Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: EHWjhckeD0LIIh6z4fW/WBwxPgx5OzW3b9r/+YSOmY0=
Subject key identifier: 45:CE:45:94:3C:0E:10:D3:64:C2:FF:D9:45:32:A9:90:AE:99:6A:8B
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019DCF3E08A2E7ED902ECB46543A9A6891E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 14:00:42 +0000
Manifest this update: Mon 27 Apr 2026 14:00:42 +0000
Manifest next update: Tue 28 Apr 2026 14:00:42 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: 4SXUI4atGWMc2gXBHrLszL3XVg0+Ky5oguMZ7quDLvM=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:08:a2:e7:ed:90:2e:cb:46:54:3a:9a:68:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Apr 27 14:00:42 2026 GMT
Not After : Apr 28 14:00:42 2026 GMT
Subject: CN=45ce45943c0e10d364c2ffd94532a990ae996a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:16:d0:6b:b1:6a:7f:8a:66:50:18:13:2f:
6e:45:00:81:b7:4a:4b:e1:4d:ef:c8:21:4d:e8:3a:
03:2d:e8:00:8b:a7:f6:1b:80:d1:d1:2d:1b:43:d0:
26:4f:ee:d7:48:75:2a:80:f5:20:44:f5:13:89:32:
c8:15:d2:63:3f:41:26:28:08:b7:df:34:6c:50:95:
16:b9:32:92:10:66:54:50:b5:ac:fa:4d:17:9e:97:
80:89:36:c6:d5:06:91:a7:0f:9b:67:d9:a1:d2:de:
0a:2e:c2:b3:e0:37:89:cc:9e:a5:a0:cc:68:e3:85:
e6:6e:12:ef:80:cf:f1:68:f6:8b:28:83:dd:f9:cf:
d0:ab:21:7d:c3:e3:93:01:16:29:0f:c8:57:86:01:
f9:84:eb:72:0e:65:97:3f:4b:0e:1d:2d:6a:59:bb:
60:86:09:6d:2c:04:ab:e5:e7:cb:84:df:ce:4c:88:
60:07:77:c6:90:6c:11:db:88:02:d6:74:90:d4:e3:
88:a6:7a:0d:c3:19:dc:bf:66:ca:9d:3d:3e:33:0f:
6b:13:13:4c:d0:13:8e:06:dd:23:78:8c:b8:f0:fc:
f9:cf:13:c8:89:c7:97:17:30:32:dc:60:b6:26:40:
cf:a9:25:23:25:d8:67:cc:af:21:4a:4c:38:7e:bf:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:45:94:3C:0E:10:D3:64:C2:FF:D9:45:32:A9:90:AE:99:6A:8B
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:94:a2:a3:00:8f:10:9a:1e:7e:13:78:b6:45:38:9e:d0:37:
9b:f1:73:83:c1:17:91:89:69:b0:d2:54:0b:08:33:1d:1a:92:
9a:2c:4b:fe:e8:2d:db:e8:f4:b9:98:1a:b4:4b:68:1d:c3:e2:
20:c1:74:96:b4:ae:6b:9b:17:4f:c8:2c:da:a0:c1:0a:52:c8:
6b:e2:20:c7:fd:e0:55:4a:52:0b:dc:2d:67:2a:29:e0:b4:3a:
3b:06:a1:1d:b4:30:19:4a:b3:c2:c3:91:9e:46:41:f8:5c:21:
25:bb:f0:ca:b6:4b:e9:2e:10:ef:03:3f:fd:4a:96:34:91:a0:
cc:09:61:e4:0c:a3:6c:a1:28:e1:ab:a9:35:c2:b1:0f:dc:c8:
17:c6:dc:e3:06:4b:ba:75:b7:e1:df:b0:a3:ec:8b:12:a9:12:
cc:06:f0:7f:77:41:fe:6d:ac:36:3f:67:f6:4c:11:02:7d:70:
06:15:5f:8a:47:ab:0d:4f:a5:c5:f4:d9:11:22:b3:8c:2e:fa:
e0:c9:6f:15:28:05:ab:9f:b8:00:1b:c2:69:39:2e:c5:da:bb:
e9:81:a7:51:4d:1a:9a:6e:d7:ab:d8:93:a3:78:75:b0:05:e5:
b0:1e:2d:be:9d:ce:ee:f7:bf:f0:42:69:70:f2:70:93:97:0e:
39:f4:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:13:29 2026 by rpki-client