Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: 2SfRLwvaHv9RjZML6/bvDPeqEvhg6qzkq2W1y8P+jBk=
Subject key identifier: C3:E4:8C:0F:93:D1:92:A5:1B:CF:9E:AE:05:25:B0:57:B4:1C:4B:4A
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 019D98F51FCF2E16B03B49B34FDCF3098CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 08C5
Signing time: Fri 17 Apr 2026 01:01:34 +0000
Manifest this update: Fri 17 Apr 2026 01:01:34 +0000
Manifest next update: Sat 18 Apr 2026 01:01:34 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: MMq8BVUTAisa9LW8dgHgampSUIY1nS0WKk8nPPFbalI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1f:cf:2e:16:b0:3b:49:b3:4f:dc:f3:09:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Apr 17 01:01:34 2026 GMT
Not After : Apr 18 01:01:34 2026 GMT
Subject: CN=c3e48c0f93d192a51bcf9eae0525b057b41c4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:bb:49:ca:f1:80:40:23:6d:5e:f1:bb:02:
99:80:97:b7:46:97:7b:58:de:21:10:f0:2c:0a:51:
b9:69:87:4a:8d:2f:36:6c:11:73:26:22:d9:b1:c4:
ef:82:0c:5f:b7:a5:f6:0a:a9:13:8c:63:d7:b9:38:
cc:f5:a0:61:9c:3c:b3:19:f6:d9:a3:65:1c:e6:bc:
8b:58:4d:2a:e5:60:bd:d6:5a:23:7e:fd:2e:4d:2a:
7b:85:c9:75:ae:9a:b3:5a:d3:13:40:73:f3:5c:c5:
ad:ed:20:35:a4:73:31:95:c9:95:95:55:55:28:53:
ea:22:1f:4b:4d:5e:b0:c9:83:52:68:0b:23:b0:43:
a5:8f:f9:fa:d6:a2:8c:94:5e:60:29:99:c4:c7:9a:
d1:c5:87:75:b4:10:5e:be:60:44:76:33:f1:3e:99:
df:95:5d:10:10:dd:58:e3:2b:c1:1d:86:14:49:94:
c8:26:44:8b:b5:ad:57:d0:37:49:54:46:0c:5f:27:
35:21:85:86:87:19:6e:b3:b5:dc:7b:27:73:61:be:
58:69:a5:2b:38:9a:12:56:44:aa:b7:e0:26:7e:aa:
2c:d5:7b:6b:3e:76:98:63:23:b9:fb:33:34:87:aa:
2d:95:67:f4:9b:5d:23:75:39:dd:fe:3e:3f:e2:ed:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:8C:0F:93:D1:92:A5:1B:CF:9E:AE:05:25:B0:57:B4:1C:4B:4A
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fd:0f:c5:e1:73:a1:10:43:d2:75:b7:bc:8b:19:04:87:df:
2e:25:b1:d8:6d:5e:1d:af:b9:55:68:a3:05:72:e7:02:b6:ac:
0e:62:93:fd:f6:f9:35:f5:10:ea:06:24:51:8c:79:fb:b8:36:
14:5c:11:66:2a:1b:75:00:5b:98:1d:a1:9d:a8:84:38:c4:96:
47:3d:97:df:45:7a:9d:b9:03:32:34:e5:e9:4a:8f:a3:ef:46:
56:2e:8c:1d:4e:b1:90:40:13:bc:a2:31:ed:97:29:c3:e6:1f:
2d:fd:c0:7d:c9:f7:fa:98:2d:ee:87:21:fc:92:2d:05:26:10:
06:fe:ad:9f:b3:d8:2f:79:55:61:87:09:63:09:da:15:68:7c:
cd:f6:63:68:d0:0d:1c:6c:61:76:ab:81:3f:62:14:ba:4d:28:
b8:ce:fd:24:a9:2a:35:f7:fc:02:53:46:3d:5d:0a:d4:e4:0f:
c6:6a:a1:9b:1a:3f:e4:2b:6e:2a:3c:e5:81:66:9c:37:fe:7a:
e2:06:9a:64:a0:dc:50:20:44:d1:24:9b:a2:00:c4:4c:1d:1d:
99:2d:d9:d2:13:6a:74:64:ad:3e:64:10:50:d8:7a:5e:0d:fe:
33:f8:2b:e9:e0:f8:96:d1:7f:d6:31:e7:f7:95:3a:d1:3d:7b:
79:6a:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:24 2026 by rpki-client