Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: iGyJWacaL9kOm12INgOED8WwTNeEeTHEwHSWf77JR7k=
Subject key identifier: 36:49:4C:89:F5:0D:45:D7:CB:BC:E9:3E:85:BF:D8:B6:46:1B:65:BF
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019FA2970C21C62BFE41D95896268541D4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 08:00:35 +0000
Manifest this update: Mon 27 Jul 2026 08:00:35 +0000
Manifest next update: Tue 28 Jul 2026 08:00:35 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: gLn/6qb0u9TAGQnmUxBRW0esTHhlaAP4xpSbRDuoyv4=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:0c:21:c6:2b:fe:41:d9:58:96:26:85:41:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jul 27 08:00:35 2026 GMT
Not After : Jul 28 08:00:35 2026 GMT
Subject: CN=36494c89f50d45d7cbbce93e85bfd8b6461b65bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:64:b9:30:e2:dd:9b:c7:e5:ab:4f:6d:13:
60:de:60:e6:9e:da:62:10:16:f8:f0:5b:db:aa:31:
64:a4:52:78:c2:81:b6:66:30:18:20:7a:99:80:e1:
a5:a7:fb:c2:04:8d:79:c5:11:ac:30:d3:26:ba:ad:
6d:2f:2e:2c:ec:4d:2f:4e:0e:ca:1a:80:d6:43:5d:
c0:40:1c:e8:46:df:b1:9a:16:36:b0:dd:e3:f3:90:
e5:1f:d8:23:b8:25:0a:af:f8:c6:4b:81:14:18:a8:
cf:06:17:c6:e8:e8:d5:ca:da:53:0b:59:26:f1:9b:
c0:8f:75:0e:dc:d6:5e:76:67:86:32:e7:ac:92:d4:
a2:ac:93:ad:47:5e:e3:bd:81:ef:55:8a:e8:68:90:
bc:f4:71:0a:91:65:a8:04:ad:cf:af:99:27:27:2c:
fe:8c:78:2d:a0:f4:7a:1d:80:3a:29:f1:7f:59:05:
50:cc:45:0f:83:7d:f7:ec:91:ae:74:a2:a1:1a:3b:
cd:0f:62:7b:94:10:a9:e4:4f:4f:45:57:3f:3e:1a:
22:fc:fd:3b:49:61:a5:90:d4:e8:1e:ea:1c:60:34:
4c:a5:3a:09:bf:d0:db:62:3e:88:5f:a4:88:d4:41:
f9:94:07:1c:3b:3a:01:06:88:1e:3c:3b:74:b0:e4:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:4C:89:F5:0D:45:D7:CB:BC:E9:3E:85:BF:D8:B6:46:1B:65:BF
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b3:82:44:91:ec:46:b8:56:a6:69:3e:a2:55:fb:ab:60:1c:
bf:0a:7f:a9:36:55:5c:92:ba:14:4f:f2:81:a2:73:d5:f2:33:
b9:74:4e:19:ef:3e:2c:05:1f:b2:ab:84:eb:9a:d3:e5:30:07:
da:76:0f:fa:7c:e3:dc:ea:9c:fb:4e:17:c7:e3:57:66:54:f7:
10:f3:b4:34:37:d3:f2:f4:65:03:73:60:9c:5c:41:46:bd:73:
cb:37:6c:d0:18:0a:ca:48:10:71:dd:00:50:ea:af:f2:00:fd:
67:70:9a:c2:50:9c:fb:ef:df:f6:ac:23:43:2a:f8:a8:25:48:
53:7b:64:1b:78:5f:52:64:6d:14:2c:6f:ea:56:b4:76:54:cd:
1b:b0:19:ed:90:42:18:84:bd:1f:cf:57:3f:43:d8:20:38:4a:
c7:72:c2:5a:e2:cd:35:78:b9:d8:3d:a6:f1:c6:2f:d3:1d:88:
35:04:ff:a6:70:7c:49:52:3f:42:4b:fd:d8:42:7a:42:5e:6d:
53:7e:8e:ac:7b:ac:fb:51:06:62:b3:c9:d8:fd:23:76:8e:01:
7b:49:bd:26:26:91:33:ed:a6:2c:96:d0:0e:46:d3:54:ce:b6:
ba:85:0e:b3:5b:93:67:0e:b0:ae:c9:3a:a4:37:6e:ee:41:c9:
fe:30:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:50 2026 by rpki-client