Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: PmtM9cEie6sdp/zXtX7f0EOxcxdwZkn+mMA7XuN1v4s=
Subject key identifier: FF:C1:E4:EF:CE:7C:E8:68:B9:09:33:9B:C2:94:49:93:74:22:D9:DF
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 01A17E85C6EFBE0F7969E39A197AEBA3F431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 11AD
Signing time: Tue 27 Oct 2026 18:00:58 +0000
Manifest this update: Tue 27 Oct 2026 18:00:58 +0000
Manifest next update: Wed 28 Oct 2026 18:00:58 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: 4wEyiEuae9123NNPKZr571AUW1/t95mWQ23j82cxSCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:c6:ef:be:0f:79:69:e3:9a:19:7a:eb:a3:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Oct 27 18:00:58 2026 GMT
Not After : Oct 28 18:00:58 2026 GMT
Subject: CN=ffc1e4efce7ce868b909339bc29449937422d9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:08:ce:af:b2:1e:fc:6b:f4:8b:4e:3a:91:
34:c3:8f:1d:28:c1:47:14:c6:65:ac:ee:f0:73:27:
7d:59:81:7e:41:cb:8f:21:f0:a9:dd:18:be:63:00:
0a:16:88:73:ed:75:91:c5:74:02:51:99:6b:55:dc:
54:b8:81:ac:e0:e0:01:76:80:58:96:5b:fd:d2:f9:
d7:a5:38:69:93:a9:20:94:b9:d7:37:7d:23:e2:f6:
78:72:ed:37:33:c2:e3:36:bd:4f:ca:34:ad:3d:9f:
83:0e:37:0f:c8:2a:fc:f8:e2:33:31:ae:73:33:86:
6a:d9:77:38:36:86:98:f9:7b:c2:4d:7c:e3:96:09:
c9:55:80:5d:05:a6:96:57:35:aa:2b:d1:eb:aa:89:
4d:24:05:1e:18:12:d8:7a:21:80:b3:53:b7:d8:21:
99:6a:68:8b:82:1e:76:da:6f:a9:f6:b4:49:26:f6:
69:a1:0e:aa:02:29:c6:ad:48:2b:4b:35:2c:89:cc:
00:e0:7e:9b:b7:85:d4:bd:b3:c1:51:52:90:d4:65:
fe:41:fb:09:e4:a3:7d:02:ea:9e:42:bb:17:ea:7d:
d3:15:81:14:cd:95:77:40:51:70:c1:23:94:42:c9:
be:5e:a2:1f:f3:6f:7a:52:6b:de:a0:b1:2f:d2:83:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:E4:EF:CE:7C:E8:68:B9:09:33:9B:C2:94:49:93:74:22:D9:DF
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7a:5d:30:3f:c5:a3:8c:31:94:85:60:64:d0:81:4e:a7:02:
56:72:ed:64:63:11:67:89:ce:6c:c1:45:86:c8:4f:4d:f8:e5:
2c:31:0e:fc:b3:62:f2:2d:5a:c5:9d:ea:a3:2f:51:8c:4a:19:
20:09:4c:06:16:9c:1a:d5:d4:52:eb:31:c6:21:e3:b5:97:35:
b1:4e:61:c0:c1:9e:a4:0a:d6:d1:56:6d:3a:1f:d4:6c:98:ac:
05:4a:67:06:9d:04:04:bd:2e:5e:c9:21:e2:65:8f:30:cd:f3:
5b:82:27:0f:23:8a:fe:75:e7:53:9e:cf:d3:fc:07:7d:ba:42:
df:f9:c5:9e:7c:04:c7:3c:37:22:55:af:ec:b2:54:cc:65:7c:
24:95:7f:ed:70:a3:79:57:96:68:3a:fc:ec:2c:95:27:88:dd:
12:0f:3e:e7:7f:a5:8b:00:f0:16:1b:fc:95:dc:02:36:5a:db:
80:58:f4:08:9d:7f:68:3a:e2:98:dc:20:40:29:df:e0:48:88:
d2:6b:17:d6:20:33:24:59:4c:63:14:15:40:f0:bb:63:94:13:
1c:d1:a9:02:35:5d:5b:da:62:aa:9a:7c:21:fe:c7:7a:01:1d:
4f:f1:64:27:71:fd:43:12:85:db:34:37:87:5a:ae:ad:19:d2:
8f:17:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:30:34 2026 by rpki-client