Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: VzkzGE+vCL/8UsekxMYlemtMiZYgRHsFVSycuEQDv58=
Subject key identifier: 97:FA:F0:29:A7:5E:1B:C1:9D:DA:A3:86:F2:D1:68:22:DC:88:9A:2C
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 019D270481973EE64B8F0B9D241C3DC73027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 117F
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: VFxVUnWs3y36Qz6iMw2JiFUJMKmKzQi2iCmOY30fUss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:81:97:3e:e6:4b:8f:0b:9d:24:1c:3d:c7:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=97faf029a75e1bc19ddaa386f2d16822dc889a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:c8:ae:82:6f:2b:2c:4e:eb:0f:17:33:79:
6a:76:c6:dd:1a:ae:d7:39:10:d8:5b:6c:06:9c:e6:
3c:7b:41:00:67:e4:fa:a0:48:d1:c5:af:64:89:59:
03:e0:3a:49:b2:13:65:16:43:76:fe:f4:33:42:19:
04:3d:2c:24:23:52:db:65:47:bd:f4:00:96:90:46:
2a:21:c5:40:f9:fd:dc:40:0d:6d:c2:d1:8b:4e:25:
94:ec:7b:a6:a1:23:50:f5:19:10:9c:ba:f2:07:fe:
15:8e:ed:bb:fb:92:ac:f3:bf:60:cb:a5:bb:d6:3e:
bc:39:02:f3:df:8c:3b:8a:57:2b:c7:bd:4c:38:07:
5c:dc:0d:f0:55:9a:86:de:a6:5a:e8:7c:57:44:68:
89:ec:48:c3:31:44:9d:a1:fb:e2:b2:14:11:0b:a4:
08:7f:b8:1a:03:84:2e:eb:b7:06:80:45:25:8f:50:
e2:b8:08:a4:b2:c1:78:d6:8f:b7:62:4c:cb:6b:74:
11:c0:d9:ca:9d:7f:0b:0e:3c:db:20:93:5c:25:80:
9b:29:ec:47:a3:e8:1f:19:7e:f9:3c:2f:2f:15:89:
82:7a:2c:63:04:c7:d4:47:18:e8:34:e9:0a:be:ca:
ac:2b:2f:5e:4a:68:2a:15:2b:15:70:23:2c:f2:38:
5a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FA:F0:29:A7:5E:1B:C1:9D:DA:A3:86:F2:D1:68:22:DC:88:9A:2C
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:17:b7:d0:15:9b:87:90:4c:90:68:4e:06:fc:b4:ae:0b:49:
9c:3d:5e:41:c2:01:58:c2:43:c9:e0:f9:1b:4a:09:2d:48:48:
83:e2:39:86:be:34:5f:ef:23:3e:55:e1:f6:26:16:b7:92:e9:
0b:7e:01:d2:eb:d7:cc:da:d7:52:96:a8:04:35:77:f8:36:1a:
48:51:7a:a0:8c:ed:a4:ad:44:cf:e5:b1:68:3c:dd:4a:5c:5c:
3c:55:86:9e:19:e0:fc:de:eb:e6:b6:f3:9c:3a:86:de:a7:76:
26:d2:03:c6:8b:0a:5f:5a:fa:4e:e3:2a:75:68:57:03:68:60:
2c:78:e6:4d:4f:de:36:a3:f5:ed:a2:c2:81:42:50:02:a2:cb:
6c:d5:7b:9e:c6:f9:a5:f2:99:55:a3:74:75:d0:d8:87:f5:74:
47:6c:6b:04:33:6a:db:a4:fd:52:05:9a:76:ee:af:b8:3a:92:
c6:50:b8:c0:55:af:4c:eb:73:c2:01:83:79:97:a2:ef:55:4c:
48:dc:bc:28:66:c0:13:ae:b2:97:86:e6:fe:88:2c:6d:bb:a6:
e1:6b:f8:26:92:d0:3e:7d:fa:42:d6:6c:1a:58:6c:bf:6e:7a:
1b:b3:61:07:0e:7b:3d:3d:ec:9d:69:bb:59:ae:df:92:eb:39:
88:6b:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:44 2026 by rpki-client