Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: oiuUcGIwa9t9Q4chCyBVnYmYPCr9TwnEKJsoQeCXmi0=
Subject key identifier: A5:88:0D:AD:4A:23:24:17:96:C7:71:C4:04:AA:96:36:67:38:7A:E4
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 01A0DFF3DC80884E12E01B424675D00F0238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1850
Signing time: Sat 26 Sep 2026 23:01:35 +0000
Manifest this update: Sat 26 Sep 2026 23:01:35 +0000
Manifest next update: Sun 27 Sep 2026 23:01:35 +0000
Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: RZDmwtc1XAkq4d76y7VBTa52LmIuleksUyOgBKqpVfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:dc:80:88:4e:12:e0:1b:42:46:75:d0:0f:02:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Sep 26 23:01:35 2026 GMT
Not After : Sep 27 23:01:35 2026 GMT
Subject: CN=a5880dad4a23241796c771c404aa963667387ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:a7:1c:dc:d2:7a:12:0a:1a:96:e4:86:00:
9e:7c:2c:ed:c0:60:d8:37:71:e3:65:b1:62:99:92:
0e:c9:30:74:84:eb:02:b6:44:98:a5:86:5c:bf:9d:
52:22:62:29:c4:2d:f0:7d:01:b8:0c:8a:d1:b4:0a:
2b:68:99:b5:5d:79:fb:7e:c0:88:2b:97:f3:8c:a3:
e2:cc:4b:99:d5:aa:3b:2d:17:cd:63:e4:f3:b9:fc:
cc:aa:a0:aa:f6:bf:7d:4e:df:90:92:25:c3:77:45:
5a:c7:c4:23:2d:13:ce:f7:23:15:c8:92:20:28:c9:
21:58:32:5e:f2:06:7c:14:2b:4c:93:2a:e4:6d:a6:
bf:e3:c2:f8:f3:b6:9f:a0:10:27:1a:a6:59:c0:31:
36:df:2b:9b:1e:42:2e:8e:c4:c3:f5:8b:0c:a6:22:
14:17:9f:b1:7c:29:b5:d0:0e:1d:b3:79:d2:1f:c4:
9a:27:d4:b8:7b:d0:ab:ff:1d:81:ea:9e:39:b6:a0:
c7:e0:c3:61:2c:dd:73:85:a1:55:8f:9c:8b:b9:9f:
dd:be:52:8a:64:91:87:af:1f:c5:d9:08:86:c4:54:
5a:8e:8b:e1:ee:ca:22:48:88:dc:be:04:47:fb:3e:
c4:68:61:14:13:eb:fe:84:d3:71:0a:08:a8:e2:fc:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:0D:AD:4A:23:24:17:96:C7:71:C4:04:AA:96:36:67:38:7A:E4
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:cf:bc:da:15:57:17:5f:64:06:69:c5:71:f2:e6:17:93:
67:72:53:bc:06:2d:40:a2:e4:f9:61:40:5c:1c:74:24:0d:87:
93:db:39:9d:84:13:12:33:99:b2:21:66:d8:ed:9a:47:fb:ef:
02:50:d8:9c:4a:4e:a7:a4:82:d9:68:95:0e:e4:92:58:e3:e7:
a4:7a:8f:a8:07:4e:25:5f:29:46:5b:f8:88:a4:2e:82:bc:0b:
9a:d3:59:d6:52:23:b3:65:49:f7:3c:76:5f:52:0e:bd:4d:7a:
bb:48:6a:ef:ca:e5:21:b7:64:5e:42:96:6e:6b:e3:04:7a:96:
ca:9e:7e:80:15:98:06:02:df:c7:2f:22:4d:cf:8d:3e:1d:67:
d3:f0:f1:73:5c:4d:f3:36:e1:1f:57:4c:a6:41:56:fe:91:0d:
9c:3a:2d:ee:2a:58:aa:6f:db:ef:28:04:ff:b0:00:0a:6a:e8:
d0:f8:4d:62:6b:52:1f:41:b5:e6:3d:48:2a:dc:7a:93:f5:86:
64:29:ba:1a:38:46:b0:2b:9c:0c:b7:60:28:b6:a9:53:fa:50:
e1:8c:52:41:a7:ca:3d:23:fb:32:ff:07:38:28:d6:b9:20:b3:
55:57:c4:be:1a:0d:52:ee:ac:2e:1b:c7:fe:40:e6:01:61:e4:
f8:a6:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:13:54 2026 by rpki-client