Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: J1fAl189aaIbW8WRJq3hVmW+J5muhSc1AA37rQX4hWg=
Subject key identifier: 7D:FA:4B:AC:BE:6A:A9:52:39:5C:6B:19:78:22:E7:8E:1E:C8:2C:2B
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 019D299756A550353DA387C94A032F6C4A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 02B3
Signing time: Thu 26 Mar 2026 10:01:17 +0000
Manifest this update: Thu 26 Mar 2026 10:01:17 +0000
Manifest next update: Fri 27 Mar 2026 10:01:17 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: kjldRhDlrsVO0Mt86BujdcWkoEqb9sCPsAyepieg2X4=)
2: ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa (hash: VCOZaoQKdaHYdzLeM6vy+vaxjALR2cSdXmffmC82vmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:56:a5:50:35:3d:a3:87:c9:4a:03:2f:6c:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Mar 26 10:01:17 2026 GMT
Not After : Mar 27 10:01:17 2026 GMT
Subject: CN=7dfa4bacbe6aa952395c6b197822e78e1ec82c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:01:65:d9:9e:ff:38:21:82:02:b8:64:04:
39:f7:8b:3e:b2:e8:f5:5c:f6:b1:65:2b:1a:91:bc:
06:7d:e7:a3:c5:a3:59:e9:bf:42:d6:8d:c5:c4:cc:
41:28:e8:50:69:a1:00:90:8a:6e:bf:57:f4:64:9d:
1e:48:d0:3f:ff:ec:7c:01:be:4a:43:50:0e:bb:75:
e7:d3:ef:9d:4f:74:e1:9a:78:be:b3:1f:2b:9d:91:
7d:c5:49:27:76:fc:c5:59:de:12:e2:cb:1a:40:00:
6f:49:dc:1a:a2:33:ef:e4:7a:c0:29:5d:47:02:22:
d1:d6:d1:1d:54:97:83:44:e5:f0:8d:28:96:12:d1:
07:ff:b9:eb:05:4a:83:0e:55:62:cc:d6:4c:6c:ca:
08:fb:f8:78:cc:7c:f7:6c:9f:7b:59:aa:09:fe:43:
a6:56:d5:e6:bf:08:6d:86:c8:1b:da:dc:2f:08:9e:
63:dc:b8:2a:9e:87:9d:93:fd:3c:86:19:8a:c3:0e:
2e:ef:8d:66:13:74:79:28:21:8b:83:87:70:0e:2b:
e4:a1:30:4f:59:ec:00:ee:aa:85:fd:c2:b6:3c:e8:
d7:cf:8e:f9:fc:3a:85:ed:71:4e:10:17:d2:a5:f6:
87:58:24:80:68:61:4d:43:af:10:67:1f:72:a5:25:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FA:4B:AC:BE:6A:A9:52:39:5C:6B:19:78:22:E7:8E:1E:C8:2C:2B
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:6a:ce:48:b2:de:2a:93:2a:8b:ae:4a:43:00:15:bf:e4:
e8:f3:21:d7:42:64:b7:7f:b1:e8:9d:91:f5:17:d4:cd:9f:b9:
09:96:3a:79:60:7f:60:a0:a6:3a:09:e8:ba:28:c6:9a:a3:57:
60:6e:dc:c1:18:ca:0c:e0:70:1e:cd:e5:22:33:a0:f2:68:cc:
98:ba:ce:e7:bd:e9:10:61:fb:e7:cc:84:e1:70:0c:20:f8:fe:
83:cb:d3:33:b8:35:d1:2e:69:8a:b1:81:d1:44:1e:65:02:2a:
69:55:81:29:d8:c7:18:03:a5:45:28:4e:71:5f:85:e2:3a:a4:
c8:69:96:8b:01:10:f0:3c:74:bd:82:cd:4b:5e:9f:3d:3f:5e:
25:79:1f:ff:80:6d:fe:c1:74:42:d1:39:fd:d9:a6:bd:79:6b:
15:59:e4:f0:bd:c8:d7:d6:02:b2:a0:f9:95:87:40:10:88:ff:
f0:7c:05:6a:9c:6a:16:2f:fc:69:ae:f1:ef:e1:e2:8f:60:bd:
06:44:e6:bb:fc:49:d0:33:04:a4:89:62:92:74:7a:50:ad:25:
fd:61:25:ec:12:39:b6:17:aa:a8:9b:d6:02:ec:02:55:36:c4:
08:9e:d2:70:79:08:ad:41:94:13:a0:ca:fb:9c:0d:5e:a4:4c:
27:2d:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:46 2026 by rpki-client