Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: +7bep5uirgx9RxNPXQo3bJ/z/WQO4X3puTVZaP7CKuY=
Subject key identifier: FF:DD:0A:44:D9:08:54:69:00:DF:28:F1:DE:7F:AC:45:86:E0:CE:7F
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019D27E06E5C34C37F1AA4038883BAB1EA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 1027
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: nEkB4KUmW7LdJIg8wYPPp2dh1HOWizkRVYWdYz99fWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6e:5c:34:c3:7f:1a:a4:03:88:83:ba:b1:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=ffdd0a44d908546900df28f1de7fac4586e0ce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:ee:20:43:49:30:f7:91:e6:20:99:ce:08:
0b:a5:d0:f2:e7:b9:df:96:ef:6b:d0:d9:0e:5b:c8:
85:5e:d5:5f:21:66:98:6e:36:42:f9:03:f4:62:e8:
fd:02:a2:4f:3e:de:e6:b8:d9:e0:89:85:4c:c3:1a:
e7:c6:e9:c7:9d:6a:69:25:74:f4:f3:30:d6:39:b5:
2b:09:d7:7e:19:cf:6a:2f:b3:55:fe:d9:ac:8e:b2:
d8:78:a7:4e:61:7a:df:a8:e9:55:20:32:de:b2:05:
e5:1c:66:e5:cb:b8:9d:b6:38:81:9e:2b:25:d5:21:
7b:0c:b1:e9:a0:96:63:dc:b3:13:b0:a1:63:96:fd:
69:d6:dc:b7:10:40:ad:ca:d9:dd:20:bf:ef:7b:51:
6b:b4:16:46:d3:c2:cc:a2:e4:24:7d:cb:bd:e0:3e:
85:49:b5:17:78:14:9f:72:12:24:a7:8f:03:14:15:
09:08:e5:22:91:55:a9:0f:a7:ef:61:2f:ba:41:fe:
45:8d:5c:cc:6d:08:99:fb:4b:8c:37:1f:8b:58:1d:
a9:dc:82:bb:a4:f4:a8:53:12:40:1c:6e:fb:11:17:
96:99:e0:c4:99:9d:65:f2:de:5f:c7:8b:ee:2e:2f:
a1:f2:de:49:f5:df:07:a0:ca:81:2c:11:ca:ca:c0:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:0A:44:D9:08:54:69:00:DF:28:F1:DE:7F:AC:45:86:E0:CE:7F
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:df:41:f3:8d:2f:76:e2:65:b2:09:c6:a3:4c:4d:c0:98:41:
da:52:e8:02:31:66:af:8e:a3:54:7e:ed:fa:84:29:ef:09:0a:
a8:b1:2e:dd:f0:43:4a:08:b2:e5:a5:71:7a:65:03:a6:2d:d9:
50:e4:85:cc:2b:99:69:e4:8b:b6:1a:92:df:4b:3b:c8:b3:2c:
f4:d9:38:02:52:50:f1:07:14:0f:5e:26:85:f8:15:af:98:1d:
2b:53:be:16:65:b9:18:43:d4:ba:9a:03:e0:15:7d:81:6d:2e:
b3:43:24:04:fb:4c:a7:3d:f0:20:75:fc:26:50:31:77:7a:68:
02:b7:aa:2f:b4:84:80:01:10:9e:96:ad:d2:38:0c:17:0b:a7:
40:ef:aa:6a:10:0e:40:04:fa:42:b3:b0:c9:cb:ea:68:ee:ac:
b5:20:52:fc:0b:1c:7a:2f:9b:0a:67:bb:93:24:03:f6:da:62:
90:bf:e5:0e:bc:88:b5:cc:c1:40:5a:9e:97:ce:31:87:82:69:
8c:4a:32:68:b4:ec:9b:63:f3:de:74:73:42:2e:c2:3d:2d:e0:
55:51:ae:9b:54:ad:40:5f:24:c0:f4:2b:d0:14:a0:3f:df:d5:
97:84:50:3e:db:2e:1f:bf:f3:5b:cf:42:8b:72:71:9a:6e:63:
c6:6e:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:37 2026 by rpki-client