Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: se9DCrxUQhcAVT+AkY0kd29jQLQwXIcBQ9CWNt+fvvM=
Subject key identifier: DE:82:01:3E:5F:A9:ED:76:DD:94:79:E1:FA:E4:C1:9B:09:B0:C5:4B
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 019CAC7DB9DA71272263C6AF48B8F786B514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0E2B
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa (hash: upS3aOnw/wQ7yjWNv575VRnG3gYRLnA5O/bTU3MDbbk=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: PqyWMg5+GgX/s9H+LEMWvGvjFckFcPQMMZrI4lqsorw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b9:da:71:27:22:63:c6:af:48:b8:f7:86:b5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=de82013e5fa9ed76dd9479e1fae4c19b09b0c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:1a:e6:79:b0:a2:e9:fc:70:da:a1:a8:0c:
52:5d:47:18:0c:73:fb:4c:81:3d:aa:41:0f:74:6a:
d4:8c:07:52:51:9a:40:93:9b:9e:c2:eb:8e:47:c2:
3e:29:e0:01:37:5e:c3:40:5f:63:32:d8:6f:51:42:
cd:34:ec:14:13:ef:9d:56:e6:7d:04:df:b6:a6:d6:
f5:a0:e0:58:c0:c2:2c:1a:ef:6f:fe:b4:f8:fa:4f:
28:36:3f:43:1a:13:4f:ed:07:64:0d:54:9a:3d:dd:
5f:99:e1:93:e1:30:5d:ae:42:4c:5e:41:bb:eb:8b:
1a:1a:9b:bd:12:e1:a2:70:b5:3b:74:da:a5:60:a4:
a4:04:9f:1e:34:5a:be:ae:2f:df:f2:92:f5:f7:30:
aa:a5:c9:41:e3:21:a0:62:8c:10:07:db:03:7c:fe:
c2:09:f2:b0:8d:b5:75:bb:12:dc:50:5b:c3:6b:8b:
72:49:f4:df:6e:1c:c5:8f:c2:24:e2:ee:70:47:84:
b8:7f:61:f8:d6:2b:43:c3:4a:c4:05:46:9b:05:b0:
e3:7f:b1:d2:13:ee:07:18:cc:62:2e:09:f1:1b:ce:
bb:1e:ff:93:6b:4d:e3:fd:ff:1f:50:4d:b0:b9:33:
2e:1d:81:64:3b:23:17:f8:0b:4d:18:8a:4a:35:44:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:01:3E:5F:A9:ED:76:DD:94:79:E1:FA:E4:C1:9B:09:B0:C5:4B
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:94:ca:84:52:21:f3:46:f0:47:e7:86:fe:f8:96:89:7b:dc:
71:56:a3:32:67:47:0a:c2:90:71:e1:7d:5f:d2:9e:07:60:15:
91:31:3a:33:8c:23:dd:b5:06:20:7c:b3:e4:62:73:31:b5:6c:
60:ca:de:9b:b2:87:88:81:16:5d:dc:27:1a:34:a4:b3:25:29:
6c:8a:53:d6:9a:9c:79:bb:cb:35:c4:4e:43:2a:88:d4:28:92:
a9:4f:84:b3:b7:ac:7f:99:c4:06:9d:5b:e8:d7:c3:70:fb:f2:
6d:75:1e:60:3d:4e:00:6b:85:ad:ae:bf:36:49:99:67:86:b1:
4a:79:5d:4b:c0:01:b7:a1:0d:aa:96:da:9a:7a:50:42:86:67:
88:cc:67:ad:ee:0f:05:1b:10:ae:8d:67:45:10:8c:91:a4:bd:
69:30:1a:e5:32:e0:15:1f:18:25:b3:42:5f:49:97:3a:80:2b:
ca:b2:16:df:52:fe:be:20:be:16:d6:2e:d1:b3:2f:9f:ca:cc:
90:fb:62:0b:21:cb:45:2d:5e:ac:7a:f0:5e:18:38:55:8f:e1:
92:aa:2f:39:2a:70:47:8b:46:88:42:0d:ed:6a:2a:7f:4a:10:
60:49:0c:4c:a0:79:96:47:dd:c7:6a:76:ce:b9:14:45:23:c7:
e8:35:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:28 2026 by rpki-client