Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
File: JXW4SPkMg0xwaxGDCm_-kktS4vs.mft (raw, json)
Hash identifier: WOxVU0HzG+EFbcPt5cG3RVYA6pvLQPSEqKm3VYf0tTw=
Subject key identifier: 63:6B:96:85:15:41:A6:65:81:33:8D:03:6A:74:3B:70:04:69:49:3C
Authority key identifier: 25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
Certificate issuer: /CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Certificate serial: 01A08F7C02E192CA625983E1A7D589B8BA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
Manifest number: 0196
Signing time: Fri 11 Sep 2026 08:01:04 +0000
Manifest this update: Fri 11 Sep 2026 08:01:04 +0000
Manifest next update: Sat 12 Sep 2026 08:01:04 +0000
Files and hashes: 1: JXW4SPkMg0xwaxGDCm_-kktS4vs.crl (hash: /mMCVl6A7dEHimMHpPYcn8HZdpAo4/RKnD/08+YO8mw=)
2: YmfhrzOCM66sJPg1PKrP9NnCVoY.asa (hash: 8/+ep3l2wKMWyTuGh0aBwWhRGg0m48hSZsKNp7TkDnE=)
3: mui-sKtnNSWRSnaMqkLa51rt19o.roa (hash: BS+qRZKXjkKi+axAKoghb2DmzEDHB1JdOOcYm5gKVHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7c:02:e1:92:ca:62:59:83:e1:a7:d5:89:b8:ba:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Validity
Not Before: Sep 11 08:01:04 2026 GMT
Not After : Sep 12 08:01:04 2026 GMT
Subject: CN=636b96851541a66581338d036a743b700469493c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:db:8b:03:fa:c1:3b:ac:43:21:bb:a0:2d:
19:9f:4f:52:ad:2e:2f:6b:35:1d:d9:4a:e8:dd:c6:
7e:4a:52:e8:11:e2:2d:ab:9f:01:fc:c9:16:8f:26:
53:e2:67:19:4d:b2:2a:8c:b7:f4:00:78:10:ef:32:
cc:c3:38:84:d8:9b:66:63:c8:6e:99:98:94:00:43:
75:25:36:f2:3c:15:3f:ab:78:8c:28:c0:b5:3e:6d:
fb:de:66:cd:8c:7a:f1:75:86:65:e0:17:b8:bc:31:
bb:cf:38:6d:6b:e3:84:9b:45:f6:c2:b1:1d:d8:1e:
a9:20:fe:0e:31:59:61:e9:f9:71:e5:29:60:a3:0f:
29:9c:dc:66:97:a0:4d:1d:90:40:18:d7:4e:63:c1:
9c:a9:21:8e:b6:29:26:d5:cf:ad:9e:d3:f5:f6:12:
fb:03:fe:66:02:92:ac:fb:78:66:89:e2:60:93:0e:
53:b9:2e:ca:e2:66:a7:01:95:71:03:52:59:5e:3e:
58:86:1d:07:89:0e:77:77:c8:87:73:29:ba:b8:21:
89:1f:b1:99:f4:4b:f3:cd:25:47:ae:93:1c:31:f0:
7b:95:6d:58:08:39:37:3d:f6:85:68:c4:26:5b:c9:
e1:da:2c:44:0f:c9:3c:5c:81:d3:23:ca:43:eb:e6:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6B:96:85:15:41:A6:65:81:33:8D:03:6A:74:3B:70:04:69:49:3C
X509v3 Authority Key Identifier:
keyid:25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9a:7d:b3:e9:02:c2:08:a0:52:4f:b8:2c:eb:2a:4e:da:0c:
9e:f1:63:9f:d9:51:7a:e2:58:ef:73:32:c6:bb:9e:c2:2c:b2:
6b:29:49:e9:eb:25:80:62:8d:7b:38:6e:10:80:5c:05:c4:bf:
ff:c7:2f:8d:5a:b8:95:27:cd:bc:1e:e4:de:ec:d5:d7:ba:74:
6e:5c:d1:ca:3c:78:9a:d6:9f:f5:3a:86:b6:ba:60:80:ba:a8:
69:26:2e:ff:50:7c:41:c7:37:a7:f2:25:eb:18:29:d2:6e:92:
14:6d:05:eb:a6:10:ac:1d:af:68:6b:92:74:f6:25:b4:38:11:
3c:fb:e2:13:c5:63:81:93:8f:6a:99:3d:f1:de:23:7c:6a:b8:
fa:e9:af:42:79:d2:2d:fc:c4:d3:a0:4f:51:d9:98:d9:f8:10:
28:51:80:70:07:bd:a5:78:a2:6c:59:6d:37:20:b0:f5:f7:8c:
ae:c6:a9:cf:36:3d:39:64:ac:a6:22:1d:eb:20:47:fe:39:46:
63:12:d1:cf:ef:02:4c:b4:12:54:e8:a7:fd:0d:b3:5d:5f:6f:
95:80:7c:fe:07:91:c8:97:a8:eb:8f:30:ac:02:fe:e4:4f:c1:
9d:40:8d:f6:3b:ff:cd:09:ed:86:1f:3d:07:8a:73:5a:9e:1c:
f5:c1:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:01:51 2026 by rpki-client