Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: /kxxKEXq4k4aCwIkuHgqo/l1eI4EzgvoPT0067S7W7s=
Subject key identifier: BC:9E:2A:A7:96:4F:E4:F4:7D:7C:51:81:64:D2:45:5B:AA:C0:92:8B
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019DA309FE5E014D5F13E190F5E98472309D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 09D5
Signing time: Sun 19 Apr 2026 00:00:34 +0000
Manifest this update: Sun 19 Apr 2026 00:00:34 +0000
Manifest next update: Mon 20 Apr 2026 00:00:34 +0000
Files and hashes: 1: PFLWqZXEhGSjSe27HXXBR4MJTJc.roa (hash: EgW8y7jSNiN5c+nvOeQLbNW7t5xsejb8y+r01vtFLbM=)
2: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: T4Lc5wM2lT164qwMvncD/m3wF5Zdy21JIRgCIk/tvw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:fe:5e:01:4d:5f:13:e1:90:f5:e9:84:72:30:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Apr 19 00:00:34 2026 GMT
Not After : Apr 20 00:00:34 2026 GMT
Subject: CN=bc9e2aa7964fe4f47d7c518164d2455baac0928b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:55:d2:03:80:95:5f:64:fb:75:97:2d:45:
e0:00:40:57:50:f5:70:d8:5a:38:b8:e4:c2:77:f3:
4a:14:73:af:f5:1c:e9:bf:09:ab:06:97:ce:8c:49:
c5:80:03:2d:0d:54:d0:14:f5:3b:1b:19:20:2f:a0:
dc:96:50:8c:82:76:f5:30:5e:d9:9f:79:cc:f1:1a:
a6:41:16:dc:b2:35:2a:76:70:72:52:8f:1d:28:b2:
7b:bd:57:45:8f:05:44:8c:ed:72:d8:e3:7b:29:c1:
1c:53:98:b2:ad:96:13:35:7c:ec:8e:78:9b:17:72:
54:55:b8:dc:e4:be:71:ca:5c:40:35:04:6d:92:ab:
40:e0:49:f2:ab:d8:cb:52:92:7a:6b:eb:6f:55:92:
37:21:1b:7e:2e:f9:e5:ae:70:38:18:57:f1:05:d9:
5c:a9:bb:8d:2e:9c:e3:a9:64:25:bc:5e:a2:5f:fb:
78:6e:75:85:9e:b2:34:b2:a6:2a:18:02:37:5f:5b:
08:c7:e3:e9:d1:00:f0:d7:c8:3a:5b:c5:3b:16:6f:
8d:f6:36:5c:8b:00:cb:22:2f:6e:69:1f:b1:e4:fe:
23:4e:4b:35:79:39:42:29:64:d1:19:00:be:67:97:
40:31:d5:d9:27:a6:38:e9:f0:8f:4a:3c:7b:33:57:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9E:2A:A7:96:4F:E4:F4:7D:7C:51:81:64:D2:45:5B:AA:C0:92:8B
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:3f:19:fd:07:1b:e2:5b:47:c5:56:d3:80:15:25:88:eb:
4e:1c:b6:6f:1a:ec:c9:9d:dc:4b:57:2b:30:1c:36:f4:6f:b7:
5d:c2:8b:30:6e:06:33:3d:7d:32:d2:1b:e1:83:a0:c9:40:9d:
37:62:bc:d8:4a:ec:ed:1f:cb:15:66:b9:62:5a:a3:81:ca:a0:
91:6a:d7:e3:15:42:80:d7:28:8a:51:e9:f2:d7:70:ff:03:6f:
fb:43:b8:85:1c:5b:81:4f:26:ae:b3:52:df:bc:18:e3:bd:20:
b3:c5:9c:fc:9e:4b:b0:d6:e5:f8:e1:66:6b:6c:b3:32:38:b0:
ad:2c:80:c9:a8:c7:d5:22:b5:f6:4b:c0:19:a2:1a:ac:8a:29:
ad:17:9d:31:e7:b7:90:1d:83:14:13:da:58:0a:bf:9e:9b:7f:
10:52:82:0f:ef:92:b6:21:b3:35:bd:cf:cd:d0:38:57:d4:5b:
68:50:90:fc:bf:ef:d0:04:68:bb:96:95:e9:e2:25:cd:c3:d9:
b6:2f:1a:5c:c4:97:94:c2:94:87:c9:ca:91:90:98:3d:4b:04:
a3:06:91:49:21:30:11:db:22:f6:ff:63:a2:05:58:00:a3:9f:
a6:ee:8c:2c:d0:26:4a:e7:75:55:a9:8c:d0:de:9f:c9:e0:f5:
34:2e:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:28 2026 by rpki-client