Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: h/hsgk8Xyh7oFB67ehRrKCe5RnWDbb9JNqCgHz/p1ro=
Subject key identifier: 4F:BC:5F:72:40:95:E8:A7:31:34:C0:41:1E:19:7A:13:66:A4:28:01
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 019CAC103E8A7787FCFF47D0DB900B19B357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: +DOs2WYK5pU5C8jemC8QW9oVp+c7y8F2UbmjwAq1MIE=)
2: p_L2QpRj3ttW5zYJBodD2QWnHQk.roa (hash: jJxb3YNiA4DSQOly6eBKE2Fc+ul2//HbGqi6YUq+XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3e:8a:77:87:fc:ff:47:d0:db:90:0b:19:b3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=4fbc5f724095e8a73134c0411e197a1366a42801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c9:1a:a8:91:4c:fc:13:6a:99:b6:39:73:f8:
35:01:d5:d9:7a:51:84:41:af:e6:08:5c:51:a1:8a:
2e:21:68:21:03:fc:a7:a1:ec:c4:0b:45:49:60:5e:
ea:0e:9a:6f:80:7d:ff:c0:1e:29:e2:fc:7b:41:01:
39:89:56:04:85:42:ee:b4:06:0c:4b:65:e4:10:cc:
e6:e9:f7:cb:33:97:3e:9b:5f:fb:cb:28:66:72:3d:
6c:49:21:57:7f:61:da:d5:e3:f7:d9:44:26:a1:a8:
c8:92:22:2e:e6:8b:67:43:7d:62:db:0c:00:6e:3e:
f9:ac:b7:af:64:1a:3f:e8:6e:ff:81:f0:4a:bf:cd:
81:19:f9:67:23:93:c8:f5:76:b5:c9:f5:3e:ff:0e:
0f:98:a1:d0:35:ae:7f:bd:41:fd:0b:20:37:56:47:
9f:e8:0f:c9:db:cc:d6:8c:e1:26:d1:6e:e3:ae:6c:
a4:31:2e:09:e3:2e:5d:ef:09:d7:6d:be:09:7c:15:
4d:76:67:f6:3d:04:75:c8:e2:c3:fd:bc:6b:77:55:
5c:0c:26:f7:42:d7:0c:5e:f3:48:fe:96:72:83:f5:
18:5d:36:46:96:9d:46:85:22:87:af:05:ea:28:1f:
66:9c:c2:34:1f:e3:73:67:c4:70:ae:15:ed:cd:9e:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:5F:72:40:95:E8:A7:31:34:C0:41:1E:19:7A:13:66:A4:28:01
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a3:fe:71:92:9c:9b:1a:51:6b:82:92:b0:31:cc:38:26:1c:
97:8c:16:7d:ad:6b:3d:56:f9:55:5a:64:43:d7:cd:95:4c:f1:
36:b8:78:e8:bf:a0:ba:92:48:a7:32:66:f4:7d:f6:c3:25:78:
d0:5c:cf:d9:ee:8d:a1:56:89:ec:ff:7a:a8:ab:fd:cb:9a:a2:
f6:af:b1:c0:c0:c5:ea:0c:a3:5c:19:9e:1f:29:fc:3f:1b:dd:
e3:ff:63:bd:ab:e4:d1:2b:00:c3:89:4c:68:e6:10:4d:44:a0:
1f:25:02:5b:88:1a:54:28:b9:00:b2:52:0e:4f:05:67:08:4d:
5e:07:67:2c:3f:e4:99:b7:eb:c0:50:32:81:b8:56:39:91:66:
af:1c:60:a9:34:b7:3d:f5:42:a0:f1:7b:18:ce:f6:16:6b:db:
09:02:c0:f7:36:99:44:1b:7a:1f:fb:30:16:bb:dd:3a:69:a0:
b1:23:5f:8c:e9:8d:c4:b6:55:25:9f:58:84:78:83:ba:1b:60:
4e:2b:70:70:ed:69:af:91:a9:f8:d4:1f:15:c8:3f:43:86:2d:
32:ba:36:40:33:a8:c3:0e:5b:b6:46:73:24:2f:37:4e:eb:59:
44:22:d6:58:24:18:cc:4d:a2:81:c1:20:46:b5:f2:3f:2c:d3:
c8:56:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:18 2026 by rpki-client