Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: gFG85EmxA9cBzrpD9D/dhC5prEcx987Gi6qwzFWhqxk=
Subject key identifier: 9E:D2:CB:0C:B0:90:A5:13:55:BC:75:76:3E:08:1D:54:BC:4C:85:50
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019CAA58B062E54A6F68F8D8474A66C08E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0FE6
Signing time: Sun 01 Mar 2026 17:01:04 +0000
Manifest this update: Sun 01 Mar 2026 17:01:04 +0000
Manifest next update: Mon 02 Mar 2026 17:01:04 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: bCGvbPoCqMgSNYGa1z8X47SeeyRQtF8iQ0ozfGbbJdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b0:62:e5:4a:6f:68:f8:d8:47:4a:66:c0:8e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Mar 1 17:01:04 2026 GMT
Not After : Mar 2 17:01:04 2026 GMT
Subject: CN=9ed2cb0cb090a51355bc75763e081d54bc4c8550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:27:60:4a:b4:f1:b5:59:08:8c:2b:90:7a:
00:47:e1:59:4d:7b:91:25:4b:38:74:27:17:06:6d:
f2:67:eb:54:e4:86:1a:8f:2a:c0:ae:9a:25:7a:a5:
6e:cb:6d:9f:62:0b:5e:3a:68:e8:5b:9c:88:a8:38:
f6:7d:23:2b:52:65:7a:7d:41:30:cf:bc:d2:74:e2:
64:fd:e1:b0:8a:34:1c:54:bf:1d:02:11:a1:ad:11:
c1:b7:5a:b1:9c:51:8d:3c:bf:e9:4f:5f:c4:04:a4:
ae:54:c4:33:8a:d9:6d:cb:d5:a8:63:19:45:1d:57:
e3:d8:51:75:bf:84:d4:84:2f:3b:df:95:dc:9a:66:
2b:40:83:3e:bb:db:e7:be:e8:a9:7f:53:b6:88:62:
04:ef:b1:a9:32:7e:b6:34:8c:75:76:11:00:8f:97:
82:da:cb:25:59:c9:d8:1f:93:99:73:e4:88:89:6d:
81:76:32:73:95:50:04:41:34:02:37:04:47:a8:b1:
7d:e2:80:ec:ea:9f:7c:2b:9f:6d:c9:4c:37:38:de:
ea:b2:08:7b:b3:ba:7f:d8:31:b5:19:9a:91:37:78:
32:00:24:2e:23:5a:72:f7:a6:1f:fd:05:c4:58:6e:
4c:ed:09:b3:c1:dd:7f:2b:49:8e:69:13:85:b6:6a:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:CB:0C:B0:90:A5:13:55:BC:75:76:3E:08:1D:54:BC:4C:85:50
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:eb:a3:0c:69:46:be:16:24:79:7d:b9:68:de:fa:eb:81:d2:
3a:ff:75:08:49:3f:27:5f:13:8d:30:12:18:1c:93:f3:c1:00:
4b:48:2e:5d:9f:f8:8e:e8:50:64:72:45:b2:d5:7e:64:0f:e7:
bc:d0:b7:b3:cc:d3:8b:76:7c:04:09:27:7c:89:4d:ce:99:d6:
09:21:09:f9:76:1a:c5:bb:01:70:75:38:ac:cc:da:04:7c:3e:
f9:18:34:30:f6:ee:12:ed:7d:78:43:8a:0f:de:02:2e:69:00:
29:24:9f:69:c8:4f:f0:10:65:d3:76:e0:60:2a:ff:04:84:67:
94:dc:95:33:8b:2e:03:c0:61:f8:fa:a4:29:e0:54:74:be:05:
b7:50:20:9d:1f:a2:64:04:3c:8b:c3:04:c7:7e:43:b8:22:35:
fb:2f:3a:6e:79:4b:c3:34:df:3a:85:2c:12:75:8a:70:02:ff:
f2:e6:75:ee:64:34:fd:7d:30:c5:d6:0a:89:57:1b:21:00:f9:
ca:c4:2f:63:82:bb:f8:b9:a3:f6:10:48:a9:7c:e9:51:0c:44:
a6:1d:83:3b:c4:96:d1:be:27:d6:e1:7d:fd:cb:11:84:db:54:
8d:7b:9b:9c:d2:cb:a2:e7:3e:8d:55:a8:17:c0:52:8a:9e:41:
2e:22:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:59 2026 by rpki-client