Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: NOT8RM/u0WOFWcfOsGUslwJfgB/vr3fjzJ9q1OOMY00=
Subject key identifier: AD:AD:62:83:14:F0:74:E9:22:91:3D:A9:39:98:DD:1A:C8:93:B4:AC
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 019CAE6C7B575921D5DC4622556E0A732565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: 03B5
Signing time: Mon 02 Mar 2026 12:01:10 +0000
Manifest this update: Mon 02 Mar 2026 12:01:10 +0000
Manifest next update: Tue 03 Mar 2026 12:01:10 +0000
Files and hashes: 1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: REpKKUcrDx8iFCMkBLJONrM+9IqOK4PVPeLqmQ/IdRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:7b:57:59:21:d5:dc:46:22:55:6e:0a:73:25:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Mar 2 12:01:10 2026 GMT
Not After : Mar 3 12:01:10 2026 GMT
Subject: CN=adad628314f074e922913da93998dd1ac893b4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:93:ba:ca:f1:eb:1f:ed:e1:5a:66:3d:05:
47:29:00:c6:a6:cf:ca:e4:01:df:db:b7:81:be:97:
cc:18:34:81:a7:c4:a2:83:af:58:47:85:ba:d9:11:
e2:1d:8d:c6:38:fb:3d:aa:c7:24:38:f7:59:1b:2d:
2a:bd:43:f0:cd:6c:cf:63:af:62:62:ee:99:dd:0c:
a4:3d:d2:1c:76:f8:83:1c:f7:6d:b8:48:24:79:e6:
aa:31:2e:cc:9a:08:d4:59:13:3a:9c:fd:0e:0d:4c:
60:1e:b2:0b:18:e1:00:41:ec:48:27:d0:31:60:88:
af:86:85:10:a3:ce:b6:e1:3a:07:3e:c6:8d:d5:71:
8d:54:1d:e0:a9:6a:39:40:1b:65:90:70:51:87:6c:
d7:61:16:8b:83:d2:28:91:ed:f4:f3:3a:bd:d7:57:
f1:ef:91:06:93:fb:f5:37:65:e2:06:9f:56:80:34:
82:97:38:fb:df:be:07:66:64:f5:d9:5e:2e:b4:cd:
99:4f:02:7f:08:ec:37:5c:72:21:b9:04:3c:43:5a:
91:e7:fb:e5:76:54:f3:0c:c8:0b:af:bc:0a:19:5a:
1e:d7:50:87:0d:79:5d:e3:9b:b6:b2:9e:b2:43:f2:
6d:7c:23:3e:bf:3a:a0:ed:54:45:bd:a0:e6:12:ec:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:62:83:14:F0:74:E9:22:91:3D:A9:39:98:DD:1A:C8:93:B4:AC
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d3:91:93:8d:db:2b:ab:6b:85:ab:97:37:46:d0:04:70:c0:
5f:2f:b1:8a:02:88:84:14:3c:f2:2e:09:b3:a5:73:1d:a8:f1:
96:ba:d0:65:9a:70:21:bb:bf:28:78:68:45:03:1e:b5:ca:2f:
f1:f4:2b:ee:1c:c1:57:7f:37:76:77:fb:82:8f:36:60:b1:cb:
cc:e8:c8:a7:2b:ed:8f:16:d2:26:1c:67:a7:6f:50:24:d7:05:
23:97:c6:76:72:0d:c0:37:44:c9:cc:4f:72:f8:d6:d8:c0:d2:
e7:89:f2:26:80:af:03:d7:99:73:05:66:8c:94:11:28:b1:b1:
e4:b5:32:20:e7:5d:03:8a:42:57:92:de:d9:18:72:d8:58:21:
bb:31:48:58:9e:6e:27:f4:5c:b5:70:dc:95:2e:3f:ae:16:b4:
17:2c:14:16:9c:4c:a7:c0:15:7f:bd:dd:04:98:54:b0:d8:2d:
33:6c:b3:ef:3b:f2:74:28:bc:d2:9d:63:72:e5:4f:7a:13:c2:
48:11:75:b9:a2:b2:7f:35:91:86:67:e2:1e:4f:18:98:88:15:
31:50:20:bb:cf:3f:15:03:0f:4f:55:80:9d:f0:99:bf:5e:55:
ef:93:fe:c9:30:ef:ba:64:4a:1d:e0:3a:71:da:97:f0:8d:ee:
b4:78:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:05 2026 by rpki-client