Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: 7jsPMHXU2ZThIiMg9q1pnDDJpkJToaI2/uT4tbH8hoM=
Subject key identifier: 8E:AC:3F:46:71:1B:99:D1:48:93:87:7F:32:4C:9C:91:F5:D7:75:ED
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 019FAD1B00E1B769CF761D130EDDD13847B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0FB9
Signing time: Wed 29 Jul 2026 09:00:55 +0000
Manifest this update: Wed 29 Jul 2026 09:00:55 +0000
Manifest next update: Thu 30 Jul 2026 09:00:55 +0000
Files and hashes: 1: L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa (hash: upS3aOnw/wQ7yjWNv575VRnG3gYRLnA5O/bTU3MDbbk=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: 0Flp1D47ZElNnC6LYAq0g+ilMnw6GMpK3+iYGbhmiwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:00:e1:b7:69:cf:76:1d:13:0e:dd:d1:38:47:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Jul 29 09:00:55 2026 GMT
Not After : Jul 30 09:00:55 2026 GMT
Subject: CN=8eac3f46711b99d14893877f324c9c91f5d775ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:82:a0:03:4b:f1:ac:42:d0:ff:81:bf:37:
ee:0c:8d:05:50:3b:6b:87:72:10:4c:dd:7e:02:d6:
a4:70:75:aa:7c:7f:18:96:0b:9a:18:4c:70:3a:9e:
64:56:9a:d3:2a:f1:23:1e:bf:3c:64:f3:36:d5:a0:
e1:85:a2:7c:53:18:b7:22:d1:8e:26:c9:9d:37:b7:
f3:4e:68:c6:48:88:4a:9f:3c:7a:61:53:0e:86:6f:
c8:b8:a7:a4:23:c6:01:df:ab:9e:b0:7e:1b:40:93:
15:6a:9f:ea:12:14:f7:b6:33:c1:b7:52:f6:8c:a0:
26:8c:c7:0e:90:08:bd:d9:92:bc:53:bb:51:2a:25:
0c:b9:0b:da:f9:22:6c:5b:cf:78:e2:d5:79:61:99:
f2:d5:3f:c9:8c:99:68:13:1a:11:c3:af:b4:4b:3b:
75:23:5d:b4:50:0d:7e:38:47:42:9b:95:d4:fd:93:
05:33:74:e0:67:df:81:df:50:3b:9e:72:1e:36:01:
5f:62:a1:ba:0d:f0:2f:fe:6a:d4:45:dd:44:c4:04:
77:ae:c4:48:dc:18:71:c3:80:73:83:c9:73:4d:b9:
42:82:be:57:00:a6:d5:76:d8:d3:9d:c7:da:0f:14:
6c:a0:49:df:38:f3:14:d1:88:12:92:d1:20:39:32:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:3F:46:71:1B:99:D1:48:93:87:7F:32:4C:9C:91:F5:D7:75:ED
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:9f:4d:0a:d2:cd:8a:6b:43:27:ba:ee:a3:e0:7e:48:e7:
d9:0d:98:b8:bb:0e:c1:41:b0:5e:75:a7:81:8c:8b:d9:c3:68:
9d:f2:2b:94:bf:67:b9:ba:16:40:d1:14:14:40:80:57:3d:30:
23:be:9e:7f:d3:c4:f0:eb:9a:0a:dd:ab:f1:a2:0e:89:81:5a:
55:87:36:1c:78:21:05:f8:46:1c:d1:f1:72:87:67:ec:98:6c:
0a:7c:6e:52:b8:22:39:23:53:54:8f:f6:fe:6a:3c:24:fc:cc:
43:c4:c6:49:2f:77:4a:b6:04:86:cc:53:23:f5:d6:a0:c4:88:
41:f3:cf:0f:a8:57:68:3d:b9:17:58:86:44:dc:a6:8c:51:92:
ba:79:a8:14:a9:09:71:ac:2d:86:d1:fd:00:31:6b:14:69:76:
0d:df:c2:ca:0b:bf:d4:6e:c0:7a:9d:69:d6:a2:c9:22:25:ce:
84:50:05:20:85:56:13:48:1e:5e:fd:00:fe:36:7b:cb:cf:08:
a4:00:0b:c0:b8:71:4f:8d:a1:4c:a0:7c:24:67:29:e3:7b:55:
11:0e:2a:7c:3d:46:58:52:b0:00:8c:f4:38:13:1d:06:05:34:
b9:f6:64:bc:0a:19:71:50:a4:07:85:15:d2:7b:02:4e:11:9a:
42:53:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:16 2026 by rpki-client