Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: +pY0FDpK/5U5lWdeutpXe7PUZ3WLu8nb+Vs2rQhmOGA=
Subject key identifier: 33:97:84:C9:77:75:CB:3D:1F:C4:5E:88:59:F1:2C:8D:99:B0:4A:D0
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 01A08C438A89931BF0B289C5F4C0FF386E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 10F0
Signing time: Thu 10 Sep 2026 17:00:31 +0000
Manifest this update: Thu 10 Sep 2026 17:00:31 +0000
Manifest next update: Fri 11 Sep 2026 17:00:31 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: eq3Pcjq/vPY0r5dtI2gD8L1PrJRtfMw1f9sFa5ZQJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:8a:89:93:1b:f0:b2:89:c5:f4:c0:ff:38:6e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Sep 10 17:00:31 2026 GMT
Not After : Sep 11 17:00:31 2026 GMT
Subject: CN=339784c97775cb3d1fc45e8859f12c8d99b04ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:be:92:1f:8b:65:60:0a:ef:a7:c8:de:4d:
9b:69:1c:c4:22:04:8c:4c:ff:70:b4:83:b6:a1:d8:
56:4a:78:17:b0:92:3c:0f:d4:6a:c4:af:a8:e1:14:
b8:47:d1:c2:53:11:54:fe:fa:21:9f:04:fd:5f:4a:
d6:7f:12:28:fb:8a:bf:fe:f0:60:0c:8f:de:f4:ef:
12:ec:28:2b:16:ae:92:14:78:ab:f8:09:2f:12:47:
5d:ea:fb:9c:dc:0d:cc:54:43:16:03:2d:e6:4d:67:
96:fe:94:63:16:e9:54:1b:57:ac:b7:6e:cd:98:11:
4c:84:4b:4e:4b:f2:3d:cb:92:9b:15:29:f4:11:cd:
64:02:cc:22:d5:6c:d3:5d:d7:0a:52:9f:42:9a:3c:
48:0d:91:b8:99:b1:7b:93:a9:a4:06:5d:16:a6:30:
6b:90:ff:ed:12:1b:c4:45:4f:ed:b3:10:0b:3b:d9:
50:e5:76:83:e6:09:d5:12:4a:9f:78:02:a5:b1:0a:
95:e1:2d:1a:1e:af:ff:3e:19:37:80:7f:ea:c4:f4:
fc:86:ad:ad:90:f0:93:33:eb:10:43:cb:54:af:7e:
72:57:26:37:6e:8a:58:8f:7a:55:a8:f3:1a:5f:f2:
d7:bf:f5:f6:6f:cf:c7:d2:51:b9:1b:6d:9a:c4:65:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:84:C9:77:75:CB:3D:1F:C4:5E:88:59:F1:2C:8D:99:B0:4A:D0
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:82:fd:ae:8a:0d:d1:7a:3b:ee:7e:cc:d3:f5:5d:f6:98:2f:
69:37:e0:0c:49:b6:de:21:eb:c9:35:62:14:22:40:c5:21:b1:
b4:7d:b1:58:1a:93:a4:73:50:c8:21:82:eb:b5:59:af:c0:d9:
9c:74:b6:b9:fd:c4:e1:7f:48:cc:dd:cd:ed:c8:2c:fc:d2:b5:
8a:fb:a4:35:d1:34:62:ff:73:9a:cb:a1:5c:66:4c:ac:19:3d:
27:22:28:11:fe:74:d3:1e:0b:13:9f:47:13:3b:63:a0:87:89:
99:6e:15:20:24:ce:ed:d9:d9:08:d4:cf:81:e7:75:c5:70:b4:
bc:9f:19:b4:54:ac:92:f0:80:1f:6d:80:a4:98:1e:59:6e:f9:
b8:36:12:e9:76:89:7c:6a:85:15:b4:01:e8:33:ba:5c:96:e5:
52:ba:91:d0:94:45:71:ba:86:61:05:2c:a6:62:1c:8f:1d:f3:
9d:11:5c:f9:fd:6c:b3:bc:82:fa:05:51:59:03:f5:a9:5f:03:
ba:42:93:bf:04:1c:ef:7c:b1:63:11:da:09:2b:50:41:30:52:
e1:0f:bd:00:1d:77:b5:13:46:4c:ab:db:15:c6:06:15:cd:70:
fa:ef:ff:e1:98:fb:fe:52:d3:a6:fd:75:8d:20:39:71:f6:d6:
1b:7d:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:47 2026 by rpki-client