Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: x2UeNkxMAB/nBkXVBFf+MxMhQRK3RAjYwxgeRWPLdBU=
Subject key identifier: FE:7B:9E:01:CB:44:72:45:3C:5A:DE:13:72:06:C2:7C:41:FF:E7:61
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 019D9D759CF0F9A9F16FDC9C0AA1A67E6457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 02EF
Signing time: Fri 17 Apr 2026 22:00:23 +0000
Manifest this update: Fri 17 Apr 2026 22:00:23 +0000
Manifest next update: Sat 18 Apr 2026 22:00:23 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: d1gh4pBEpUrBZf0v5r6JVFQgM8Vpep36D1lvJl2HBgQ=)
2: ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa (hash: VCOZaoQKdaHYdzLeM6vy+vaxjALR2cSdXmffmC82vmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:9c:f0:f9:a9:f1:6f:dc:9c:0a:a1:a6:7e:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Apr 17 22:00:23 2026 GMT
Not After : Apr 18 22:00:23 2026 GMT
Subject: CN=fe7b9e01cb4472453c5ade137206c27c41ffe761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:22:58:1c:ee:9f:05:4f:79:ca:ec:f8:0e:
95:d0:89:c5:65:b6:82:51:f0:5d:cb:99:37:bf:0c:
a6:cf:e2:6c:0a:a9:7a:f6:3b:d1:55:2a:ca:4d:36:
9d:22:4d:17:ab:65:b5:5c:1f:d6:02:b3:53:9b:0d:
41:68:2f:9b:de:1f:4b:ea:93:9c:0f:a9:df:dd:e6:
7b:3b:fd:f8:34:eb:42:d3:dd:88:e1:23:1b:01:4b:
47:1b:6e:1d:58:c9:df:e3:6b:34:26:2d:68:a1:48:
dd:b1:73:5f:23:04:86:8b:5f:78:e4:4c:01:e0:19:
dc:73:b1:ce:30:22:27:58:61:b2:05:06:3c:f0:78:
99:00:b4:7f:f5:81:ef:15:2e:23:ac:84:ed:24:28:
d0:cf:a6:30:7d:3c:b6:6a:f8:35:9d:f9:5f:31:d4:
8a:f8:e5:fe:3f:cd:1c:b1:ec:5d:52:d5:db:08:5a:
43:2e:e4:0f:d7:2f:a5:7a:a6:4a:06:4e:2e:2d:b6:
5d:1b:56:66:55:bc:f8:5a:32:0a:fa:01:05:50:40:
1a:e3:70:90:b4:44:e8:fe:8b:ce:9e:85:51:6e:51:
f8:5c:a5:f1:50:1a:d3:6d:f6:e0:e2:8f:e3:0f:c2:
d8:c8:47:b9:c9:fb:32:d7:7c:67:c1:2b:49:f3:bd:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:9E:01:CB:44:72:45:3C:5A:DE:13:72:06:C2:7C:41:FF:E7:61
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:78:f0:6e:d9:77:c5:12:0e:96:25:0b:18:46:ac:64:ab:
69:05:9b:bb:47:be:92:86:39:82:80:47:6d:e5:f5:9f:2e:34:
cf:98:50:5a:8e:c0:48:c3:4d:fa:bc:eb:ce:f8:4c:a6:0b:9a:
e8:de:c0:b2:2d:f9:c5:6e:a3:fa:16:38:50:8c:25:77:2e:d5:
ec:8f:36:7b:83:37:aa:09:a3:03:97:42:18:8a:99:b8:61:db:
4b:2f:19:63:e5:1e:b5:4b:9c:54:9d:4f:ef:68:96:10:65:6b:
c4:cf:ae:15:50:67:a5:8e:c5:89:d5:ea:81:b1:7b:36:e0:73:
6b:f8:48:01:b6:4b:58:e5:d6:8e:f6:1e:87:56:d0:3d:b6:15:
28:dd:32:ae:8d:da:f8:bd:01:e3:0f:a6:83:5d:42:17:4a:c5:
a9:19:c3:4e:a4:40:9e:c2:71:a6:4a:eb:ec:37:2b:70:a1:c6:
75:d2:a2:15:fa:ce:ad:f0:1b:65:2d:db:2f:e3:42:93:6f:33:
7e:57:10:8a:5f:22:a1:b2:b8:11:c0:93:6a:7f:82:cc:b4:ec:
64:28:03:f2:61:93:41:18:fe:e0:db:f1:37:5e:b8:39:40:0e:
26:ff:5a:13:91:74:94:01:f4:6d:5b:1d:42:9a:6c:9c:5c:88:
6c:58:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:40:11 2026 by rpki-client