Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier: lwjN9vNYjcZLRDc1Y6PBS9zEeiMxH0UjogkDKRo5EhQ=
Subject key identifier: 52:85:59:93:39:0C:A3:53:94:9C:B4:96:3F:B7:0E:8E:A9:1A:38:7C
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 019D2A7249D3C10F08CAABD2B90D0592741B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number: 185F
Signing time: Thu 26 Mar 2026 14:00:26 +0000
Manifest this update: Thu 26 Mar 2026 14:00:26 +0000
Manifest next update: Fri 27 Mar 2026 14:00:26 +0000
Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: TvCw9ViYRkSe8ndJickjNevFNMwUSu055wQHcS5x7sA=)
2: irId0COEYw7aKHAO1_EyLrYXpp0.roa (hash: 7+faGUD7LHnG4arr/clo8qL3um8HyyqboWUjaQQkIWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:49:d3:c1:0f:08:ca:ab:d2:b9:0d:05:92:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Mar 26 14:00:26 2026 GMT
Not After : Mar 27 14:00:26 2026 GMT
Subject: CN=52855993390ca353949cb4963fb70e8ea91a387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:0e:a8:82:94:4f:de:4c:d0:e0:b7:9b:f8:
d5:3e:9a:5e:02:ec:c1:6a:67:22:bf:e7:72:8b:dc:
82:f0:93:b9:ce:19:b3:51:1c:85:e3:7f:ff:b9:dc:
a1:74:35:96:47:cf:d6:31:aa:45:f3:5f:83:2e:3c:
56:ea:f7:bb:7f:94:1a:94:19:de:fc:d3:7b:64:f5:
c4:eb:81:e4:d5:fb:0a:39:62:51:90:ec:4d:cc:4a:
38:6a:cf:b0:d7:91:61:1d:0f:1b:ad:d6:6a:e7:1a:
2f:ae:97:d8:21:91:12:a3:0e:d5:61:40:d5:b6:83:
06:0d:d6:89:e2:48:fd:4d:05:c2:dc:be:88:9f:35:
22:02:41:81:2d:80:e8:dc:f6:49:c7:08:b7:ec:d4:
dc:f6:c0:c1:18:c9:10:8c:f9:96:fe:f5:91:e7:0e:
42:9b:40:76:99:25:ae:91:04:79:13:34:ad:b6:6b:
5f:3c:12:00:04:a1:a6:4c:92:e7:b1:60:98:25:80:
7c:bb:67:07:b9:54:16:0c:80:88:33:9a:82:c8:57:
e0:35:47:cf:08:3c:fb:61:3a:99:84:b0:70:9d:79:
c2:d8:96:92:53:8c:41:e3:dd:8e:6f:74:5b:60:ef:
d7:d9:7a:89:31:cc:98:a4:3c:09:91:65:f9:a2:32:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:59:93:39:0C:A3:53:94:9C:B4:96:3F:B7:0E:8E:A9:1A:38:7C
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bd:5d:f7:00:1a:16:d7:a4:7a:62:49:93:af:5c:4b:ae:a8:
db:0a:e3:83:32:03:a1:0e:3b:53:98:2e:aa:c7:ff:20:fd:08:
f4:74:bc:d7:21:3a:78:51:de:0f:c5:bb:54:85:a1:b3:15:8d:
cc:f2:de:48:e6:23:0e:cb:a2:77:9b:29:66:24:95:2f:d8:a5:
45:ca:f8:be:e8:94:ac:65:d3:cd:9e:1d:97:d9:4a:5d:78:f5:
f9:0a:24:51:07:d2:7d:f7:77:e7:b9:4d:b1:f6:de:9c:7a:bc:
9d:be:dd:40:00:f5:80:ba:b5:23:78:c8:56:06:ab:31:ea:99:
fc:0d:2a:50:af:68:ab:66:6c:76:ff:74:cd:24:1f:97:63:83:
b1:1e:eb:f3:bf:9e:ab:56:02:4c:8a:35:3d:f9:04:c0:68:8f:
e1:8e:f0:58:cd:df:3e:6e:f8:0d:97:82:ba:d7:0f:74:93:24:
67:2b:54:3e:f7:c4:6d:13:a2:cd:c6:8a:63:62:0a:de:43:dc:
c3:59:ef:2d:d8:4c:0a:3c:9e:a7:5a:be:49:71:09:e4:b2:64:
a4:0c:9a:09:29:af:3e:1b:9e:d8:c1:87:4d:f6:28:16:99:07:
60:5e:02:de:69:94:df:b6:3f:3b:1c:27:92:77:f0:31:47:eb:
ab:75:20:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:46 2026 by rpki-client