Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: SYw0xJdK3GRP+oxVF8fWMZ4V8UeL6bUIGCs/2nGv/JM=
Subject key identifier: 14:45:26:10:95:E7:C5:15:D2:6B:D2:53:0D:A1:25:A5:B1:A9:78:8C
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 01A1A4B75DFFA506445DF5EDCBAF0B88F56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 158C
Signing time: Wed 04 Nov 2026 04:00:42 +0000
Manifest this update: Wed 04 Nov 2026 04:00:42 +0000
Manifest next update: Thu 05 Nov 2026 04:00:42 +0000
Files and hashes: 1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 8sxHW6L2FC48fYLCoRINAVIJnSsL5WUeoQlHMq7wzyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:b7:5d:ff:a5:06:44:5d:f5:ed:cb:af:0b:88:f5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Nov 4 04:00:42 2026 GMT
Not After : Nov 5 04:00:42 2026 GMT
Subject: CN=1445261095e7c515d26bd2530da125a5b1a9788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a4:39:95:03:65:24:ec:e5:96:ef:15:b6:5e:
6d:a0:ec:26:9f:b9:04:e1:ca:e5:07:82:e9:7a:de:
3e:5f:40:87:f9:16:33:8d:b8:5b:60:e0:13:9e:16:
e7:ec:1f:fb:df:5b:46:9f:c6:8c:de:23:a4:c2:54:
23:64:29:48:de:93:04:8d:eb:90:23:24:81:11:f9:
ce:87:65:dc:fd:35:42:ad:0c:e5:26:6e:a7:37:12:
0a:61:7f:06:94:28:96:37:23:1e:52:be:0c:25:05:
0c:d0:2c:7d:a4:bd:ef:87:9c:a9:29:f0:cd:c5:23:
aa:c7:8e:59:ed:89:1c:5d:e2:d7:c2:64:28:8e:60:
85:f3:fd:b3:4e:66:ce:1f:3b:3d:61:d2:9e:04:94:
c8:b6:76:de:59:5a:69:27:88:f6:32:5e:93:7a:30:
ff:a9:30:a4:94:4c:87:d5:de:2b:7c:29:2c:4e:e2:
f3:7d:6c:9f:d8:74:1e:ed:69:ab:7b:cc:b0:6e:38:
da:be:b0:9d:18:bd:c9:f1:c3:32:99:b1:0d:bd:db:
17:27:a2:1a:20:2f:c2:84:3b:a3:95:ce:d8:21:6c:
b0:aa:ee:2a:53:6a:e8:0e:78:f7:f4:ae:cd:c7:50:
54:88:5b:74:5e:43:37:a8:f9:67:c8:83:e3:a6:55:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:26:10:95:E7:C5:15:D2:6B:D2:53:0D:A1:25:A5:B1:A9:78:8C
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b3:db:09:a2:13:f4:bb:7f:af:6a:c0:b9:4b:53:05:1c:31:
ef:98:70:b8:09:8e:bb:d8:b5:66:cf:f6:7e:e5:ab:20:f2:fd:
59:39:9c:d6:8d:32:1c:b9:47:fb:f1:f6:57:8c:af:16:e7:e6:
6d:f1:8b:97:b7:ef:04:f0:76:8e:2b:ab:61:aa:4d:35:a4:d8:
4c:72:45:48:a7:96:2a:c2:47:9e:81:66:33:6c:58:f1:4a:d3:
c5:40:a4:a5:57:19:e5:f7:6b:85:97:b7:0d:84:90:e7:be:71:
99:83:06:6c:ea:93:55:08:01:a1:68:33:19:f3:d9:e9:3f:1a:
39:b7:8c:89:9d:0a:ec:6e:7c:12:2d:dd:96:80:85:7c:9e:db:
e3:64:a2:5f:47:7f:2d:9b:f1:02:6e:0c:fb:38:fd:3b:96:ad:
97:8f:7e:2a:7a:88:0b:5d:12:a2:88:dc:86:8c:cf:3d:92:a4:
23:50:8c:2d:74:30:ce:d3:0f:24:71:70:b1:cf:aa:31:bc:fc:
d0:94:14:50:d7:4b:b5:5c:58:ed:35:73:ce:5c:6c:e2:a2:90:
5a:f1:32:f2:49:06:ef:ff:f0:ec:d5:ea:a1:fd:1b:95:4e:4c:
68:95:8b:a5:e4:88:4b:75:38:9e:e6:24:b6:c1:13:45:f5:c2:
68:cc:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:19 2026 by rpki-client