Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: af/6T9CNX8jZtAMvF7VRSyGo7NB21iU880FVJDMA97M=
Subject key identifier: 66:5E:0D:23:5E:91:E9:D2:3D:2B:0C:86:DD:FE:0D:3B:41:C5:D9:5F
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019CAA58854B259442C56E3D326CC4464493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1622
Signing time: Sun 01 Mar 2026 17:00:53 +0000
Manifest this update: Sun 01 Mar 2026 17:00:53 +0000
Manifest next update: Mon 02 Mar 2026 17:00:53 +0000
Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: h9eStBaTUYbFrWA3Lk85KGqRl3jwkPXe60l/p6eri64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:85:4b:25:94:42:c5:6e:3d:32:6c:c4:46:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Mar 1 17:00:53 2026 GMT
Not After : Mar 2 17:00:53 2026 GMT
Subject: CN=665e0d235e91e9d23d2b0c86ddfe0d3b41c5d95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:35:95:61:5f:ec:fb:71:f1:45:aa:cc:dd:
2b:43:72:dd:c2:fb:20:81:08:ca:44:49:bd:43:c8:
30:d2:29:d7:38:6b:05:c3:c6:50:8f:67:b9:b3:ab:
ac:ff:39:8c:e1:e8:c0:f0:d5:97:ac:b4:7c:91:53:
e6:7a:92:d8:e8:74:4b:30:2a:0e:ea:1c:34:40:21:
ba:4f:cb:9d:29:e5:91:c1:16:7a:71:8c:b1:c9:0c:
51:93:1d:ee:cf:1f:ea:0b:e1:d5:29:a1:cb:2f:fb:
7e:59:cd:19:7b:8a:ca:bf:fe:14:f7:89:74:e7:6b:
15:c6:47:df:94:3b:01:67:4b:9f:50:e5:d6:93:29:
ef:65:72:8f:03:90:5f:d8:cf:f8:f3:fa:a2:97:59:
d7:34:b7:a1:02:35:3b:e4:09:94:c5:b4:fc:c1:45:
e3:a9:e1:ec:ed:cd:a7:ed:e6:e4:f5:12:9a:89:e2:
d3:9e:0f:0e:72:40:78:50:c9:67:7c:6e:46:75:89:
1a:3b:1e:87:61:de:3d:a7:60:7d:0d:a5:b9:f3:74:
d9:b7:0b:89:77:8d:8f:80:3c:25:ce:c4:fc:cc:be:
e9:b1:0f:1f:8d:92:8d:73:17:c9:91:ec:d2:01:4d:
9e:c2:b4:e4:03:e0:ee:77:c1:cc:64:9b:f2:b8:78:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:0D:23:5E:91:E9:D2:3D:2B:0C:86:DD:FE:0D:3B:41:C5:D9:5F
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:72:5c:fb:8a:3a:56:01:99:f8:5f:36:ff:75:c2:9b:b6:86:
15:d0:9b:25:91:25:b0:c5:2a:c6:9e:5e:85:5b:22:45:e9:5a:
42:ad:ba:a6:56:be:bf:d8:3a:ff:34:7f:cf:50:08:f6:c6:94:
9c:8a:72:ce:0a:c1:9f:12:38:56:8b:ee:a6:88:bb:a5:8f:c5:
9e:61:9e:25:8f:1e:60:b6:4a:83:da:03:7e:5d:dc:38:26:bf:
a2:92:90:13:30:e5:86:4d:37:8a:ef:05:45:d6:fb:ae:ff:fb:
36:4c:bc:ff:dc:fa:11:2e:d4:d9:ca:a1:80:33:e8:84:be:80:
4a:05:fe:62:93:f4:e8:b6:0a:b4:ec:ab:e3:37:85:cd:8d:4e:
75:a2:53:a0:27:31:2b:1a:80:71:1b:13:70:c2:3a:ac:e2:e2:
bd:4c:8b:b9:9b:2b:52:2d:cd:66:30:4f:36:f0:54:e9:45:ff:
30:98:df:3b:56:24:4d:2a:a4:e7:70:fa:0d:21:9f:10:5d:09:
eb:d1:c0:2d:4f:cd:d6:db:73:69:9d:8b:f4:92:82:e2:59:4f:
f6:f5:37:c2:c2:73:b7:85:43:aa:b9:d3:9b:5f:03:50:d1:af:
b3:a5:2f:47:71:a9:93:bf:ea:2b:69:a4:f3:b9:ce:36:a0:e8:
f8:f0:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:20 2026 by rpki-client