Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: Y9eNa/IkGoDEtSlBoSmRv3bQigNbk0qHPG+fJEZc70s=
Subject key identifier: F7:53:77:1A:08:77:36:7C:40:34:48:1E:B9:9B:04:54:1C:5C:20:EE
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019CE591B579E2E52996E1F150FA1B87FA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 05:00:57 +0000
Manifest this update: Fri 13 Mar 2026 05:00:57 +0000
Manifest next update: Sat 14 Mar 2026 05:00:57 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: Zqcw3k8WIGMA1kXzrMSZFsoXdJznwseD2I8H2QmeVNA=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:b5:79:e2:e5:29:96:e1:f1:50:fa:1b:87:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Mar 13 05:00:57 2026 GMT
Not After : Mar 14 05:00:57 2026 GMT
Subject: CN=f753771a0877367c4034481eb99b04541c5c20ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:ea:18:c1:71:d6:73:4f:8a:40:03:08:38:
bf:e3:fb:6c:1e:71:25:2a:9d:08:f6:78:6b:98:06:
22:a7:3e:d6:94:90:98:d0:24:52:f0:38:b5:c3:72:
4d:aa:8d:6a:37:b4:ab:06:68:98:b5:9c:1f:75:b6:
a0:cd:c6:40:7a:04:ca:78:d4:e3:a3:35:e4:5b:8f:
b2:7b:2e:2e:70:b2:d3:d1:bc:08:e3:46:6b:8e:8e:
0f:ad:0e:a7:69:19:7f:45:0c:5f:e0:a4:8f:c1:3e:
74:5b:2a:e6:19:64:b5:bc:c0:2b:f4:cf:7c:2e:9e:
c2:22:87:6a:cb:44:99:60:68:37:7f:c3:ab:1f:3f:
5f:0a:68:bd:43:12:94:60:5d:c1:78:27:ec:b2:7a:
4a:07:a9:53:7c:59:a3:f4:ad:f3:5f:b6:2d:f5:40:
70:8e:dc:3a:99:3f:96:ef:97:0d:e2:34:15:a2:e7:
30:7e:34:cf:8e:ac:dc:98:ac:ee:e9:93:f0:ff:33:
4e:a1:a5:cf:23:51:e7:cc:e7:b9:e3:94:38:cf:f6:
76:99:80:b7:2f:78:2b:49:79:5b:75:36:3a:47:2c:
b1:9a:45:ca:43:4e:50:82:db:e4:1c:5f:28:75:e6:
65:52:6e:61:e8:81:f1:55:25:39:ba:af:07:4e:93:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:77:1A:08:77:36:7C:40:34:48:1E:B9:9B:04:54:1C:5C:20:EE
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:44:5a:66:b3:a4:ef:fc:99:a9:64:89:03:c6:ff:5e:72:80:
03:ee:c8:86:92:d3:4c:c4:c0:64:34:1d:e1:b9:9d:f3:ce:db:
2c:c1:8c:a4:d7:e1:1c:09:88:f2:1a:4a:38:be:fa:e8:16:a5:
b7:66:dc:a6:7f:35:e9:87:a9:64:11:20:ad:60:80:6a:18:13:
ed:6f:13:ea:22:10:7e:ff:f5:91:b9:78:c4:b5:22:9f:a5:5b:
6a:33:43:91:be:fa:db:68:c7:fd:a2:b4:6e:a6:fe:fe:05:31:
c1:89:83:56:d1:80:04:37:18:ff:b6:b0:29:a6:bf:dc:f3:0e:
72:90:39:63:8b:b9:36:21:74:42:51:71:c1:d1:05:3b:ba:30:
ae:75:1c:0a:0c:a2:72:df:58:b6:30:36:5e:23:65:66:0c:ba:
10:67:3f:b9:3a:f5:dc:cd:df:9c:34:13:4b:1b:2d:90:91:1f:
4b:7c:3b:3f:25:12:16:1d:c3:56:bd:ab:5b:02:dd:6f:da:4c:
f8:30:da:54:59:8c:ea:bd:28:92:44:77:ef:fd:e2:2d:39:09:
90:a8:28:7f:1c:6f:eb:00:3e:3d:a1:44:86:ee:df:ac:28:c3:
8f:6b:a7:86:67:b7:a5:40:3a:a5:42:a2:3c:b0:1b:5a:b5:32:
8b:47:16:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkbV54uUpluHxUPobh/osMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli
Y2Q1NmEwHhcNMjYwMzEzMDUwMDU3WhcNMjYwMzE0MDUwMDU3WjAzMTEwLwYDVQQD
EyhmNzUzNzcxYTA4NzczNjdjNDAzNDQ4MWViOTliMDQ1NDFjNWMyMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcjqGMFx1nNPikADCDi/4/tsHnEl
Kp0I9nhrmAYipz7WlJCY0CRS8Di1w3JNqo1qN7SrBmiYtZwfdbagzcZAegTKeNTj
ozXkW4+yey4ucLLT0bwI40Zrjo4PrQ6naRl/RQxf4KSPwT50WyrmGWS1vMAr9M98
Lp7CIodqy0SZYGg3f8OrHz9fCmi9QxKUYF3BeCfssnpKB6lTfFmj9K3zX7Yt9UBw
jtw6mT+W75cN4jQVoucwfjTPjqzcmKzu6ZPw/zNOoaXPI1HnzOe545Q4z/Z2mYC3
L3grSXlbdTY6RyyxmkXKQ05QgtvkHF8odeZlUm5h6IHxVSU5uq8HTpNBpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdTdxoIdzZ8QDRIHrmbBFQcXCDuMB8GA1UdIwQY
MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt
MjUxZDc0ZWQ3NzU0LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0
LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIERaZrOk
7/yZqWSJA8b/XnKAA+7IhpLTTMTAZDQd4bmd887bLMGMpNfhHAmI8hpKOL766Bal
t2bcpn816YepZBEgrWCAahgT7W8T6iIQfv/1kbl4xLUin6VbajNDkb7622jH/aK0
bqb+/gUxwYmDVtGABDcY/7awKaa/3PMOcpA5Y4u5NiF0QlFxwdEFO7owrnUcCgyi
ct9YtjA2XiNlZgy6EGc/uTr13M3fnDQTSxstkJEfS3w7PyUSFh3DVr2rWwLdb9pM
+DDaVFmM6r0okkR37/3iLTkJkKgofxxv6wA+PaFEhu7frCjDj2unhme3pUA6pUKi
PLAbWrUyi0cW7g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:27 2026 by rpki-client