Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: 1CpIvrbjUr6JS4UIxQi14VoYd5Out9n1Vx/TVy2Ngt0=
Subject key identifier: 9C:4A:99:AB:DA:76:62:D7:8F:59:96:B0:97:EA:0D:F7:D2:E4:BC:9D
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 01A08AC380674E68479217DD1568EAB31474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 14FA
Signing time: Thu 10 Sep 2026 10:01:03 +0000
Manifest this update: Thu 10 Sep 2026 10:01:03 +0000
Manifest next update: Fri 11 Sep 2026 10:01:03 +0000
Files and hashes: 1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: T7hjcx6GFCrb88mcDK5Dn1q1TqBJDh3t4zM9EjPyp8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:80:67:4e:68:47:92:17:dd:15:68:ea:b3:14:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Sep 10 10:01:03 2026 GMT
Not After : Sep 11 10:01:03 2026 GMT
Subject: CN=9c4a99abda7662d78f5996b097ea0df7d2e4bc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:dd:05:5d:f2:40:9f:c3:22:12:f2:e5:37:
80:e3:bf:ef:a4:02:7c:b5:7a:82:41:e5:03:83:94:
b3:e4:48:5d:47:40:a5:b9:c5:be:8a:c2:ab:08:9f:
bc:77:c7:24:9b:58:f8:bb:7b:28:7a:41:26:e6:35:
4a:2d:2f:50:da:6b:18:8f:1e:a1:ef:ed:41:41:44:
de:f3:11:f2:a8:e2:46:ea:c1:c4:de:b8:4c:c4:44:
20:3f:c2:e6:da:70:1f:25:75:2c:81:f9:da:6f:18:
a9:71:a7:1b:9d:2a:2d:25:30:44:fe:60:ee:32:6a:
87:f3:61:cd:c8:41:58:ad:e9:8a:2c:29:17:39:a8:
ec:11:fa:71:d1:47:ab:c9:4f:dd:7f:12:3b:55:cb:
02:8f:63:cc:2f:79:14:e9:7d:fb:8d:c9:28:67:d6:
ff:d3:58:27:5b:6c:d6:0c:dc:7a:e7:aa:73:0e:bc:
df:b4:f5:b1:c8:87:98:65:5e:d1:6c:c8:b8:c1:98:
8b:dd:21:79:8f:f8:0e:34:8b:c5:29:7a:4f:14:85:
80:35:5a:9d:07:ac:c1:52:ba:bf:af:4e:1e:29:46:
f4:3e:c4:04:8d:5b:b4:41:72:2d:c1:3a:cc:94:34:
d7:f4:30:55:be:2c:05:38:09:d3:10:75:a9:b8:f1:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4A:99:AB:DA:76:62:D7:8F:59:96:B0:97:EA:0D:F7:D2:E4:BC:9D
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:65:7e:d8:84:a1:f4:d2:b7:c6:13:3a:57:db:b4:ee:b6:7e:
7d:14:3e:7d:05:06:a5:a7:cc:23:fe:e6:56:a7:a4:c7:0f:76:
d7:33:74:5c:17:7b:8b:77:21:19:30:fc:a2:fc:77:02:51:a9:
c7:3f:8c:2a:cb:19:aa:88:7b:57:9e:c5:28:e4:4b:76:29:da:
e0:0e:37:d3:b1:7d:bc:95:b6:7c:0d:62:bc:4a:92:18:53:3d:
d9:95:02:a4:c9:89:13:73:67:47:c3:2c:6f:6e:29:bb:48:7c:
5b:93:ab:c2:86:fc:0d:ec:18:8f:f6:a8:3f:14:85:e9:37:48:
34:76:de:a4:68:89:30:da:2c:66:50:4b:f0:ed:10:11:b7:e4:
96:4a:82:25:dc:7e:8a:e9:dd:21:85:d6:de:c4:14:d7:b3:aa:
7e:ef:05:ac:68:bf:f8:b7:d7:eb:71:97:b2:85:22:f0:4d:37:
67:23:5f:a7:3d:10:bd:fc:72:ed:7c:32:ec:66:c9:9c:9c:57:
80:7c:49:b1:58:a1:2f:f8:e3:c4:2c:df:c7:41:96:ed:4c:16:
18:f3:4f:0a:08:a6:7d:9a:5f:17:fa:85:ec:88:65:cd:c9:b3:
1a:c5:34:5a:9a:a6:4e:c1:6c:36:67:5f:20:65:9f:8c:9a:36:
b3:00:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:37 2026 by rpki-client