time: Sat 28 Mar 2026 04:01:09 +0000
Manifest this update: Sat 28 Mar 2026 04:01:09 +0000
Manifest next update: Sun 29 Mar 2026 04:01:09 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: wtFCMhyRSi6ek4BtILrPvSmE793m3yyp0TBvu9OadGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:5b:62:6d:ae:f3:3c:66:22:3b:6e:ad:47:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Mar 28 04:01:09 2026 GMT
Not After : Mar 29 04:01:09 2026 GMT
Subject: CN=b2cbf31a5e688b441c829dac360fccf430ade3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:3e:e9:fd:73:80:c4:c4:1d:39:bf:00:6e:
ab:bb:56:9f:29:4b:29:22:7f:19:79:37:f0:66:f0:
dc:95:26:8f:d0:9e:76:98:2c:0f:56:0a:17:3b:48:
27:88:5c:c2:28:80:71:1f:27:06:2b:92:f2:c2:50:
6f:8c:9e:82:87:b7:d8:62:b4:c1:0d:ce:09:62:52:
49:13:e0:a6:72:da:e8:c5:9a:32:a3:50:2c:43:8b:
6c:5f:89:2c:f2:97:cf:44:28:1b:a1:7c:25:b5:77:
2c:ba:5a:c0:a3:14:34:ee:ee:10:1c:80:26:1e:7f:
a2:87:03:da:fd:16:da:84:eb:05:29:a3:0f:60:31:
3d:dc:36:eb:3c:87:fe:02:ac:73:3d:d9:71:59:30:
61:7b:05:54:4e:15:34:e7:fa:55:8d:53:95:7f:f7:
9b:37:44:8b:24:39:42:6a:ca:e8:c1:49:86:c0:1c:
5d:44:f6:33:ad:83:6b:4b:f3:88:80:2a:f1:6d:bd:
2c:7d:c3:aa:86:db:dd:70:36:d5:96:65:27:20:e1:
08:4a:a8:a2:e6:47:90:05:9f:3b:aa:fe:ae:53:2a:
9b:79:7d:14:f0:b2:12:7b:4e:f0:31:eb:81:da:bf:
5e:a9:5c:49:4c:de:d8:3c:02:4b:d2:80:da:06:e7:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:F3:1A:5E:68:8B:44:1C:82:9D:AC:36:0F:CC:F4:30:AD:E3:A5
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:71:0c:98:6b:78:73:f2:60:5c:49:e4:19:93:e3:62:c3:39:
f3:d1:84:76:7d:54:72:73:09:ac:5a:8f:1d:2c:e9:6f:b0:c8:
9d:82:db:3c:05:25:e7:dc:46:d6:c1:09:87:f8:00:e4:47:d4:
73:e4:a3:23:6f:79:fe:a0:dd:ac:d6:e6:c8:23:a9:bf:cb:11:
03:80:fd:8c:3e:70:eb:16:87:7a:34:3a:79:19:f9:1c:25:c7:
de:89:4b:82:82:70:27:a3:41:45:e9:4e:f7:0e:5f:6e:ce:97:
29:cc:b0:92:fb:b8:ff:4a:29:88:e0:98:64:19:18:a7:d9:20:
5f:d5:b3:9d:20:83:8a:56:55:74:9a:42:57:dc:04:f0:93:ea:
5a:63:dc:ad:b4:42:30:56:b0:51:4f:31:37:ab:0e:d7:6a:da:
6b:60:8c:f3:c0:7f:5c:04:80:5d:78:a9:18:c9:1e:65:6c:1b:
d9:64:4e:b1:d2:92:c9:a5:5c:92:bc:ca:66:67:af:5e:9b:96:
33:43:5c:4d:e2:1e:56:93:69:17:90:37:ff:8d:98:38:28:09:
8d:3f:f9:fe:a5:e2:1b:74:fb:9e:0b:2a:11:9e:94:b9:90:63:
af:b2:d8:72:a7:98:8b:aa:d1:52:4f:12:31:46:43:fa:3f:29:
b4:b4:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:06 2026 by rpki-client