Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: H6WG6S5kkCHktqvvpmVhjVCi/eqg0yvzirmh5SisPDo=
Subject key identifier: 6F:7F:22:D6:85:B5:4A:A3:B1:BF:11:0E:60:45:56:58:36:AA:87:6D
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019DCC3D2014D74E1C77692709B93590BAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0FC3
Signing time: Mon 27 Apr 2026 00:00:51 +0000
Manifest this update: Mon 27 Apr 2026 00:00:51 +0000
Manifest next update: Tue 28 Apr 2026 00:00:51 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: mGx3Nb6jqEmCmyfhNuBJR0OUiTz/ngGvKgquRIRusH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:20:14:d7:4e:1c:77:69:27:09:b9:35:90:ba:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Apr 27 00:00:51 2026 GMT
Not After : Apr 28 00:00:51 2026 GMT
Subject: CN=6f7f22d685b54aa3b1bf110e6045565836aa876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:57:e9:3b:9d:33:24:3a:40:a6:74:f1:f8:
58:fd:83:c0:57:04:04:d4:e5:a9:b5:5a:b4:70:06:
59:68:37:ca:2b:f8:4f:68:2e:7d:1a:22:ed:ad:73:
be:04:a6:04:fa:7b:4a:1a:d1:ee:ad:6e:5a:9a:e2:
41:70:3f:53:f9:62:d9:3a:57:71:03:a9:2c:a9:60:
ec:c3:77:8b:a4:f7:ce:e1:27:3b:47:9d:bc:8f:6e:
30:94:f0:17:e1:e8:43:b8:7e:ee:20:e3:d5:23:3b:
13:eb:03:4f:b8:16:21:b5:27:8e:54:bc:f5:c0:cf:
2d:96:73:3e:92:b7:5f:e2:cf:43:03:c4:56:cf:90:
bc:0c:84:8c:4d:ba:50:f6:03:43:a4:42:86:42:3e:
52:ff:f6:ff:83:d0:df:7d:10:92:3c:ca:f8:56:0d:
d7:6e:7b:a4:05:9a:3b:00:91:9a:0d:1c:4f:39:dc:
ee:37:76:d8:e8:56:35:d1:23:93:56:a6:c3:97:82:
96:12:d4:06:a4:6a:66:ef:c2:10:9c:68:fd:de:31:
96:a5:0c:50:80:f2:d1:e2:85:99:73:bd:ee:c5:29:
e0:cf:2a:a4:48:62:eb:a7:04:ba:a6:4b:66:47:07:
44:99:39:16:9e:18:70:25:89:fd:f2:81:3e:fe:a1:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7F:22:D6:85:B5:4A:A3:B1:BF:11:0E:60:45:56:58:36:AA:87:6D
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:74:17:83:0e:d8:cf:44:4f:aa:cf:39:d2:c8:35:81:76:
ff:86:32:33:97:9e:29:8e:32:1a:e2:0e:b1:2b:9c:84:65:66:
be:7e:19:09:af:7e:41:2d:34:3c:a0:47:01:ed:a7:c7:89:66:
97:86:aa:88:c5:55:4c:bb:7c:98:ad:22:15:d4:80:ce:60:8a:
19:b0:f0:87:a1:ec:a5:11:66:73:c5:e9:e8:ed:3a:ab:14:18:
a5:24:54:6d:9f:90:e7:e4:a2:2b:b9:55:af:2b:c7:bd:f3:71:
a4:11:55:96:54:b1:23:13:98:34:58:97:10:ee:d1:95:55:77:
e1:9b:0d:53:36:0a:4b:79:84:57:0d:b6:38:01:7f:df:cb:72:
75:87:4f:9a:4d:65:af:fe:64:e0:13:38:a0:f3:35:f9:7f:4c:
2e:07:45:4a:83:1c:84:b3:8b:d7:67:d9:5b:f7:a1:af:ad:21:
95:57:83:b0:6b:f9:0f:ed:d7:2d:05:19:17:8f:cf:e2:9b:5b:
e4:b0:f8:d4:f9:72:c0:59:11:7b:46:79:fe:09:11:a9:d1:37:
11:cd:5d:ca:4f:18:57:90:6a:88:31:0e:22:48:8a:74:f0:64:
4c:52:31:a8:ad:ed:92:a3:43:d8:32:7a:fa:5f:5a:e3:ad:ed:
56:aa:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:17:00 2026 by rpki-client