Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: slHGdd9qLGFDf8sXpXsw3fcdjwzSG6dIS3Vl7BeHNp4=
Subject key identifier: 5E:A1:53:D3:AC:D1:C3:1E:CE:3D:EC:0A:2D:4B:26:9D:94:1E:93:B6
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019F93C9A9C13925A704EC5D2A718B81315F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 1168
Signing time: Fri 24 Jul 2026 11:01:34 +0000
Manifest this update: Fri 24 Jul 2026 11:01:34 +0000
Manifest next update: Sat 25 Jul 2026 11:01:34 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: n4suZXjO6A0oKIclUrqhMES0HmOKLk6GJTvqHf65x6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:a9:c1:39:25:a7:04:ec:5d:2a:71:8b:81:31:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jul 24 11:01:34 2026 GMT
Not After : Jul 25 11:01:34 2026 GMT
Subject: CN=5ea153d3acd1c31ece3dec0a2d4b269d941e93b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:29:e2:d9:cc:47:73:3b:f4:ee:bd:ab:62:
c4:0f:78:3a:c2:07:fe:6f:b5:80:7c:fc:42:b6:c5:
59:30:f0:56:94:e9:2e:3d:a3:87:23:3f:8a:52:9e:
96:59:63:fd:c0:fa:3d:18:a4:b8:08:cc:c9:31:7e:
29:26:f4:9c:86:ae:7c:63:65:db:ee:e8:cc:18:6c:
bb:80:da:07:17:19:d1:1c:d8:2e:0c:5c:bb:38:86:
88:de:65:bf:d1:e0:05:80:f3:87:a1:8b:9a:59:5c:
d3:1f:f2:bf:4a:05:31:66:2e:45:14:8e:69:ac:56:
ef:c3:eb:49:b2:e4:09:fd:0f:ed:ef:8b:ef:b2:31:
7e:59:70:0c:4f:2c:4b:7e:0f:5d:ab:12:2d:57:d3:
ad:34:81:cd:a2:51:9d:e7:88:02:ff:2c:ea:0d:3a:
3f:12:7a:72:13:db:c5:6d:ba:72:d6:f1:70:e2:8b:
f6:58:0c:86:7d:db:13:ec:36:13:9b:c1:0d:cc:26:
80:68:88:c7:b1:b8:5a:9d:f4:b7:9d:a2:d8:b7:a6:
54:b0:cb:dd:82:c2:33:13:99:e3:50:61:a2:a1:93:
19:33:89:d2:2a:ef:8d:bd:ca:6c:c4:f6:6e:46:0b:
f0:9b:46:cc:c0:07:49:ea:68:6e:a4:bb:9c:88:b1:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:53:D3:AC:D1:C3:1E:CE:3D:EC:0A:2D:4B:26:9D:94:1E:93:B6
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:55:8f:98:a8:32:a0:e5:35:55:98:3c:78:a1:98:73:1a:45:
6c:95:11:85:7a:be:51:85:3b:c1:98:40:9a:e4:ff:a5:71:b9:
56:20:ad:65:66:df:a2:a2:78:28:fb:e9:96:d0:1e:ac:db:9a:
e5:e5:da:c6:d2:c9:57:17:4a:45:8e:d6:90:53:be:58:9e:58:
b4:09:ab:41:93:e4:f3:be:f5:63:00:b0:63:7e:18:a7:22:63:
e4:b5:c3:89:d0:c2:42:7b:67:ed:0e:37:21:24:bb:ee:51:d8:
32:e3:45:f0:a2:83:77:1f:18:50:19:15:db:f1:c2:c0:47:14:
3c:bc:4e:f6:01:ea:e0:48:26:c4:36:70:71:fb:57:03:9c:d8:
84:c3:3d:78:a8:5d:d1:eb:17:7e:35:b5:d5:ee:15:cc:67:9f:
be:40:3a:48:13:be:8c:6a:b7:24:b8:66:d5:9e:67:3c:df:91:
ca:b3:2f:36:10:eb:eb:16:1e:18:fa:83:21:c3:fd:6c:91:b1:
27:e7:4f:e8:97:73:2d:07:ed:97:ae:a8:7e:fa:98:ed:26:e9:
d3:7f:50:6f:cc:66:62:93:15:ee:73:08:76:a8:32:4d:81:43:
af:56:58:3b:3b:ba:49:8b:b2:69:55:5d:c0:29:38:41:ad:e2:
73:18:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:25 2026 by rpki-client