Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File: jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier: kw8cvlLIDSG5BA7qTucjfi/Z4ErLsQOuw9pY1ErSxaI=
Subject key identifier: CB:49:05:ED:6C:4C:38:A8:96:F0:FF:18:2E:34:21:42:45:86:1F:AE
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer: /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial: 019D386553CBB3242D76330359AA60D4A809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number: 1598
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: I53C5+ewaegzjToYv+FT6sLrsNxV7UpwEhPzYZRWVtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:53:cb:b3:24:2d:76:33:03:59:aa:60:d4:a8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=cb4905ed6c4c38a896f0ff182e34214245861fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:9e:a9:a9:62:49:7e:17:01:f1:7e:ad:33:
3d:d7:9b:b1:a2:3f:da:bf:9a:9e:41:16:d4:6a:55:
2e:1c:a5:3b:34:c3:cf:68:bc:a1:68:35:aa:fa:ca:
34:f6:f0:56:ca:9b:5b:12:b7:d8:22:12:b9:58:0d:
aa:40:08:8e:83:81:c0:81:9f:4c:8d:86:45:9a:7d:
44:0c:8b:83:d9:61:c2:26:0a:09:50:47:04:d5:7e:
cc:39:f0:5f:be:8b:1d:76:c3:ca:4d:66:d6:01:81:
8f:01:bf:3c:9b:76:a5:82:21:af:49:df:82:a7:66:
80:6c:f1:ad:e5:3c:ad:f9:ac:a7:00:91:0d:c3:95:
4b:fb:3e:a3:ae:38:b4:87:f6:ab:9f:a1:6b:51:97:
2d:3f:5c:2e:5a:08:b3:05:4e:51:4c:9c:45:4e:55:
5c:a8:d3:f9:09:61:36:a3:da:7a:cd:15:36:58:94:
e6:64:83:63:c6:52:7f:19:78:85:ce:77:75:90:e9:
e5:71:52:8a:b6:34:44:3c:d8:b8:d8:89:f7:52:a8:
9f:cb:42:ac:ff:df:36:b5:71:eb:0a:56:29:a5:ff:
46:ec:d8:28:d6:45:4a:a3:cc:ae:2f:1d:5f:70:e7:
fc:67:9c:36:c9:d4:10:ac:3c:a6:75:66:5f:c4:05:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:05:ED:6C:4C:38:A8:96:F0:FF:18:2E:34:21:42:45:86:1F:AE
X509v3 Authority Key Identifier:
keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f2:88:75:6a:f5:dc:2e:7b:4a:ff:32:6f:ff:a9:ee:9b:c9:
99:f5:91:e2:e6:49:dc:92:89:d0:6d:b0:32:57:47:57:74:89:
3a:90:b8:f6:6e:51:ca:a4:0d:79:03:de:9d:4a:80:c4:42:06:
bf:d9:39:22:d9:ee:8c:21:be:b7:ed:ec:61:16:a1:7e:d3:ae:
5a:d3:4e:dc:4b:97:eb:c3:cb:b8:14:a4:2a:f3:f2:b9:cd:30:
5e:a3:22:c1:08:d3:d3:eb:c3:17:8d:d0:9c:ce:f6:f7:16:1c:
b3:18:af:77:fd:52:d2:fb:22:3a:f4:ae:16:1f:b4:ff:79:19:
e8:c3:61:ca:dc:38:4a:13:0b:b1:75:f4:bb:ac:4b:36:d7:fc:
a5:29:cb:b9:f1:46:04:9c:c1:38:4b:9d:46:01:4f:0b:64:6f:
4f:21:9a:27:25:29:c0:47:74:51:d2:3e:65:6a:1a:9e:96:14:
09:20:44:cc:81:16:9e:dc:15:27:b2:c6:4f:2b:21:46:e8:97:
52:bf:c7:da:78:37:7c:72:1a:79:6f:bf:80:02:4e:73:ce:58:
a8:17:e7:54:cd:27:3e:ef:42:55:0c:af:5a:2b:51:22:45:a8:
72:d9:1f:51:20:65:48:d9:88:47:8f:26:3f:64:1b:89:4f:d5:
5c:94:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:07 2026 by rpki-client