Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: U3SY5D4EVwfUOGjPRJ34VzmjLN62Lg/432WDOD3mCNg=
Subject key identifier: 91:DA:BE:72:2C:44:E6:88:7E:C3:B5:3E:0F:49:0C:C2:24:23:38:0A
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019E1F11315665F2C0E0356947828CAC94B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 16E3
Signing time: Wed 13 May 2026 02:01:20 +0000
Manifest this update: Wed 13 May 2026 02:01:20 +0000
Manifest next update: Thu 14 May 2026 02:01:20 +0000
Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: i+eiQmnBJBUyqah9dYM/QcN04tqdugnrCJa8v+dzFCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:31:56:65:f2:c0:e0:35:69:47:82:8c:ac:94:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: May 13 02:01:20 2026 GMT
Not After : May 14 02:01:20 2026 GMT
Subject: CN=91dabe722c44e6887ec3b53e0f490cc22423380a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:61:70:bc:fe:60:91:36:de:84:bd:59:80:
fa:e8:0f:91:b7:9d:2b:9c:f8:b5:d7:ff:8d:9d:ec:
39:46:e4:bd:34:40:65:15:03:26:9b:fc:3f:28:13:
5a:94:a2:58:19:48:c7:1a:9c:55:6e:e2:13:9a:f0:
be:aa:7f:c4:0d:18:65:45:c5:e4:c5:ac:35:f9:64:
b0:16:35:78:ed:cb:09:8d:d1:de:1f:47:d6:fd:71:
a1:83:7e:b4:65:05:42:d8:b3:af:8b:5a:6c:be:94:
ad:c7:1e:9a:6d:20:ae:41:6b:80:42:3e:35:5c:ba:
89:33:cc:94:21:52:e1:50:49:ec:67:d2:a9:28:ce:
18:52:fb:84:3c:97:b0:fc:32:e1:37:c8:fe:1b:0b:
9c:02:59:bb:8f:51:73:f5:57:b4:aa:12:a4:8a:78:
2c:8f:bd:64:f6:b0:a6:91:08:de:29:0d:d2:02:77:
5d:22:9b:e4:4f:46:2b:90:71:21:da:3f:ac:9d:3c:
6d:1c:fd:2a:f7:f7:a0:53:64:e4:46:7e:18:28:fc:
f3:1c:90:c6:52:c4:c7:b6:04:72:8c:6c:71:d1:d8:
c5:58:77:9f:7c:fc:00:51:3c:db:e7:46:e1:fb:f8:
b9:05:8c:9d:8b:13:6f:1a:37:5f:b0:89:1d:5b:be:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DA:BE:72:2C:44:E6:88:7E:C3:B5:3E:0F:49:0C:C2:24:23:38:0A
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:da:1d:b9:c5:dc:d7:5a:81:00:9c:a9:b0:18:bc:77:2f:df:
fa:8d:9d:ba:c5:f1:80:12:2c:b2:23:16:4f:0d:63:5e:25:ba:
54:ab:d0:26:32:77:1d:08:ca:47:7f:0c:61:cc:a9:2a:9d:64:
01:5b:6f:b7:c1:73:f6:d2:5b:cb:a5:47:7b:b0:ff:fe:25:23:
c4:be:95:44:77:26:be:1e:4d:ad:f6:7d:12:b4:ce:c3:96:79:
8e:bb:3b:36:7c:b1:f1:91:30:0d:6a:b0:0a:47:42:5e:0b:84:
fc:55:43:af:63:a8:60:f0:ec:ed:2b:3c:af:9e:44:6f:c5:66:
4e:90:73:ea:c6:6b:db:8e:98:18:c0:72:ee:e9:f4:3d:8d:11:
4a:0c:10:e9:fb:47:47:20:7d:01:ba:3c:b7:2f:80:0f:23:eb:
f3:d6:0c:5e:c1:72:54:6c:00:f0:40:2c:27:7a:6c:26:1a:0b:
67:28:a4:5e:fd:82:fc:d6:60:99:34:d4:f0:f9:0a:cf:32:60:
bf:3e:94:1a:1d:e2:f5:b6:33:ba:0e:e1:ec:c1:55:35:fd:8a:
15:d4:94:c4:34:59:f9:f2:03:62:8f:d1:74:fe:c3:06:33:98:
3d:41:d4:01:e6:c6:8e:da:ec:6b:db:1b:12:2d:ec:6c:41:1d:
ff:a3:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:39 2026 by rpki-client