Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: 3YAAYskcVQPFam8//VXVTNHUEIFCFASe/UmwcQZ/FaM=
Subject key identifier: 1E:16:AA:38:F1:63:1C:33:56:22:58:B1:BB:0A:00:20:63:7B:A8:B0
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 01A0DC178F9DA76BF937327B2CA092269FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 1212
Signing time: Sat 26 Sep 2026 05:02:06 +0000
Manifest this update: Sat 26 Sep 2026 05:02:06 +0000
Manifest next update: Sun 27 Sep 2026 05:02:06 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: a/PO3TClnf6lkXSQFOxsVGqVMgoFdeD0PyixhdwG0qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:8f:9d:a7:6b:f9:37:32:7b:2c:a0:92:26:9f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Sep 26 05:02:06 2026 GMT
Not After : Sep 27 05:02:06 2026 GMT
Subject: CN=1e16aa38f1631c33562258b1bb0a0020637ba8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:40:80:06:8c:e3:03:91:03:d1:0c:0f:dc:
5d:f7:10:5b:c1:06:55:74:c4:e6:7e:f9:4a:bf:e7:
63:e6:b5:e7:cc:22:5a:ef:93:49:de:15:0c:b4:92:
8a:ef:7e:d7:77:d3:ef:6c:9d:73:66:65:5d:a0:16:
3d:90:41:29:64:62:c2:6c:14:33:6e:a2:d2:59:6e:
82:c1:85:23:74:c1:8d:9a:e7:5a:32:f4:df:49:bd:
b8:39:d0:14:64:28:6a:b8:f7:70:f5:1b:4c:9f:a1:
c8:f4:ba:92:70:06:ca:a5:e3:f2:54:c5:66:a2:61:
a6:84:7c:13:8b:c2:98:6c:4e:04:11:e0:f3:df:41:
48:87:78:bc:f0:da:6a:d2:a5:b5:26:fa:65:6f:ca:
ae:33:d7:0d:b7:d6:04:d6:11:aa:df:0e:ce:bd:bf:
bc:9e:bc:6b:cd:45:b9:9a:40:79:eb:0a:20:7d:1b:
dc:de:97:57:4a:4b:7a:e5:38:d4:d2:94:82:87:44:
e7:bb:59:1b:e2:e0:8b:ec:3d:e2:bb:9d:0d:7f:28:
27:93:4d:76:04:56:45:bd:e0:de:f8:fb:fa:e8:44:
4e:4d:d4:53:62:6e:63:0e:c2:d9:0c:42:1c:01:4a:
50:f2:08:da:a4:93:29:34:bd:c9:f6:d9:78:4f:9c:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:AA:38:F1:63:1C:33:56:22:58:B1:BB:0A:00:20:63:7B:A8:B0
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:41:84:0a:68:99:ab:48:0b:0a:68:a6:f2:db:79:6b:9b:6c:
d8:ad:90:21:c6:a0:fa:3b:81:a2:90:ce:20:43:48:38:df:9b:
6b:ec:84:c1:7c:f4:0e:15:c8:fa:8e:62:f0:3e:a9:47:9e:5f:
39:33:15:6e:e4:05:17:da:b2:c8:28:0d:21:e5:f4:57:6b:ee:
7b:7e:8c:60:e9:f7:cd:a2:34:94:9f:48:8e:cd:22:70:c6:7c:
28:ad:1a:b2:fb:4c:28:f7:4a:8f:11:9d:a2:4d:8f:21:b6:d5:
90:29:1c:5e:f3:5c:3c:54:86:6f:66:b2:a8:10:49:0c:d0:00:
79:ae:d0:bc:d2:42:f5:c8:d7:9c:d6:26:e6:1d:f3:72:e3:64:
34:30:2a:18:24:56:1c:dc:03:0b:e2:95:99:a3:77:3e:a5:f2:
ef:a5:ed:a0:57:43:95:8a:36:2a:d8:87:03:b1:68:c8:a1:26:
63:83:04:7a:32:d4:37:97:11:e9:d7:d7:95:3e:8c:51:f3:c1:
a5:98:d1:b3:5f:80:a8:4c:c5:dc:2b:0d:b3:89:4f:bc:74:e5:
8b:72:46:76:c4:d3:44:23:93:5a:d3:06:2b:00:47:34:ae:9f:
65:13:ed:02:cb:fb:54:70:6b:b2:80:66:45:ae:19:2c:4a:f9:
c8:9d:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:00:33 2026 by rpki-client