Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: J88cOFkJSTk/Ryug7PFnAdtUp+KmXJpF3kzIJc1/QAU=
Subject key identifier: D5:4C:52:43:D8:6B:3E:82:73:03:0E:8B:47:19:23:0B:99:59:CD:E5
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019D99CFD7DCDFE81CF96E230D5DD3BFA24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 1062
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: XFPktFjoCSbzbHsC7OXEEKDTvSRjFvyRXCCh/BCA7QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d7:dc:df:e8:1c:f9:6e:23:0d:5d:d3:bf:a2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=d54c5243d86b3e8273030e8b4719230b9959cde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:9c:23:e5:39:06:a6:0f:41:6c:95:a4:e6:
3d:ce:d3:84:fe:aa:8f:08:3b:ef:33:de:03:63:a5:
f5:b2:b8:7e:3c:6b:f4:01:d8:b4:ec:37:1b:04:e3:
d0:18:a8:91:9f:4a:d4:15:61:73:f2:4a:6f:12:60:
87:2d:09:3d:f5:26:79:62:82:8e:f6:63:47:b5:e3:
e2:8a:34:18:58:8d:55:4d:6c:45:fc:be:67:ce:29:
64:49:a4:83:bc:57:20:fc:7b:97:20:db:6e:04:27:
95:46:f7:95:4c:3d:33:35:d2:69:78:8f:64:70:cc:
27:96:39:0e:9c:e2:37:b3:ce:dc:07:f4:31:a2:56:
1a:c4:47:62:d3:ed:50:73:11:6b:f7:91:eb:4b:74:
bb:26:5e:00:97:37:79:2c:84:24:94:14:47:12:b5:
49:bc:2d:34:46:f9:dc:15:d5:17:a1:06:6b:bc:64:
53:5d:96:e5:45:ff:8a:d0:57:82:b8:68:33:d5:8b:
67:b3:10:9f:3d:9b:d8:44:5b:69:b8:cd:74:b5:8a:
bc:c8:19:44:82:9d:1f:5f:eb:94:1b:16:45:12:2d:
60:80:98:38:ee:39:cb:c1:e2:6c:90:f4:29:b9:5e:
96:d3:ba:8f:6d:81:f5:5f:1d:63:46:e1:31:0c:84:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:52:43:D8:6B:3E:82:73:03:0E:8B:47:19:23:0B:99:59:CD:E5
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:0a:dd:5a:99:b4:d8:56:ad:d8:b7:6c:be:09:93:46:81:
75:2c:45:30:5a:24:5c:8f:e4:15:5c:96:8d:cc:87:6b:6e:96:
97:de:4a:3f:61:3d:f3:f7:6a:cb:8d:f3:2d:21:35:09:a0:f1:
2c:65:13:f3:97:6c:de:88:b8:ae:06:9f:2d:83:96:4c:98:07:
bb:19:a4:d3:15:08:00:67:71:2e:94:b5:d7:ca:12:a6:b9:42:
e4:6e:3d:13:95:ca:93:5e:13:79:54:aa:7e:20:db:c8:6d:07:
fc:fc:8f:a1:98:3f:d2:5c:9c:c0:da:3b:16:bc:37:7b:89:24:
7a:f2:9e:c3:39:b1:44:ae:86:dd:03:4a:c8:86:e1:18:99:23:
86:2f:47:7c:50:6a:43:cb:4d:00:96:36:0d:6e:a5:2d:04:6b:
43:0e:24:b0:ea:37:26:de:e4:64:e5:9f:4c:a4:fc:aa:a5:9d:
3f:94:d3:fc:6d:29:fe:6b:6a:6a:1b:10:3c:a2:bc:d6:05:d8:
da:32:09:a0:61:b6:94:53:cc:e0:b8:8b:75:81:b5:92:3a:29:
68:8c:d8:f4:4b:e2:e8:ba:90:af:88:22:fd:9f:53:5f:62:90:
53:cc:c8:32:bc:bd:e9:60:49:63:d7:4b:52:93:ca:9c:d4:bf:
2b:c1:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:35 2026 by rpki-client