Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: +WljhWQZHgSvU1E4FhTuDOR30eKowkyE5AMc64ZPLcQ=
Subject key identifier: A7:E1:D3:A1:D3:59:74:DE:60:DC:FA:DA:E8:7E:59:ED:70:C4:8E:E6
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019CAD59D0B02F3D89889563D077F37A7BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 113E
Signing time: Mon 02 Mar 2026 07:01:10 +0000
Manifest this update: Mon 02 Mar 2026 07:01:10 +0000
Manifest next update: Tue 03 Mar 2026 07:01:10 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: Obe5xgwZGMrVhuf9/t6U8uClmZ7dlYYxGdScWzXgjn8=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d0:b0:2f:3d:89:88:95:63:d0:77:f3:7a:7b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Mar 2 07:01:10 2026 GMT
Not After : Mar 3 07:01:10 2026 GMT
Subject: CN=a7e1d3a1d35974de60dcfadae87e59ed70c48ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:7e:42:4e:91:cf:54:19:73:b8:c5:1d:b0:
8f:c2:4d:29:e7:a5:a3:de:3a:d4:0d:d7:c2:6c:5c:
9a:b4:dd:a0:74:61:08:68:f3:20:fb:e0:a5:fc:fa:
b1:d0:88:4d:d9:00:f8:6b:bb:ca:5f:7c:b7:f7:e5:
90:a0:d8:25:e1:17:23:bc:40:15:97:49:d5:22:50:
fb:15:ab:74:1a:1e:75:7c:f1:2b:c1:e0:62:89:33:
af:eb:d5:6d:4e:62:ef:f6:72:c5:73:48:59:ca:a2:
45:b1:27:e6:7f:7a:89:d0:36:72:a0:c4:82:40:fc:
5f:e5:5d:f8:b6:a9:9c:1e:f1:13:26:1c:dd:f4:0a:
e5:4c:4b:3b:c0:ab:fe:5d:ca:f3:21:27:d2:a6:ac:
6a:16:7c:f4:b5:c6:9a:91:5a:8e:59:40:1e:96:d7:
ea:be:1d:cf:b0:01:1a:5f:14:c2:3c:b0:36:60:6d:
a5:ba:7f:97:55:48:ef:10:c9:e0:fe:91:db:76:ed:
29:1a:5a:a9:8f:ee:da:e5:2c:c9:db:06:fd:48:df:
3e:c8:6e:f9:2d:1f:45:52:00:27:a5:c8:3a:f9:9d:
81:99:f5:53:e2:4f:4f:52:b2:bc:93:f1:29:85:87:
b1:a2:40:d6:97:86:0a:61:17:6b:b3:2b:1c:29:ba:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:D3:A1:D3:59:74:DE:60:DC:FA:DA:E8:7E:59:ED:70:C4:8E:E6
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:27:82:48:81:7f:43:11:65:c8:c6:67:0a:35:0b:49:ae:f6:
fd:1c:6a:4d:a8:5c:96:6f:52:1e:7f:51:41:df:f5:92:a7:91:
c7:62:20:9c:4a:3f:c0:ec:31:76:29:38:aa:b4:d1:7e:20:76:
97:78:b0:6b:5f:d6:9e:2f:ef:42:c0:46:01:db:35:f6:aa:37:
c7:6e:46:1b:48:eb:0c:4d:e7:af:fc:c9:bb:a5:87:0c:c5:a7:
20:91:91:3e:f3:c7:f8:d3:47:fd:aa:7a:59:a4:6f:79:a4:34:
1b:8f:98:4f:89:21:30:20:f4:7a:22:90:3e:e1:f8:fd:36:57:
0a:25:9c:fc:25:63:c9:9f:54:9d:64:b2:5e:da:66:75:00:63:
38:e4:82:2f:fa:18:7b:2f:07:9e:c2:64:28:74:bd:db:96:33:
7f:45:fe:d2:61:e2:98:08:7f:19:5a:41:22:86:fd:16:f8:6b:
95:2d:8b:6c:ba:26:34:a3:3e:ed:b1:ad:f0:5e:23:78:72:78:
bf:db:bb:fb:e6:87:ca:91:bb:13:3f:d0:5a:80:b4:b3:af:fa:
cd:ad:85:59:52:58:8d:a7:97:43:3b:36:0b:30:88:c7:47:87:
f1:53:ee:fc:09:31:22:60:c0:ec:8f:5a:36:a8:55:7b:c1:24:
25:a5:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:58 2026 by rpki-client