Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: 0MYoazswh7/4Q7oNOwSMDalMY0AJpQB8nEZGzW8l48I=
Subject key identifier: C4:A6:E5:46:1B:AA:5B:97:68:70:47:7A:70:32:5A:B6:FD:BA:BA:E7
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019EC148945A91A81185A719E685E692A8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 10FB
Signing time: Sat 13 Jun 2026 14:00:19 +0000
Manifest this update: Sat 13 Jun 2026 14:00:19 +0000
Manifest next update: Sun 14 Jun 2026 14:00:19 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: 4CYwNuqtnkFKRZ0QZfJhYp1scCKivBSVbAaatG1gt6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:94:5a:91:a8:11:85:a7:19:e6:85:e6:92:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jun 13 14:00:19 2026 GMT
Not After : Jun 14 14:00:19 2026 GMT
Subject: CN=c4a6e5461baa5b976870477a70325ab6fdbabae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:58:f8:83:dc:fb:d0:1c:7c:65:7e:41:0a:
b9:b6:c1:a8:21:88:7b:fc:92:4b:cb:ec:6b:c7:5f:
3a:67:2c:25:9d:5e:3b:6e:f2:6e:9e:65:44:9b:4a:
58:92:48:31:fa:5c:21:15:64:69:e4:06:13:6b:0d:
04:c6:73:27:46:56:6b:05:5c:bd:68:a4:63:09:4f:
ce:1a:94:00:f0:8f:8c:00:5e:39:28:15:5e:57:1f:
ea:db:6d:94:26:8c:3c:b2:0c:f0:c7:4f:15:39:19:
56:6a:b8:75:90:79:98:94:74:0c:80:94:df:f7:7a:
64:3b:11:6f:bf:46:63:4c:ba:ec:84:c5:9d:7f:7e:
ce:27:d5:63:b4:68:82:bc:3c:7c:05:5f:03:d1:90:
0f:6f:2e:85:a6:9d:9f:91:5e:94:ea:7f:25:7e:4c:
d1:2c:63:90:94:90:51:e6:e7:80:e7:18:09:5c:08:
60:35:51:3e:ac:f6:ec:96:a1:6a:46:e0:06:d2:ad:
23:dc:5a:64:60:2f:ba:f1:0e:da:e3:e1:76:98:17:
43:54:89:f2:2e:da:df:e5:21:81:6c:9e:f6:bb:82:
af:e2:4b:49:bf:9c:d7:8d:14:46:3b:50:5a:86:eb:
5b:a4:1c:24:8f:dd:43:c3:71:79:f3:aa:cc:db:9b:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:E5:46:1B:AA:5B:97:68:70:47:7A:70:32:5A:B6:FD:BA:BA:E7
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2e:f2:13:3d:3a:1b:54:ed:78:19:8a:74:f0:b8:5e:36:08:
64:b7:4e:52:f6:da:c0:95:fc:8b:33:64:fc:b8:ae:48:dd:4e:
8b:d8:71:ff:85:42:35:cd:6c:f0:f5:1c:e0:48:f6:7a:8b:6a:
5a:a6:13:b8:90:82:25:e4:65:6a:74:09:8d:2f:28:c8:fe:5a:
d3:98:1c:1c:9e:fb:b3:88:42:19:e4:7e:c6:a5:db:16:cc:fd:
2b:96:af:b1:13:57:a4:1b:af:9c:fb:56:6b:c1:65:3f:fd:b5:
2a:4d:d7:51:ec:3e:df:ba:a3:fc:75:82:6e:a7:04:3b:27:a2:
da:d4:fe:56:29:53:0a:72:73:f7:49:b4:b4:50:c1:15:e7:d0:
cc:cc:bc:d2:46:89:af:b5:70:6c:8c:16:52:e7:e0:47:cb:78:
f2:8a:b4:ac:2e:d8:91:9a:60:16:08:f6:ff:c9:8c:ca:25:e9:
f8:06:4f:22:7d:e0:1b:14:8d:71:7b:ba:67:7f:c5:44:22:49:
15:33:ad:90:9d:67:6e:62:78:d5:01:cc:33:f5:42:61:21:0a:
a6:bb:13:a9:18:8c:ec:c8:1c:ab:34:4d:f1:e4:4c:c3:5d:6f:
cf:8f:33:8e:5b:e0:2c:33:87:72:ab:bb:9f:e7:1c:b1:19:cd:
fc:d3:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:41 2026 by rpki-client