Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: vO865So2ZSICVMZOISNBInwMQrJgdo7YLrbTGXLZjQc=
Subject key identifier: 81:DA:8F:AE:DD:3D:A6:C1:CC:88:27:21:B2:38:1A:10:DC:C7:6A:8D
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 019CAFEC81C7C31F6D9A03611DBB495B73D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 0274
Signing time: Mon 02 Mar 2026 19:00:38 +0000
Manifest this update: Mon 02 Mar 2026 19:00:38 +0000
Manifest next update: Tue 03 Mar 2026 19:00:38 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: 5xLu/MKpDkRua+4CRPxIDN4wFOAgoK/Bq5nzwu3aeaE=)
2: ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa (hash: VCOZaoQKdaHYdzLeM6vy+vaxjALR2cSdXmffmC82vmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:81:c7:c3:1f:6d:9a:03:61:1d:bb:49:5b:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Mar 2 19:00:38 2026 GMT
Not After : Mar 3 19:00:38 2026 GMT
Subject: CN=81da8faedd3da6c1cc882721b2381a10dcc76a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:02:e6:cf:b2:f4:4f:2e:07:9a:a1:fd:e7:
0c:ec:c3:12:94:dc:28:8d:60:2e:e7:2e:71:67:f3:
84:93:ad:6d:4c:6e:79:e6:43:c9:fa:df:8e:91:21:
49:91:fd:69:f9:d2:61:ad:0d:b7:c7:4c:49:de:eb:
0c:9a:9e:5a:58:5e:3e:3d:a2:05:52:4f:b6:f6:7b:
45:a3:b1:57:ab:4a:eb:08:cd:be:36:ee:40:7a:f4:
d9:cd:ff:4c:0f:5f:24:ad:aa:af:91:aa:f1:97:a7:
e7:05:64:a4:0a:40:32:23:99:52:41:97:4d:7b:c5:
78:04:6d:61:3f:7d:d0:6a:99:22:d0:d3:d7:e8:39:
26:f2:c0:85:a5:3c:31:97:ec:86:93:cd:87:75:75:
3b:1d:fb:a6:c2:db:80:57:09:31:7d:d8:0a:26:c9:
84:2e:9c:99:27:8a:e1:a9:8d:9a:5e:66:2d:7c:46:
e0:62:5f:ba:49:9f:df:d3:58:85:85:d6:f7:79:86:
b0:e2:c8:bd:97:bd:fd:71:73:8c:37:81:84:05:b8:
79:9a:11:e9:87:15:8d:a1:71:1a:cf:b5:86:dd:db:
0c:06:63:c8:0b:78:3b:37:af:1e:6e:ad:bb:f8:70:
0f:f9:8a:89:5b:32:2c:49:f3:84:c7:0f:40:23:7c:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:8F:AE:DD:3D:A6:C1:CC:88:27:21:B2:38:1A:10:DC:C7:6A:8D
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:96:d3:cf:73:60:7f:f9:b2:43:a0:d0:98:9d:c7:08:bf:a0:
53:bf:df:39:f6:2f:0a:90:ae:9e:6b:ce:84:ae:0b:ce:fc:f0:
d6:83:b2:87:46:8f:bd:f2:de:87:4e:a1:35:98:32:e3:01:dc:
38:cb:93:0f:f0:87:c7:08:32:50:fd:f5:2e:21:64:b8:a1:5b:
63:dd:fc:a1:a9:78:1d:3b:4a:6e:06:31:f2:fe:d1:74:33:b6:
9f:3f:9a:71:1a:a6:67:c6:87:d6:ce:ba:7e:7c:4c:7a:5f:69:
08:81:3e:78:7d:66:71:05:9a:9e:cb:45:f8:a9:c7:b3:92:e4:
b7:a9:fe:fd:8c:f2:42:8e:2a:5e:92:a3:d1:64:7c:2c:e0:05:
99:35:82:89:d6:bf:26:2a:47:1b:9c:d1:79:b9:5c:b7:f0:8b:
ac:ab:98:18:77:d8:e1:53:b9:57:49:9f:13:3f:dc:99:63:3b:
f3:13:65:ce:58:ea:f7:a1:64:d2:d9:0b:e1:96:2a:70:64:82:
a2:6f:1b:88:78:75:5a:ad:d9:bf:89:3d:14:91:a5:3b:6b:14:
0f:71:3b:6e:6a:71:f2:d7:a1:ee:51:33:6e:44:a3:64:cd:c6:
55:0e:29:15:7a:f0:d6:6f:af:81:d9:7d:ef:8d:4c:83:b0:1a:
fe:79:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:55:03 2026 by rpki-client