Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: lOoP9PznKc4NS6zrecw/Hr2Tq+cflfCLQTjS363AESQ=
Subject key identifier: F1:3B:72:87:65:A0:3D:DE:7D:40:D3:BA:E4:7D:47:FF:A3:B6:93:34
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 019D9DE412D4E9383E3B2D53F6C9132F5CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: 0431
Signing time: Sat 18 Apr 2026 00:01:03 +0000
Manifest this update: Sat 18 Apr 2026 00:01:03 +0000
Manifest next update: Sun 19 Apr 2026 00:01:03 +0000
Files and hashes: 1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: Ylr4yawKFAryzjIRCdHZ7kECL2ojGeUOTTjz/tEQQxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e4:12:d4:e9:38:3e:3b:2d:53:f6:c9:13:2f:5c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Apr 18 00:01:03 2026 GMT
Not After : Apr 19 00:01:03 2026 GMT
Subject: CN=f13b728765a03dde7d40d3bae47d47ffa3b69334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:8f:f1:2b:c1:2b:30:5e:87:02:ab:b8:f0:
4f:97:de:b3:de:62:dc:06:d3:7d:69:a1:a0:cd:e0:
2d:6c:1f:79:de:e1:74:38:51:58:f6:32:32:86:b1:
38:ee:ca:eb:1b:9f:fb:71:d2:80:53:08:b2:a6:a2:
94:74:dd:35:5c:3f:cb:62:77:80:de:a0:54:51:4c:
9a:e0:63:55:33:75:f7:56:52:57:5a:52:71:6c:2f:
63:07:77:7a:4a:ad:b4:34:e7:f0:b5:d7:49:13:f1:
49:20:82:3d:41:64:11:31:d2:7a:88:78:d1:d1:bf:
c4:a8:37:61:35:f7:68:74:d8:d0:1c:8f:57:d3:f8:
ec:57:c4:c0:20:8e:52:d5:4e:16:fe:b5:c1:28:b5:
fc:90:2e:77:1c:1f:d6:a1:17:f3:d9:00:6b:f5:d4:
9b:78:8d:75:b5:14:43:bf:36:c2:6b:d4:6e:c2:5b:
1d:f0:2b:1f:7e:a4:f8:36:25:62:97:c5:f0:b2:c8:
44:7d:a6:14:0f:c4:2a:c2:05:11:e5:31:95:03:ac:
97:22:92:4d:02:81:d5:7c:92:9e:45:51:32:44:e7:
d1:48:cc:b8:dc:74:32:a9:8a:ed:b9:91:35:cf:e4:
aa:be:21:2b:1a:ef:04:e1:0d:6f:59:0f:cb:bc:76:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:72:87:65:A0:3D:DE:7D:40:D3:BA:E4:7D:47:FF:A3:B6:93:34
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:f7:9c:41:ce:e9:35:19:31:66:c1:55:06:f5:0c:9e:72:
f4:f8:31:d3:8b:91:b1:44:5a:61:15:5d:f7:22:a0:6c:65:f1:
7d:3a:e3:18:bf:81:42:e8:99:0c:43:0c:57:2d:54:2a:e8:9e:
97:a8:ec:8e:8b:2b:13:8d:d7:dc:f1:e6:73:5e:f4:a9:8d:1c:
76:27:09:84:bd:c8:ad:ec:e1:b2:c9:04:ba:ac:51:7d:be:6c:
bd:db:61:3e:2f:04:79:75:a2:46:c6:f6:28:ca:6f:74:9a:8a:
f5:85:89:cd:bd:0d:12:85:0b:37:16:15:35:9b:d5:ed:05:89:
b7:9a:b5:88:22:49:3e:05:41:6c:35:17:40:d0:69:d9:63:59:
78:b3:04:09:50:49:8e:a5:f4:a2:d6:e4:44:9b:cd:c3:27:35:
d3:2c:b6:f7:0c:78:09:73:b4:85:ab:5e:36:64:c6:a5:02:10:
0f:14:70:71:a2:3a:21:24:84:2d:f9:c3:05:ee:8d:df:1b:49:
b2:97:10:57:2f:80:eb:b3:42:6b:40:79:a8:40:8c:f1:5b:ec:
38:f1:ff:06:36:a4:1d:77:68:a3:a7:b7:76:87:97:43:48:82:
07:4f:eb:d2:ff:8f:41:7d:20:0f:f9:50:a2:05:71:3e:e3:37:
6f:53:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:18 2026 by rpki-client