Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: h/AoAO5ToQPnHkHAurGbLzNKxHBPrjkdo6OjoQty7pE=
Subject key identifier: 4A:C7:34:D8:47:F6:FB:4E:64:0F:60:45:57:B4:E0:0A:76:07:7B:6F
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 019CAB6BA24F0A98692428E2A03D10119D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 084A
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: NOYbfWpgqQmf4wr9BjtAe8xZofDcvKhetzdkgZnhtJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a2:4f:0a:98:69:24:28:e2:a0:3d:10:11:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=4ac734d847f6fb4e640f604557b4e00a76077b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:a5:d6:bf:90:ac:21:bf:7f:0c:01:cb:b1:
09:22:4a:90:ac:0f:3a:08:7f:72:c1:49:ee:a6:14:
2c:ea:d4:e8:cd:6a:d0:2c:29:57:3a:88:c9:cd:f5:
54:70:5a:9c:c1:53:15:82:e0:00:d1:00:a3:13:08:
fd:98:d6:b4:24:24:c5:42:0f:cf:2d:c6:30:d7:3e:
8b:9b:08:d9:c2:01:45:96:14:e3:ec:1c:d5:22:4f:
6e:43:d1:03:a7:3e:8b:a1:55:6d:c4:11:42:24:cb:
fc:91:d0:4c:ba:f4:44:d1:0e:75:96:85:aa:22:df:
7e:3a:12:26:4d:1b:be:48:94:ff:73:05:5d:21:9c:
7c:86:3d:05:df:50:94:c5:ef:85:21:68:be:55:8b:
6a:6a:93:8b:14:1f:4c:17:50:d0:c7:ed:9c:02:37:
f5:c8:9f:8b:ff:85:9d:7e:cd:7f:cd:0a:e8:8d:8d:
5f:7d:57:cd:6b:b0:f2:b9:cc:e5:47:b3:fb:22:45:
8d:d8:9b:57:57:5e:fa:dd:f3:ea:87:93:58:79:bc:
2a:ac:d2:e5:4f:f0:41:4d:e2:b3:17:06:8e:9b:02:
4c:44:35:2a:a1:6a:18:56:1f:bd:6d:0a:94:96:db:
3c:2a:5c:94:13:0b:23:58:1d:f5:2e:ea:71:62:80:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C7:34:D8:47:F6:FB:4E:64:0F:60:45:57:B4:E0:0A:76:07:7B:6F
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:6c:cb:4a:35:12:a6:07:54:90:21:18:78:fd:59:a9:c6:
c0:aa:eb:2c:2c:71:8b:dd:c5:d5:37:dd:ca:75:43:97:e3:02:
5a:e3:f2:9e:58:0c:62:11:76:39:fa:29:91:da:0a:d3:f3:3e:
6f:b6:8a:db:59:d5:d3:45:05:f7:27:9b:b7:a8:a0:9d:26:0a:
fc:58:10:e2:a2:90:a9:04:bb:c6:00:02:0c:fd:75:cc:6e:e4:
ec:13:4f:9a:ee:6c:fc:2a:50:2d:f8:cb:04:b3:f5:fc:db:fa:
ac:dc:08:03:19:da:9f:ff:37:26:6d:6c:94:ca:58:c2:22:9c:
4c:7e:c5:83:59:89:dd:36:4d:06:a8:2d:6f:07:2a:f2:de:66:
d8:96:46:d3:b5:0f:6b:df:be:5f:ca:85:e3:79:71:bd:e3:2d:
2a:01:12:c9:c8:27:02:3a:06:97:da:c9:72:91:1b:5b:37:2f:
42:af:fc:3e:a3:de:e6:60:e5:f6:1a:74:f1:3c:48:74:07:1b:
da:e8:5d:72:db:04:34:14:92:2b:53:9f:4b:32:d9:51:c7:0d:
c3:4b:1b:ed:0c:ba:a7:9f:10:40:f0:cc:ae:c2:a5:63:c3:cc:
a5:63:a5:1b:00:e8:f8:fe:cd:6c:fa:c1:d8:26:b5:fd:35:61:
94:a6:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:39 2026 by rpki-client