Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: 7GEcwi8XyNGqt04mmc4wsqseMn1X1rgWOvgdULluGEU=
Subject key identifier: 2B:A2:FF:EC:AA:A6:DC:F8:77:EE:6F:9A:52:67:21:30:DF:99:5E:74
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 019D98BDB16998D55CFD35161E4F355ED884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 07D3
Signing time: Fri 17 Apr 2026 00:01:01 +0000
Manifest this update: Fri 17 Apr 2026 00:01:01 +0000
Manifest next update: Sat 18 Apr 2026 00:01:01 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: IlVLqIDrzoH+QEN0vyM4DEdSumO9pRGrnPVwZNkLLQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b1:69:98:d5:5c:fd:35:16:1e:4f:35:5e:d8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Apr 17 00:01:01 2026 GMT
Not After : Apr 18 00:01:01 2026 GMT
Subject: CN=2ba2ffecaaa6dcf877ee6f9a52672130df995e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:d3:62:bc:2b:36:48:7c:55:64:f2:8d:7d:
2e:12:8d:35:61:c5:42:0d:61:30:1f:25:c3:ac:44:
60:a0:6e:62:ab:5b:4b:82:c1:4a:44:03:b9:cd:5e:
f4:2b:db:81:cf:ef:c2:ae:99:51:9d:f7:b4:96:20:
c3:82:d6:4b:ce:34:39:f3:e6:c2:77:70:b2:f2:2f:
32:36:ba:0d:ad:98:b3:98:e9:24:d2:82:5d:f2:f2:
fc:b4:35:39:58:39:91:33:cd:f4:57:98:4a:e5:83:
29:c0:07:c1:0c:56:83:b1:73:3e:16:c5:7f:5e:5b:
15:d6:d7:5a:03:d0:52:66:93:06:a3:50:92:b4:82:
63:49:4c:ef:60:7c:04:38:9d:a6:d4:ab:11:21:4f:
7a:50:7e:d8:5e:02:46:8c:ff:14:ba:03:77:d7:da:
90:1a:c3:7a:4d:d0:33:5b:0b:1c:40:3b:29:ca:8e:
ab:61:3d:fa:9e:e8:33:f9:34:dd:21:4e:88:1a:43:
b6:b7:e7:a9:32:ab:2d:6d:ef:98:90:3f:ff:4a:4d:
bc:72:09:5e:05:1e:25:97:fe:b3:fe:18:7a:e6:a9:
d9:85:49:1b:49:5f:6a:50:e8:af:2f:0f:67:af:7b:
fc:e5:f9:b6:3e:b5:b7:fe:95:9e:4e:c6:be:90:ef:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:FF:EC:AA:A6:DC:F8:77:EE:6F:9A:52:67:21:30:DF:99:5E:74
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:8f:13:1d:19:56:0d:14:b1:dc:3b:bc:06:41:9d:57:cc:
cc:ee:a0:36:87:7e:83:b4:8c:86:50:48:c5:6b:85:0f:7e:22:
c2:cb:5e:50:76:09:33:d9:dd:8a:8d:78:4c:6b:06:12:07:0b:
8d:9d:d8:9b:75:34:9e:8d:be:fa:d3:cf:39:9f:41:e4:1a:b5:
bc:1d:23:b4:d2:87:7c:7d:15:94:f3:cb:3b:fd:c5:18:90:39:
45:24:20:32:50:54:b4:07:91:20:36:94:dc:b4:c4:a3:9e:a9:
72:cd:a7:d4:83:40:78:ca:d9:92:78:44:2a:54:6c:4a:b0:d9:
67:47:11:2d:2f:92:57:e0:7e:69:e6:75:b0:64:f6:43:d0:ac:
b9:aa:56:7c:49:ae:7d:76:46:c4:70:66:f3:32:49:ff:34:8a:
b8:ef:ff:5d:6c:36:da:da:c1:3d:da:88:ee:0d:53:c0:4c:e4:
83:ed:7f:97:21:1b:83:f9:e7:45:8b:70:e4:e4:0c:b2:9f:bb:
7c:ae:21:02:97:0d:30:ad:82:ad:45:f7:6d:e4:1a:7d:2d:6b:
fb:dd:86:2c:44:7b:5b:ec:09:e1:f7:19:ac:75:f9:60:9a:61:
08:d5:eb:df:81:c0:5a:94:52:31:1d:91:62:55:1e:7c:33:ff:
f0:ba:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:36 2026 by rpki-client