Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: UO4qzHmqhUyr6LMMFNz1ssELh+IA/iGuDC2riBrQuKw=
Subject key identifier: EF:F1:02:69:A0:C9:58:A9:28:E7:87:15:DC:52:44:DB:DA:54:6F:AB
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019D2960F8BA3ADACDFC6652FD8C058F48F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 165D
Signing time: Thu 26 Mar 2026 09:01:53 +0000
Manifest this update: Thu 26 Mar 2026 09:01:53 +0000
Manifest next update: Fri 27 Mar 2026 09:01:53 +0000
Files and hashes: 1: hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa (hash: LEtUsnx2enz1xXPb75ExcnyoapD60AYn9bvDFjrUga8=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: KdmbT+aX5Bg0JcUJgK+ht0LEBWni87SYjvnh3iAh7Ls=)
3: vQVu0E2WyUWmteW1X5tAGdPGMFs.roa (hash: DDmHO+xrIG9LaR66B2Dm2O9/yty+KAgFsRFZqnf/WgM=)
4: w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa (hash: u8EvZ7sZjq6P1Wyu+J9n9xS5J9Sdw9tfnALdi/q2jLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f8:ba:3a:da:cd:fc:66:52:fd:8c:05:8f:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Mar 26 09:01:53 2026 GMT
Not After : Mar 27 09:01:53 2026 GMT
Subject: CN=eff10269a0c958a928e78715dc5244dbda546fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:c6:e6:74:78:49:cb:a8:1d:59:d7:66:a7:
f7:aa:43:bb:61:4e:52:99:ff:f4:92:91:3a:15:af:
63:2f:88:88:b2:3e:32:51:b6:52:34:4a:5c:8c:7a:
62:f2:bc:52:e0:8d:e1:0e:d0:7f:ac:77:70:32:c4:
f5:67:dd:b4:b9:13:e3:1f:8a:2b:2c:0b:fe:5e:a9:
8c:81:9c:76:94:98:38:98:70:84:dd:98:02:ec:60:
94:64:a5:c8:e1:aa:64:be:a8:4f:0f:bf:ab:ae:b5:
08:18:02:04:70:71:c3:67:71:07:db:a6:af:e7:3a:
b6:21:c3:ee:eb:e5:22:69:cc:63:2c:a4:d1:d9:bf:
2c:19:d9:a6:b6:d9:db:91:5b:d2:9c:82:55:8b:88:
f7:85:a3:ba:1b:5e:94:d0:dc:ca:3c:27:98:62:c9:
46:ef:4e:40:29:d6:e2:2b:e7:cb:cd:4a:83:85:70:
9f:33:79:03:09:d0:ae:09:90:88:c7:2b:2a:6e:f6:
d9:a9:a6:4c:5a:ff:bd:bc:da:6c:6a:8d:94:ff:c1:
8d:db:96:ac:e6:b8:0d:d7:57:3f:7b:d9:4e:47:2a:
f2:25:b5:38:82:01:17:ed:40:99:71:79:93:d7:d1:
94:6e:98:fa:56:51:21:94:79:80:7d:39:be:0d:2e:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:02:69:A0:C9:58:A9:28:E7:87:15:DC:52:44:DB:DA:54:6F:AB
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ba:5f:ad:34:19:ff:43:9c:20:01:ea:5c:07:b1:86:e7:9a:
d4:cd:c2:f4:ec:75:35:e9:36:a4:61:f6:18:57:77:e2:b5:76:
18:a7:ce:6c:ee:69:58:79:8b:21:97:f1:1f:fb:c5:90:67:39:
5c:af:1a:a8:7c:82:01:e5:3e:7a:72:28:68:5d:6f:f0:d2:31:
6f:7f:3c:6b:a7:f3:72:72:8b:c1:c5:4f:04:3b:b1:f5:2b:44:
62:2c:97:fa:bf:34:ee:9b:74:ed:50:8c:38:71:66:63:12:ea:
57:39:a9:48:91:55:46:c5:ca:db:6c:ae:47:44:c9:4f:a8:9b:
49:3d:56:ac:4d:98:a5:a7:91:45:9e:c5:6b:c9:d9:87:12:74:
e5:1e:7a:a7:da:91:25:0f:e4:e4:10:b1:88:3b:7a:91:60:99:
64:ff:af:2a:1e:3a:a8:66:d4:16:21:f4:d1:ed:96:01:da:d9:
e9:16:37:b1:df:fb:7b:0b:1e:b4:4d:14:41:66:01:2f:f0:fa:
bc:fd:a7:20:b0:82:1b:96:6f:d0:b2:9c:5b:37:cb:ed:f3:ea:
73:6d:a5:e8:49:21:27:9b:56:83:b6:73:92:15:a3:01:e2:94:
d5:24:a2:2f:2f:13:13:b7:5d:ae:75:fc:bc:eb:f5:1b:94:33:
ac:02:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:09 2026 by rpki-client