Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: a7N8TsoFVL99dnOkhva3qRURRUskWoKw+JE30dvrKG0=
Subject key identifier: AA:16:F5:F8:CB:EA:AB:48:54:83:DE:3C:AB:62:23:C4:68:61:C1:43
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019CABD9433B770DC307E8108214EBA7E7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 161C
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa (hash: LEtUsnx2enz1xXPb75ExcnyoapD60AYn9bvDFjrUga8=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: lEhSz0JUMcz4q3pDBjfSuJlgYINrykRCTXWbqwJxXnI=)
3: vQVu0E2WyUWmteW1X5tAGdPGMFs.roa (hash: DDmHO+xrIG9LaR66B2Dm2O9/yty+KAgFsRFZqnf/WgM=)
4: w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa (hash: u8EvZ7sZjq6P1Wyu+J9n9xS5J9Sdw9tfnALdi/q2jLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:43:3b:77:0d:c3:07:e8:10:82:14:eb:a7:e7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=aa16f5f8cbeaab485483de3cab6223c46861c143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:cb:2f:3d:e4:ac:16:26:bf:13:1a:7c:e5:
b2:77:25:c2:4b:c0:9d:3f:e7:9d:ef:83:54:0e:a6:
bd:64:b4:70:34:3e:e7:ad:e0:da:a4:f4:14:cc:1a:
60:8c:e8:b2:fe:51:13:37:a2:e6:80:25:11:09:3b:
e0:3d:f4:23:ec:7c:6d:9f:a8:89:c0:9f:92:8b:6e:
9d:6a:49:f8:67:3d:a6:bc:92:1d:64:f6:b3:38:1c:
e0:e5:43:e0:ad:55:48:ec:cd:9c:51:f0:9c:cb:c2:
50:56:4a:98:3c:c5:84:c4:ef:c9:02:04:21:cd:12:
07:9f:c4:18:f3:26:d1:bc:54:f0:ea:28:ff:89:50:
3d:92:f0:b7:c4:05:dd:13:0a:76:3c:0f:1c:db:d6:
6b:98:05:47:d0:00:d1:97:33:d1:f3:68:fc:39:16:
87:c5:65:ec:e9:55:45:a7:98:80:45:72:47:57:d6:
9e:7c:74:5f:ce:f8:9c:87:9f:c8:73:e3:df:16:7f:
ad:09:23:bb:59:d5:cd:bf:02:76:c3:4b:92:8c:de:
37:54:9b:4d:62:9f:73:8e:a5:ca:d7:d8:2b:64:5a:
35:7f:13:d6:39:6f:31:3e:62:1c:04:bb:b0:7f:79:
f7:b6:88:90:3c:77:f6:be:d5:f4:f5:74:fb:b1:02:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:F5:F8:CB:EA:AB:48:54:83:DE:3C:AB:62:23:C4:68:61:C1:43
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fb:da:c0:a1:6f:3f:1e:73:e5:2f:a8:fa:98:18:41:7c:a9:
c5:fe:5d:96:46:26:81:eb:5a:32:65:60:d7:9f:fc:8b:57:32:
0e:c2:ca:b8:78:a4:80:b6:45:8a:91:b1:f0:62:f5:04:b5:3f:
5f:9b:ae:8a:b2:10:89:de:b3:6d:84:12:9a:a0:6d:14:8a:87:
e1:6e:7c:57:74:b4:6d:ac:43:1e:80:4a:ba:22:9f:09:76:61:
36:f0:03:b9:aa:3d:0e:47:a5:32:e0:c6:84:3c:24:a7:0c:b8:
0b:25:b2:8d:37:52:d7:b2:0a:c8:84:b3:a4:f4:a7:79:51:f6:
b6:00:96:b6:db:b9:86:5b:fe:63:f4:dc:a2:6a:ce:68:57:61:
ea:fe:a5:22:14:07:17:2d:23:c3:30:65:1a:fb:74:98:db:05:
51:23:a5:bc:a1:50:87:5c:cd:b8:cb:a2:6a:7a:88:47:9e:2f:
a1:a2:94:ae:68:48:04:10:4f:b3:e9:51:d2:7c:c3:51:ab:d4:
c9:b1:1a:af:7e:ce:d6:b7:7a:bf:75:40:ea:cd:1b:e9:6e:73:
7e:5a:34:bc:c9:4e:cf:c6:a8:3c:60:2f:73:07:94:be:60:ae:
b9:fc:26:de:68:54:35:30:bc:66:4b:1f:a8:31:fb:d4:8e:98:
f6:43:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:55 2026 by rpki-client