Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: q7roRsJ+0C2v8oNPnrC02hryikKIHIY0onILC9EJQA4=
Subject key identifier: 4E:7A:13:C3:75:CC:2A:E8:E2:35:91:5B:3C:05:97:EF:31:21:2A:8C
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019CADC756E3AAA01E38C8F07AE9995EE707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 0956
Signing time: Mon 02 Mar 2026 09:00:48 +0000
Manifest this update: Mon 02 Mar 2026 09:00:48 +0000
Manifest next update: Tue 03 Mar 2026 09:00:48 +0000
Files and hashes: 1: PFLWqZXEhGSjSe27HXXBR4MJTJc.roa (hash: EgW8y7jSNiN5c+nvOeQLbNW7t5xsejb8y+r01vtFLbM=)
2: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: uMbeMkkp1obYoByLhccqJrr2F9QAg3AhdFLP73eCK28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:56:e3:aa:a0:1e:38:c8:f0:7a:e9:99:5e:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Mar 2 09:00:48 2026 GMT
Not After : Mar 3 09:00:48 2026 GMT
Subject: CN=4e7a13c375cc2ae8e235915b3c0597ef31212a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:48:e2:c8:67:b8:7a:18:3f:00:92:1f:51:
e7:3a:26:52:28:70:a9:5a:c4:6f:09:5d:1e:09:c3:
de:c1:71:38:97:e6:3c:42:8f:16:07:ac:2f:0d:66:
79:68:15:a0:52:e7:95:fb:71:b8:10:3a:c5:7a:e3:
53:1a:21:44:9b:ef:6c:39:1c:93:1d:e4:d5:dc:9a:
a5:60:69:bf:18:be:24:34:11:db:d8:0f:24:b2:0b:
96:34:b3:61:9e:75:1e:bc:67:b6:25:84:e3:e8:f9:
2f:92:a4:e3:36:ad:74:a9:06:1b:75:c7:ec:27:5b:
b8:fd:03:45:c9:b7:3c:85:c1:b6:bc:6d:3d:cb:69:
79:a7:20:e8:49:8a:9f:88:d8:c3:da:5a:87:7a:03:
4c:26:b1:e2:26:76:0d:19:48:a0:a2:87:17:41:b2:
c9:7a:6c:48:5f:ad:58:ca:78:90:e8:0c:23:2a:9d:
3a:53:98:8e:4c:fd:8c:8c:4c:d4:d8:dd:df:a5:43:
5a:09:7b:43:b5:b8:14:ec:ba:6f:84:0f:9e:08:30:
4a:01:94:44:a0:53:e3:44:ae:11:d5:0c:01:55:4f:
eb:6c:13:b1:66:ba:69:bf:ce:6c:03:86:8c:12:08:
61:68:e4:4c:fc:63:b3:2d:39:ae:09:9b:96:ee:54:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:13:C3:75:CC:2A:E8:E2:35:91:5B:3C:05:97:EF:31:21:2A:8C
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b7:cd:60:f7:94:10:5c:b4:cb:50:88:2b:7e:f7:f7:4e:ac:
86:6f:0b:90:19:e4:8e:16:ee:c4:c4:47:cb:0e:03:32:cb:7b:
c9:d0:6b:52:1a:4a:4e:5a:8f:7f:18:bb:d1:c2:28:18:64:a3:
5d:dd:16:33:d6:6b:be:95:7c:a8:a7:81:88:66:65:7d:fc:3b:
5f:95:6f:f9:20:0a:b6:dd:1e:0d:71:7e:da:6b:60:8d:33:25:
83:01:d2:2f:d8:af:91:96:aa:60:62:3a:dc:4c:1a:c6:19:fd:
a1:09:76:33:19:30:4f:af:72:83:0c:bf:2e:cb:54:cb:a6:9a:
e6:a2:10:54:23:4b:c3:72:bd:b2:36:b1:1c:23:ce:5f:07:87:
43:e5:9b:2c:cf:14:c4:be:f8:0d:af:6c:05:ff:ef:f0:c2:8d:
42:87:17:a9:48:9c:b0:7f:35:3b:e0:d9:3f:ea:13:9a:f4:85:
6d:94:24:da:a0:c7:37:e2:13:44:e2:3d:35:8b:56:ef:18:f0:
81:d7:36:38:cb:4e:cc:11:55:fc:a5:c9:c9:bc:3c:d7:c5:67:
5a:21:c8:10:05:2f:8b:45:46:80:08:2e:e1:ea:83:1b:72:e4:
4d:8a:e3:5a:36:d4:7b:14:80:9e:a3:79:d2:65:c2:54:82:fb:
c6:7c:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:09 2026 by rpki-client