Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: Xr+J30mlW/uScPhhhyWEb7x1hY8T/4AzLTAXkTD3l6M=
Subject key identifier: 23:E4:DE:95:9B:C1:08:9C:83:BD:3B:89:43:54:1E:69:3C:D5:B2:06
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 019F9248EE50E240D8495DB21580C0E04DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 14DC
Signing time: Fri 24 Jul 2026 04:01:20 +0000
Manifest this update: Fri 24 Jul 2026 04:01:20 +0000
Manifest next update: Sat 25 Jul 2026 04:01:20 +0000
Files and hashes: 1: KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa (hash: hgvJkxvKTNR1g+ybNwe4M29US6Kg0T9+/9USB1UVBJc=)
2: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: 3vsqRzkZjVvJXUTANV9ykAQSftPwt4+xRAsRRjgULaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ee:50:e2:40:d8:49:5d:b2:15:80:c0:e0:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Jul 24 04:01:20 2026 GMT
Not After : Jul 25 04:01:20 2026 GMT
Subject: CN=23e4de959bc1089c83bd3b8943541e693cd5b206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:d2:ce:aa:80:ae:7d:cc:aa:fa:27:36:f0:
8a:90:62:1c:29:ff:64:0f:cd:36:28:32:8a:72:ea:
88:29:d9:61:6a:25:2c:25:e9:1a:e4:f2:d4:b7:9d:
a1:7d:d0:66:1c:5a:4b:1b:5f:8e:50:b4:dc:08:c0:
ed:06:22:e3:1c:34:76:26:7c:ca:01:f8:71:01:4c:
20:0c:2e:40:22:ad:67:10:e7:a2:45:69:ea:98:8e:
fa:9d:c6:f9:53:c4:bc:d6:5c:35:5a:21:f0:df:c2:
30:4b:75:a5:29:64:51:c6:6f:b5:7e:59:49:9f:d5:
41:a8:17:04:60:3b:29:29:1e:f2:59:9f:22:e9:b5:
0a:ab:92:50:c9:2a:16:39:a7:b6:a6:4c:61:19:79:
18:57:e7:8d:1d:5b:1b:58:af:64:f7:38:fb:aa:0f:
ff:28:6b:52:5b:7e:b4:82:9f:18:92:1b:9e:0d:88:
86:9d:75:63:b8:22:f5:d3:72:44:6a:b9:fd:13:e4:
69:aa:e2:f0:27:f2:33:12:8b:b4:56:0e:89:77:dc:
44:65:9c:29:16:18:ce:0c:6a:b5:85:f6:d8:0c:9f:
a7:33:24:d5:ee:fe:51:08:3a:45:ab:48:ab:4e:35:
2c:6f:73:47:67:de:5e:a0:18:14:43:87:75:a0:e8:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:DE:95:9B:C1:08:9C:83:BD:3B:89:43:54:1E:69:3C:D5:B2:06
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:55:71:70:6e:28:a9:27:b8:a3:11:27:68:86:72:ec:38:a9:
39:83:3a:b0:5f:d6:ef:4d:e1:7a:0b:46:a1:c1:5a:cc:20:48:
0b:08:d3:56:f9:dd:59:2d:2e:ac:47:35:d0:a7:11:88:86:a4:
73:19:84:06:8a:1f:97:c9:77:b1:14:72:72:ae:81:3e:1e:ea:
ec:4a:a3:5c:4c:67:ec:8e:e2:72:59:84:33:48:01:57:0d:88:
7d:cf:9d:52:16:f0:02:8d:d9:00:2a:6e:3c:d3:30:cc:0b:38:
d4:12:0e:7b:11:15:0a:aa:0e:87:7d:24:05:c5:b2:1a:46:aa:
8c:37:49:ef:00:d5:69:ac:b8:1e:e6:32:56:b6:fa:1e:fb:34:
f2:2e:df:22:78:45:b5:ad:d6:ed:2c:26:23:3d:33:bd:3c:93:
c3:1c:ea:11:b9:18:e2:00:1f:cb:67:f0:6d:ff:f2:eb:1d:35:
a5:e2:9e:e9:59:83:eb:c5:52:c7:3c:1c:da:88:2a:05:db:f4:
d4:ba:cf:57:60:79:be:05:0b:35:07:5a:b9:89:95:2f:af:d7:
f9:f3:24:12:5d:89:c2:05:18:8f:f2:6b:47:04:4c:21:a7:7b:
71:a8:28:ff:e5:0a:55:0f:b8:26:7e:3f:02:a0:3c:a1:15:3b:
67:a7:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:09 2026 by rpki-client