
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: SPk60ipIiJx9Fhn8Whqw5a/KjvGSEkHvecUq6qhgqv4=
Subject key identifier: E2:38:60:EB:63:15:4E:09:C8:D0:F5:4D:32:14:61:D2:E4:BB:D7:7B
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019D9961F009DE79AED08BE46F2CAD4AB773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 1697
Signing time: Fri 17 Apr 2026 03:00:25 +0000
Manifest this update: Fri 17 Apr 2026 03:00:25 +0000
Manifest next update: Sat 18 Apr 2026 03:00:25 +0000
Files and hashes: 1: hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa (hash: LEtUsnx2enz1xXPb75ExcnyoapD60AYn9bvDFjrUga8=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: Q8HDMJv42YzDw6CfVMbSkQEP2GSKlwwHepXTvvuehOA=)
3: vQVu0E2WyUWmteW1X5tAGdPGMFs.roa (hash: DDmHO+xrIG9LaR66B2Dm2O9/yty+KAgFsRFZqnf/WgM=)
4: w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa (hash: u8EvZ7sZjq6P1Wyu+J9n9xS5J9Sdw9tfnALdi/q2jLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f0:09:de:79:ae:d0:8b:e4:6f:2c:ad:4a:b7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Apr 17 03:00:25 2026 GMT
Not After : Apr 18 03:00:25 2026 GMT
Subject: CN=e23860eb63154e09c8d0f54d321461d2e4bbd77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:fe:e3:c6:0e:e9:6d:50:0d:d5:04:5a:9d:
42:a5:b9:10:aa:a8:4a:67:00:a6:c9:b5:47:68:0b:
18:c7:86:1d:78:e7:9e:d6:d2:1c:22:27:10:c2:aa:
40:d8:87:e5:2e:4d:d9:22:ca:e5:9f:93:31:af:f2:
fe:63:23:32:ba:a4:23:d2:28:c0:6c:0c:05:dd:a7:
55:dc:63:97:ad:c6:cc:a6:a6:5c:65:c7:c8:9a:73:
ae:de:e7:82:ed:01:c0:4b:11:6f:f5:be:cf:2a:1f:
94:51:da:f0:e6:2f:70:b1:ac:f2:b6:09:24:b3:d1:
97:b7:39:78:f7:78:22:7d:53:28:74:12:dc:49:37:
98:c4:2f:17:f1:1a:51:6a:1e:7b:fa:d2:42:e3:b8:
a2:be:1c:ca:0c:ba:2b:4f:da:c7:49:0d:57:39:40:
69:e0:57:1e:db:e9:ba:7f:53:ac:c1:a4:49:f8:de:
db:32:38:d8:7e:2f:9e:0a:56:4b:95:d2:0e:9c:e1:
a0:98:f7:b2:2d:cb:42:6a:9f:47:5c:63:4e:e7:0f:
29:f5:f8:ba:da:2c:c0:cc:33:8f:61:31:2c:24:de:
cf:9c:17:af:12:12:13:77:9a:36:1e:16:03:2c:e5:
d5:cb:10:6c:24:88:53:f4:e4:c5:0c:17:ea:cf:d3:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:60:EB:63:15:4E:09:C8:D0:F5:4D:32:14:61:D2:E4:BB:D7:7B
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f6:72:41:7e:99:6e:57:ad:68:19:83:cd:ee:d9:ad:a5:6c:
e8:55:b8:89:01:c3:05:ce:be:f3:b3:3b:b1:95:63:18:cc:51:
64:08:ae:f6:86:89:30:78:81:55:5d:dd:17:3b:ef:4a:35:b7:
08:e0:c8:d8:73:44:65:67:3c:ef:44:9d:0d:a3:7f:5c:0d:f7:
13:c2:bb:7a:c0:9a:25:05:c3:de:35:cb:a4:ac:c4:b2:cd:c2:
8a:ff:75:5a:e9:d3:3d:fd:20:a4:05:e5:2a:04:bb:b4:14:71:
88:c3:21:91:8c:2b:43:18:a4:b8:3f:aa:06:18:de:ac:2d:67:
8e:c2:6a:83:89:2d:b7:22:ba:b2:19:82:82:b2:63:63:98:94:
4a:c8:5b:54:87:13:3d:6e:bb:b6:ca:5e:fc:24:8b:47:f2:b1:
b4:ea:89:73:2e:47:2b:00:0f:a0:99:5f:85:4a:b0:c3:11:8d:
5b:d4:c2:85:07:af:bc:0b:ee:b1:5f:01:5e:71:c7:a2:5e:6d:
f8:0a:17:d3:a8:d1:b4:82:0e:23:b8:ef:fd:87:7f:25:d5:0f:
96:15:ce:c9:ec:48:c2:f5:72:1a:74:13:ad:d7:24:2d:02:5c:
61:35:0d:0a:22:f5:fe:0b:9b:45:d3:47:8e:44:9e:0b:80:80:
ee:a0:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:21 2026 by rpki-client