Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: /3uDYV27Fi9KDLaMwOYjXTR0O/IRDp0PQFkiyQSlJ0M=
Subject key identifier: EB:86:F5:89:97:B7:77:BD:6F:AA:43:5B:EC:A1:7A:85:B8:44:35:DF
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 01A08C438C676CF3B97559ADD1FCA1682B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 17:00:32 +0000
Manifest this update: Thu 10 Sep 2026 17:00:32 +0000
Manifest next update: Fri 11 Sep 2026 17:00:32 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: 2tTZ8YJl6az6rmA9SskDruf7X3bYL98Ze26U4WjQV1M=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:8c:67:6c:f3:b9:75:59:ad:d1:fc:a1:68:2b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Sep 10 17:00:32 2026 GMT
Not After : Sep 11 17:00:32 2026 GMT
Subject: CN=eb86f58997b777bd6faa435beca17a85b84435df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:84:02:92:a8:8f:fc:aa:29:9a:21:7d:6d:
44:44:d1:1a:c2:58:3c:86:9b:6e:4d:0c:0e:f8:d7:
be:88:3d:bd:27:4c:0a:d7:b0:b4:2a:da:70:b3:f1:
e5:23:12:ad:c8:cc:bf:bc:ef:03:b0:05:bf:89:b8:
c8:ba:f5:f5:9b:7c:46:fc:88:f3:2a:30:48:c3:9d:
4d:c1:40:8f:ae:43:81:a0:69:c0:aa:83:5a:1f:ec:
1d:ed:fa:cd:be:81:a5:49:5b:e6:47:78:f5:d6:1c:
41:45:eb:ca:e6:82:03:07:60:3c:46:c1:0e:d7:72:
bb:09:e9:ed:d4:67:75:38:eb:7e:46:ee:c7:77:6a:
d6:b0:b1:88:76:53:a3:9e:6e:1c:da:91:9f:92:93:
2f:dc:97:a9:c9:76:e9:98:5b:39:86:33:95:2f:fb:
56:94:cc:a5:79:fc:54:20:79:40:89:10:71:47:d8:
46:7c:d2:41:67:57:5c:18:fa:13:9c:21:fd:33:1d:
fc:83:e7:d9:a0:2c:d9:da:f1:e0:95:ce:38:20:f4:
21:aa:5c:84:07:70:3c:93:b6:ca:a7:d3:1b:5d:05:
26:d4:f8:c4:f6:90:20:7c:f7:a4:87:df:04:df:3d:
73:60:02:e9:dc:c2:b0:bb:86:09:3f:4b:2c:4d:48:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:86:F5:89:97:B7:77:BD:6F:AA:43:5B:EC:A1:7A:85:B8:44:35:DF
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:52:22:66:e9:7f:de:a2:39:71:30:eb:d8:24:7c:98:c0:f6:
dd:9d:c8:6e:28:ef:c3:93:a7:8a:c2:1c:44:99:94:05:d6:6f:
0d:1b:d8:ee:54:7c:91:6d:2e:0a:ea:cd:75:ab:b3:8d:e1:63:
91:67:19:9e:bb:19:c0:e2:43:87:6a:5b:04:97:20:de:74:9f:
26:32:ea:f8:26:a5:e1:5b:43:41:d5:41:b4:c4:c6:92:e4:72:
9e:28:ee:85:ab:12:40:12:26:59:49:21:83:4e:38:ad:b8:76:
75:84:9a:4a:b4:c3:44:0c:a7:71:38:66:b9:54:ac:72:13:03:
69:d6:cd:14:bf:33:3b:da:bb:2c:3c:01:eb:03:ef:7f:4e:7f:
b1:25:53:11:41:61:cb:12:7d:b6:d2:6d:d7:f0:ba:47:b2:e6:
38:a4:3b:42:de:52:a5:e8:aa:e1:cd:12:49:f3:48:24:c4:df:
bb:3d:ae:6a:e5:4b:93:40:78:9a:c0:d7:b9:59:fd:51:37:4a:
a8:9f:40:36:e9:34:5f:00:db:81:75:03:3c:3c:d0:75:14:00:
c5:a8:52:ef:80:0c:84:d3:92:f8:f3:51:39:a0:4a:3d:29:0f:
ef:0a:5c:da:ac:71:d2:63:9c:a7:0d:05:b7:5c:bf:5b:86:fa:
8b:c2:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:37 2026 by rpki-client