Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: Py3G/eSsPmdDC4zDxx5QwbvdNCm8ZNorAonGeqoiSCE=
Subject key identifier: F2:4F:92:16:E4:2A:66:73:11:93:70:24:6D:7C:75:2C:A8:2E:F4:A6
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 019E1D9058EBFD5BF039F584F495E9B99F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 141B
Signing time: Tue 12 May 2026 19:00:59 +0000
Manifest this update: Tue 12 May 2026 19:00:59 +0000
Manifest next update: Wed 13 May 2026 19:00:59 +0000
Files and hashes: 1: KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa (hash: hgvJkxvKTNR1g+ybNwe4M29US6Kg0T9+/9USB1UVBJc=)
2: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: rtDUVnLBn1f2UAOg30U6EY/Eg39+UykuNWLF+UPg6m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:58:eb:fd:5b:f0:39:f5:84:f4:95:e9:b9:9f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: May 12 19:00:59 2026 GMT
Not After : May 13 19:00:59 2026 GMT
Subject: CN=f24f9216e42a6673119370246d7c752ca82ef4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:68:82:4f:c7:a7:9f:e5:89:ce:c5:1f:82:
4e:1d:f1:b0:81:df:83:29:04:d1:6f:13:b6:97:5f:
79:3c:25:ab:a6:a3:78:6f:9d:5e:db:de:b5:81:9d:
ce:9c:db:9f:c9:fc:bc:d4:cf:b2:4b:24:40:7e:e0:
78:f0:65:9a:6c:68:cb:c8:44:3c:e8:6f:76:f0:5e:
f0:06:bf:ef:7e:09:23:e0:cf:bb:9f:50:d8:30:8a:
c3:1a:ef:aa:6b:f9:9f:b7:c0:ce:d3:97:67:53:ef:
41:f1:82:c3:93:62:b5:ea:3b:f5:3e:52:0e:5d:36:
87:ce:5c:d2:d1:1c:f1:fc:09:2d:35:5c:cc:3b:9c:
e1:07:9c:86:10:50:11:d2:86:ed:10:e7:20:78:e7:
8a:72:34:11:2f:f3:7e:02:38:a8:c6:4a:e7:62:1c:
0c:08:33:d9:24:19:1b:95:6a:1e:d3:5d:dc:66:7d:
0c:48:c4:a2:93:3b:72:c0:30:73:0c:c1:e2:7f:63:
a0:ba:dc:f6:2f:f4:d6:89:17:14:df:ab:2e:38:31:
39:03:25:ab:fb:81:83:cd:6a:fa:19:b2:4f:f1:8d:
77:cb:d5:23:14:b7:e9:51:ce:f5:35:5f:83:e5:8a:
9f:8e:5a:27:59:ab:95:3f:60:1e:eb:ba:d5:c5:a5:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4F:92:16:E4:2A:66:73:11:93:70:24:6D:7C:75:2C:A8:2E:F4:A6
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a6:e9:a1:e7:91:28:7a:d6:1a:3c:c6:f6:ae:45:f9:2b:82:
a5:17:27:63:4f:4b:19:28:36:72:ef:f5:9c:88:f5:6f:29:55:
d1:6d:da:da:20:ac:a8:7a:27:a3:6f:2a:f6:25:42:3b:0c:c5:
02:7b:7a:f1:55:7a:57:fe:b9:93:f6:ff:41:09:3d:6a:e2:28:
22:23:46:f7:d1:b3:01:9f:57:b4:d7:83:26:23:61:a9:29:e6:
73:31:8c:cc:7f:63:cd:45:2e:2e:6b:e8:f5:e7:90:be:37:29:
44:03:54:8e:65:3d:94:bc:4f:68:4b:b9:b8:77:62:4f:97:dc:
c1:0d:b3:5f:84:e4:81:29:de:c8:eb:3c:93:c4:bd:7f:ae:81:
9a:b0:62:c9:b5:9d:73:5e:92:98:f6:20:d2:08:d6:8a:5d:4d:
ab:d4:eb:97:78:40:aa:e6:7d:ac:55:6d:76:a3:a6:29:ea:fe:
2a:83:83:33:7d:bd:16:2b:02:97:22:46:28:83:41:4d:41:a8:
75:ec:51:ad:e0:e6:dc:37:33:18:b2:65:ae:b6:5d:07:ef:d2:
19:52:7e:8f:8f:a7:42:b8:41:f7:fb:07:46:13:b6:1e:c6:18:
82:c4:4b:72:d5:6f:c0:1f:80:bf:68:ec:78:86:2f:63:58:92:
9d:e0:dc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:31 2026 by rpki-client