Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: xjQK7Pt8C0tD5s4bb92ohn5YSpLaViwCq6MeUXwqWFg=
Subject key identifier: 74:8E:0D:58:13:AB:F5:49:B1:22:B5:EE:44:DB:D0:91:AE:66:05:DA
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019D2961100800F8486811753CB7ABC0A7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 0996
Signing time: Thu 26 Mar 2026 09:02:00 +0000
Manifest this update: Thu 26 Mar 2026 09:02:00 +0000
Manifest next update: Fri 27 Mar 2026 09:02:00 +0000
Files and hashes: 1: PFLWqZXEhGSjSe27HXXBR4MJTJc.roa (hash: EgW8y7jSNiN5c+nvOeQLbNW7t5xsejb8y+r01vtFLbM=)
2: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: VhfBmqmvQ1S01hCh+MEyhWYEq2b2qVF4wopCl7aa3PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:10:08:00:f8:48:68:11:75:3c:b7:ab:c0:a7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Mar 26 09:02:00 2026 GMT
Not After : Mar 27 09:02:00 2026 GMT
Subject: CN=748e0d5813abf549b122b5ee44dbd091ae6605da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:73:08:47:77:90:27:db:52:17:01:ab:7d:
4d:1c:9e:71:18:ed:48:4b:89:e8:5c:33:be:e7:fb:
d5:be:d0:5e:29:4b:c2:f5:35:2d:16:c6:58:f8:f6:
6c:f1:f5:00:43:16:58:05:51:be:4c:c2:f5:da:71:
9d:76:ad:f3:76:f9:b8:38:f3:58:13:e1:5f:3d:2e:
e4:43:0b:6f:87:da:90:5b:59:2f:b3:21:54:81:fd:
0f:05:28:1a:2f:fe:5f:e8:b6:d2:63:da:00:32:f1:
9e:a9:f6:32:74:67:de:ff:0e:f0:d8:49:5a:8a:26:
34:90:a2:01:9c:67:23:28:06:cc:85:c8:6d:cf:a7:
ac:1d:dc:8b:1d:ab:6f:1e:37:1f:61:18:ff:78:95:
d8:4e:b0:13:f9:b0:4a:11:1c:d3:73:92:56:a2:e6:
a2:23:6f:54:7e:0e:65:80:16:6f:dc:ea:d1:97:4d:
cc:73:88:d5:88:b1:24:0c:b1:e2:3a:ca:eb:36:37:
67:47:a2:c5:21:72:ab:86:89:07:81:8c:66:02:46:
f2:f1:f6:1b:26:aa:ea:51:c9:15:ad:17:fb:e5:9f:
bd:13:07:c6:a0:ab:2e:9f:6a:c8:3b:26:ec:37:a5:
6d:cc:0f:f5:50:5b:00:ff:c5:6f:12:4e:7e:bb:3c:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:0D:58:13:AB:F5:49:B1:22:B5:EE:44:DB:D0:91:AE:66:05:DA
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8b:35:05:08:da:6a:16:f6:f4:7d:cc:8b:79:95:7a:9c:f1:
72:fe:a2:0d:d9:a4:c3:cf:57:66:05:80:eb:8f:72:65:05:ee:
80:88:04:89:69:72:7a:f7:43:0f:ba:42:8f:bd:52:ab:b0:80:
13:af:8c:ec:93:58:77:d0:b1:59:d5:b6:c0:01:ae:56:4c:9e:
a8:bf:cd:8c:71:f6:cb:cf:c2:e9:a9:65:19:32:ea:25:96:ec:
aa:a6:86:22:50:5a:a0:0e:d4:bd:ea:f4:27:8a:7d:54:f5:38:
08:56:c3:b2:96:ed:f8:df:68:69:30:13:69:11:ba:be:eb:93:
fc:b4:e2:28:30:4a:58:c6:90:d1:fb:2a:be:40:ea:82:1e:f6:
c6:ac:5d:41:46:58:36:65:06:52:78:07:5d:7d:e0:01:a0:b2:
99:24:3e:16:bb:3e:5b:1a:6f:8a:9c:ce:3d:70:a9:d2:0c:6b:
6c:c9:c4:09:43:bb:7a:f1:27:66:92:f4:55:6e:06:49:79:ed:
aa:89:8c:5a:d9:71:cc:c4:fc:ea:27:26:ae:84:b3:9b:7a:66:
8e:31:6e:1a:8d:4d:5a:86:08:5a:02:eb:d7:58:99:32:89:e2:
e2:5b:3c:65:9b:b7:71:a3:10:a4:2a:ca:af:c4:ff:e3:9f:9f:
4a:ff:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:51 2026 by rpki-client