Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: UlXacbdqu4LVEMBBGO9tcoWhEh7GQI3Xx4wBRB1S/Ag=
Subject key identifier: 96:52:61:9E:A9:D4:C8:98:FD:5C:FB:80:86:9A:2D:29:36:DD:3A:D6
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019EB8EAB30082255BCE43CCE84378653577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 23:00:49 +0000
Manifest this update: Thu 11 Jun 2026 23:00:49 +0000
Manifest next update: Fri 12 Jun 2026 23:00:49 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: k/5B8TVziHeurTd02hfSA9KLJYyArxIV1pwsdKxQuQc=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:b3:00:82:25:5b:ce:43:cc:e8:43:78:65:35:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jun 11 23:00:49 2026 GMT
Not After : Jun 12 23:00:49 2026 GMT
Subject: CN=9652619ea9d4c898fd5cfb80869a2d2936dd3ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f8:35:de:e9:7c:92:8e:95:03:6a:3e:66:10:
bd:75:c8:d3:38:e0:6a:7e:57:d5:5f:1a:2f:59:44:
a9:3e:19:a2:50:9d:09:8e:bf:58:2c:65:75:a7:51:
9a:38:fa:c8:32:0c:67:15:14:e8:f6:6a:11:b2:23:
41:a6:ff:9c:f8:7a:01:1b:ba:44:11:07:f7:d2:ab:
ab:55:d2:49:5b:37:5e:42:22:61:d2:12:1f:8a:76:
7f:11:51:9e:5c:cc:ab:75:6e:99:4e:4b:85:25:ad:
0b:e7:c9:04:e9:56:78:f0:5e:11:c7:bb:b1:29:33:
19:da:11:d4:93:59:fd:66:86:9b:de:13:5a:a0:16:
9a:1c:63:a9:3c:40:10:9c:1e:70:8a:8c:ff:90:76:
f2:34:cf:52:f7:7d:c6:96:de:6e:e6:8f:e8:b6:fd:
17:6b:e6:de:2a:8a:c3:e5:dd:2e:3d:42:a9:34:16:
d8:30:b7:aa:fb:47:56:4d:db:e7:af:15:5a:89:8a:
04:a2:2c:37:97:c7:69:c1:d5:fe:3a:f6:ea:52:5f:
2f:1c:7d:fe:40:b4:fb:83:c4:7a:4a:4d:4a:17:43:
b2:2a:99:c0:f7:6f:a8:38:b3:ab:16:25:b8:8f:d3:
ce:fe:da:aa:8e:f6:70:15:0b:ce:15:c7:75:d6:00:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:61:9E:A9:D4:C8:98:FD:5C:FB:80:86:9A:2D:29:36:DD:3A:D6
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:9e:3a:6c:00:51:fa:58:3c:7a:3e:d8:8c:f4:91:01:d7:
1c:a3:60:47:34:d2:51:8d:ca:fa:5e:d6:64:65:b1:05:59:4b:
19:52:c6:36:60:42:a7:e4:2c:58:5e:68:ae:86:36:5d:f3:a8:
56:cf:2e:8b:86:58:28:67:5e:be:fe:36:18:89:92:31:87:ab:
24:ef:a6:c7:d0:bc:4b:2a:ea:ba:8e:6e:57:2f:b7:8b:b7:3f:
2e:0c:84:56:b2:d1:7a:5b:5e:17:ed:aa:3e:bc:73:63:a7:41:
a1:ee:4c:8c:fa:1a:1c:11:b1:47:a1:f3:68:f9:4f:34:6a:c0:
56:52:eb:37:ed:70:06:a1:ae:63:ea:32:16:ec:0e:05:42:6a:
5f:79:05:22:33:99:db:8d:c2:63:63:bb:6b:55:98:99:3d:34:
15:c4:6e:79:7d:8c:a8:7c:c5:31:7f:a9:ae:5b:4b:f1:07:26:
0a:fa:7b:cc:c5:7c:7c:59:26:98:e2:25:b2:ed:95:a3:f6:37:
e7:49:9e:ab:44:b3:f1:a6:a3:3b:0c:eb:96:b1:69:38:0d:55:
78:37:8a:d4:b3:97:fe:10:a4:f6:fb:f6:42:09:e0:b0:6a:ad:
40:48:be:71:e9:0d:3a:b9:6a:8c:18:78:ee:b0:ea:26:a5:23:
f6:9d:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:43 2026 by rpki-client