Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: 4y9vJykb5F32+6vYFZfh2onQNGwcOmFja1xhMh7CEGU=
Subject key identifier: 86:C1:7F:1E:81:EE:FC:57:34:E4:79:43:08:3A:D5:3C:8F:2B:FB:9C
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 019D27A89B1CA891EADF540A0A276F6251BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: qTYPSYSqBTrd2X96lHFc2T3rrrollQZQv3xY3wMEAn8=)
2: p_L2QpRj3ttW5zYJBodD2QWnHQk.roa (hash: jJxb3YNiA4DSQOly6eBKE2Fc+ul2//HbGqi6YUq+XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9b:1c:a8:91:ea:df:54:0a:0a:27:6f:62:51:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=86c17f1e81eefc5734e47943083ad53c8f2bfb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:52:d4:2d:98:00:e9:70:3e:7a:12:f1:57:
b6:1b:67:96:fe:c4:ba:10:ef:e5:7c:cb:e3:ba:a1:
ac:5a:34:a1:e1:1c:f1:15:0e:d1:ee:0a:77:bd:ad:
fe:0a:4b:93:78:6c:21:b7:37:52:7d:ff:75:26:ba:
ce:02:b4:25:ae:5f:0a:f7:00:ce:1d:bd:ff:f8:0d:
f1:43:f2:da:d8:a0:5c:ff:32:ef:3b:57:86:c8:ba:
ce:8b:b4:5d:39:e3:91:fb:d9:c1:18:7b:aa:81:28:
11:e0:02:4e:59:cf:c9:95:41:ce:ad:34:92:45:c9:
63:d8:11:d8:df:0c:c1:f0:ba:28:36:7f:75:b8:f0:
90:ea:28:d3:88:35:dc:d4:73:bc:7f:b6:ba:4c:a1:
0e:31:0a:7f:bf:0d:9d:05:ea:7d:a1:7c:86:5b:c6:
bf:2f:59:9f:63:2a:01:a7:e6:14:1f:02:b3:8d:8f:
be:2d:e1:95:ef:47:17:c7:45:fd:14:31:44:28:54:
3f:e6:5c:a2:e5:50:d8:ca:5d:06:cd:93:3b:97:fe:
e1:be:46:fa:a0:7b:b8:0f:c2:da:44:dd:83:3e:ee:
9c:cb:3b:07:33:15:62:d5:dd:95:76:42:a9:a8:16:
f4:db:df:4a:47:e5:5e:c2:77:02:b6:ba:12:8a:06:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:7F:1E:81:EE:FC:57:34:E4:79:43:08:3A:D5:3C:8F:2B:FB:9C
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:21:79:9e:d7:ce:44:99:a7:2f:7b:5a:a6:ab:3a:d7:c6:93:
67:bf:d5:ba:61:06:77:31:fc:cc:65:c6:ac:c8:3d:c5:2c:f9:
65:84:cd:f8:e1:76:85:66:f2:b3:51:07:e4:ad:ca:cc:2d:67:
fd:b1:32:57:e2:20:7f:71:ee:2b:d0:07:01:41:77:ee:5a:2b:
a2:60:7b:08:04:31:64:7f:cd:e5:d1:63:b1:8c:6e:bb:a7:88:
0e:93:79:42:01:18:b9:6f:cf:11:da:f1:07:ce:2b:d4:5e:69:
17:48:23:de:74:ab:61:b7:b1:cd:ff:0e:c3:fb:aa:12:9d:b0:
a0:db:81:b4:63:91:fa:c3:ce:f6:bb:a1:2d:7c:e6:fc:0c:97:
8f:46:67:37:2b:a0:a9:c4:2d:bf:68:af:42:cd:ef:5f:8d:33:
8e:33:68:c4:4a:75:b4:da:02:c8:5c:d1:88:6f:a2:c5:a0:85:
07:90:08:c2:d3:7b:30:71:e9:36:cd:b7:26:fb:ff:39:a4:56:
20:20:8a:44:2a:9f:fa:1e:8c:4c:18:13:75:25:75:66:79:1d:
e9:bb:bc:c9:30:34:85:bb:1b:df:ae:bc:9d:fe:6a:3b:5b:f3:
c8:f1:d2:99:9b:fd:d2:89:82:ef:13:da:24:d8:20:ad:e3:fe:
98:f1:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:21 2026 by rpki-client