Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: U2kuFRGWD9SW8a6NEEjfrYdHjZARYIWlrxCbq8rdDNg=
Subject key identifier: F3:48:4D:22:B6:46:63:81:70:4D:DB:2C:52:FF:CA:92:DC:12:B2:3A
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 01A190F9EF340C0B085BA27C182C2B5AFA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1AD0
Signing time: Sat 31 Oct 2026 08:01:01 +0000
Manifest this update: Sat 31 Oct 2026 08:01:01 +0000
Manifest next update: Sun 01 Nov 2026 08:01:01 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: +eX/GfoNYkSd9I10paIw/mZusxjRSa/hxh3DsoYKj7E=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:f9:ef:34:0c:0b:08:5b:a2:7c:18:2c:2b:5a:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Oct 31 08:01:01 2026 GMT
Not After : Nov 1 08:01:01 2026 GMT
Subject: CN=f3484d22b6466381704ddb2c52ffca92dc12b23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:04:62:36:77:68:cb:56:b5:e9:99:f8:06:
4b:12:31:b1:aa:af:dc:57:db:d3:ea:37:2a:b0:de:
4a:1a:cc:b0:46:01:89:06:80:e5:98:2d:64:60:53:
a3:d8:24:63:73:ab:b4:ce:ef:70:d3:41:54:41:c2:
3c:ea:81:ab:37:76:4d:38:f9:cd:3f:01:79:3c:e9:
ee:67:0a:d0:a1:05:41:7c:95:4a:d1:d2:c8:34:3a:
c3:e2:26:14:2b:09:1c:4f:31:a9:88:1d:f6:1d:6c:
66:27:cb:92:b0:d3:77:b2:bc:86:2b:a6:7d:08:2e:
1e:ad:6c:dd:43:3a:a4:5c:96:37:6b:bb:50:47:6a:
48:a0:36:8e:7e:7f:90:78:03:a9:5b:02:25:42:35:
26:92:1b:67:81:93:f6:d3:99:e5:b9:c1:cf:97:6a:
21:eb:43:98:f6:d7:02:37:98:48:39:99:7b:51:4d:
0d:40:d0:e3:aa:e8:dc:ee:f5:96:03:bb:79:95:05:
08:f3:f8:a8:07:43:c9:81:07:5b:7b:52:c0:74:e6:
e8:12:d6:89:4d:7f:60:e7:88:69:80:36:7a:d3:3e:
95:7b:44:72:0f:1d:ed:a7:2e:dc:68:de:fa:2f:c2:
55:d2:b5:1d:bc:63:e9:4a:20:eb:e2:7c:dd:56:70:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:4D:22:B6:46:63:81:70:4D:DB:2C:52:FF:CA:92:DC:12:B2:3A
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:54:bc:c0:49:a2:61:10:19:b5:23:2d:78:44:77:0a:f8:
98:b1:60:b3:24:74:d1:3b:86:6e:45:3b:6f:e1:c2:66:0f:b2:
d6:9c:63:dc:48:23:21:5e:3f:c4:6a:76:85:7c:68:9b:91:40:
75:ad:9a:64:36:46:af:3b:d9:12:bd:d0:ad:d1:73:42:9a:01:
77:71:f2:04:c0:fd:79:f7:3e:ca:27:ee:27:a8:90:90:4c:ea:
1b:fe:ac:e5:b4:36:d3:52:c5:b0:e8:70:b1:3d:e0:33:f4:4e:
fa:7f:ac:6b:e9:bf:c8:ca:01:94:f7:fb:1c:ba:3a:7a:8b:2a:
66:e2:3c:8c:f1:9b:c4:d0:29:15:72:43:91:a0:87:c7:ed:44:
41:09:a7:ed:f1:6a:2a:95:1e:79:0e:bd:cd:ed:5d:f6:bc:46:
8d:bd:ae:fc:e8:b8:f8:83:39:12:41:9e:b7:03:63:ce:55:02:
ae:26:a9:4d:e2:36:26:a9:ae:02:b5:7d:04:56:70:cf:b8:bb:
28:3e:35:73:c0:9c:1e:59:46:a8:69:f4:2c:98:a1:1c:cf:4b:
9d:97:7a:84:f0:a3:4b:39:21:ee:97:21:fe:3a:7f:8c:7d:85:
4f:30:5e:d0:10:80:bc:51:0e:69:ba:51:59:b5:60:7d:5c:4a:
cc:51:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:16 2026 by rpki-client