Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: zCKvjM0wWYuC1jCwPP2UuH0ixVHaqo/M4d0VNDMoxws=
Subject key identifier: 25:34:57:62:6D:29:FE:2F:2E:C5:18:6E:3A:69:EF:7E:14:43:CD:08
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019E69BD0E80911770CA0B2E7A0A51CFACC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0FD5
Signing time: Wed 27 May 2026 14:00:58 +0000
Manifest this update: Wed 27 May 2026 14:00:58 +0000
Manifest next update: Thu 28 May 2026 14:00:58 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: Lf8ccOvLv6QyIVwtMGEorPjzrtoN70BLh5kaJd5/NAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:bd:0e:80:91:17:70:ca:0b:2e:7a:0a:51:cf:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: May 27 14:00:58 2026 GMT
Not After : May 28 14:00:58 2026 GMT
Subject: CN=253457626d29fe2f2ec5186e3a69ef7e1443cd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:72:43:0a:7d:6f:20:7a:26:c6:8c:33:90:
ce:13:0c:81:ee:0b:ae:dc:c8:81:39:3a:c9:b4:cd:
5d:57:92:10:79:ca:68:07:73:33:b2:3e:89:ed:26:
8b:ad:4a:8d:04:ad:92:6c:9d:ab:c6:37:99:0f:5d:
2c:50:7a:76:bc:ee:94:36:4a:14:d8:3a:0a:61:18:
78:30:dc:3e:1a:ff:5e:2d:50:0c:0a:ad:7d:a8:62:
cf:47:5d:b0:03:b3:c3:c2:51:0a:eb:76:d0:b6:20:
15:98:5e:d0:d5:4e:38:ff:6f:9b:af:80:24:cf:3f:
60:0d:71:86:a5:88:b5:83:bd:38:48:d0:b1:57:cf:
8b:83:21:50:12:22:1e:a7:ba:dc:fe:69:be:b1:27:
54:93:80:67:60:6e:f9:f7:a6:c4:be:a6:61:8e:16:
3f:05:20:59:ea:44:78:b5:e1:20:8f:ee:e5:e6:46:
a9:f6:28:7e:26:93:a6:fc:9e:49:71:08:2e:11:1d:
ee:c9:8d:f9:94:2d:16:4c:17:b7:13:ed:89:57:c7:
c5:1a:c3:5c:f1:8f:51:b1:5c:90:54:b4:b8:56:90:
94:ce:e7:a4:c1:a8:d0:da:cd:24:e3:ba:b8:b2:66:
85:ca:23:3c:88:8c:ea:22:84:48:68:8d:c5:7f:0e:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:57:62:6D:29:FE:2F:2E:C5:18:6E:3A:69:EF:7E:14:43:CD:08
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6e:3d:ef:0f:78:06:4f:ac:fd:5a:63:24:70:2b:0a:25:1e:
d9:0d:a8:a8:05:9c:ab:41:2b:bb:2f:b5:ff:bd:c0:f9:ae:ef:
84:2b:41:50:0d:04:ad:3d:c6:94:26:be:69:b4:da:f1:7e:67:
59:5e:7d:c7:08:49:3f:dd:fc:7b:1c:17:c6:6d:ad:ee:8d:ce:
66:36:8e:73:1d:09:93:b5:a7:7a:06:36:b8:4d:43:6f:7f:62:
a1:92:66:74:1b:a1:a7:7c:dc:80:be:e1:65:4c:26:42:2a:cf:
ad:5e:d5:c0:2d:bf:9d:81:87:0e:84:1c:51:00:bf:b9:6c:3a:
6c:a2:40:ee:0f:ef:5a:d9:02:b4:84:28:c7:fb:d9:53:f3:12:
aa:85:a3:ec:16:dc:36:dc:64:1a:57:52:16:2a:c1:ba:ab:f6:
c8:6a:2e:13:2a:e8:f0:9f:29:d3:aa:00:ae:79:4b:7f:51:08:
b7:d7:01:b9:3f:99:89:d0:bd:79:de:4c:fb:9f:a7:e6:03:d7:
ca:b4:d7:76:1e:50:84:68:3a:ca:cc:0e:0b:5e:aa:8c:9d:78:
06:6e:10:4c:a9:13:a0:86:50:b6:0f:ab:47:c4:62:89:c7:34:
7a:e5:65:4c:dc:a3:c0:e7:95:25:24:cf:be:bc:01:22:ac:7e:
00:04:16:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5pvQ6AkRdwygsuegpRz6zEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy
NzFmMjQwHhcNMjYwNTI3MTQwMDU4WhcNMjYwNTI4MTQwMDU4WjAzMTEwLwYDVQQD
EygyNTM0NTc2MjZkMjlmZTJmMmVjNTE4NmUzYTY5ZWY3ZTE0NDNjZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA549yQwp9byB6JsaMM5DOEwyB7guu
3MiBOTrJtM1dV5IQecpoB3Mzsj6J7SaLrUqNBK2SbJ2rxjeZD10sUHp2vO6UNkoU
2DoKYRh4MNw+Gv9eLVAMCq19qGLPR12wA7PDwlEK63bQtiAVmF7Q1U44/2+br4Ak
zz9gDXGGpYi1g704SNCxV8+LgyFQEiIep7rc/mm+sSdUk4BnYG7596bEvqZhjhY/
BSBZ6kR4teEgj+7l5kap9ih+JpOm/J5JcQguER3uyY35lC0WTBe3E+2JV8fFGsNc
8Y9RsVyQVLS4VpCUzuekwajQ2s0k47q4smaFyiM8iIzqIoRIaI3Ffw5vhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU0V2JtKf4vLsUYbjpp734UQ80IMB8GA1UdIwQY
MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt
NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2
LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtG497w94
Bk+s/VpjJHArCiUe2Q2oqAWcq0Eruy+1/73A+a7vhCtBUA0ErT3GlCa+abTa8X5n
WV59xwhJP938exwXxm2t7o3OZjaOcx0Jk7WnegY2uE1Db39ioZJmdBuhp3zcgL7h
ZUwmQirPrV7VwC2/nYGHDoQcUQC/uWw6bKJA7g/vWtkCtIQox/vZU/MSqoWj7Bbc
NtxkGldSFirBuqv2yGouEyro8J8p06oArnlLf1EIt9cBuT+ZidC9ed5M+5+n5gPX
yrTXdh5QhGg6yswOC16qjJ14Bm4QTKkToIZQtg+rR8Riicc0euVlTNyjwOeVJSTP
vrwBIqx+AAQWnA==
-----END CERTIFICATE-----
Generated at Wed May 27 18:19:33 2026 by rpki-client