Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: LWCQEgeXoX8+SxH/Xleje+/KGCuvHW+ZMMb10/aEuhQ=
Subject key identifier: EB:B8:76:41:A5:17:6F:A3:81:16:72:5D:4A:1D:BE:38:A3:5D:6F:D0
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 01A17BBB70AA739E33706C0963ED53DBDEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 116C
Signing time: Tue 27 Oct 2026 05:00:43 +0000
Manifest this update: Tue 27 Oct 2026 05:00:43 +0000
Manifest next update: Wed 28 Oct 2026 05:00:43 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: aBI9MWmKpa6BT7R54FzzLPOjY1GVqUS4agWZNpcjpUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:70:aa:73:9e:33:70:6c:09:63:ed:53:db:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Oct 27 05:00:43 2026 GMT
Not After : Oct 28 05:00:43 2026 GMT
Subject: CN=ebb87641a5176fa38116725d4a1dbe38a35d6fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:cb:b7:3c:10:52:96:c4:74:11:7e:93:ad:
44:0e:5e:bc:3a:2a:e9:43:ce:6d:fc:79:ac:6b:8b:
d0:a3:4d:78:90:3a:2b:5c:34:98:c3:99:d8:18:81:
c0:d6:17:c7:17:b5:37:99:c2:f9:67:95:53:f2:09:
1e:97:82:eb:d0:ed:3c:13:4c:d7:0f:22:03:1d:74:
f5:d8:2c:e0:b0:7a:74:0e:cb:1d:9f:cb:72:cc:34:
bf:dc:f9:02:44:28:b5:64:ca:08:47:f3:01:ef:bb:
88:54:8a:18:1a:9e:4c:a6:73:d3:c3:0a:de:1f:55:
ef:aa:dc:97:6a:e8:a1:ab:cc:ce:d1:61:d1:06:60:
16:d9:08:cc:d3:ed:ec:c6:a1:34:cb:ed:fc:c0:1f:
f7:9c:9d:2b:a6:46:9e:49:6d:78:01:c5:67:d0:eb:
8e:89:5c:45:10:98:53:29:99:0e:fa:31:1e:c1:0b:
3c:28:b1:46:d0:24:d6:8e:69:3b:af:63:f2:66:32:
5f:c8:81:bb:87:4b:d0:61:89:c0:db:70:99:12:d2:
96:10:11:76:52:65:7c:d3:0b:2a:41:03:33:41:27:
e2:3f:d9:bf:4e:3f:13:af:2e:be:c5:5e:8e:7e:b8:
dc:82:f5:f2:ee:42:f6:ab:ec:0b:29:0c:94:d4:ec:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B8:76:41:A5:17:6F:A3:81:16:72:5D:4A:1D:BE:38:A3:5D:6F:D0
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:88:87:71:0a:ab:19:32:76:66:48:93:c0:3c:6b:d2:cc:c9:
ed:e6:47:46:96:c0:4c:47:2b:dc:96:10:48:a0:53:2e:1e:fe:
48:7f:2b:98:c1:ef:aa:44:ac:21:02:82:74:a3:23:d4:7d:19:
d4:53:f8:86:5d:59:31:b3:2c:09:bb:e3:74:5c:c9:43:11:d5:
eb:53:eb:f0:29:7d:c8:85:04:4a:2b:1a:ff:e3:28:1c:06:3d:
a0:81:3c:9c:02:d5:2b:1b:e4:d9:6f:bb:ba:97:62:b7:06:d2:
88:9c:87:c6:66:a2:ba:eb:6e:cd:80:a6:4d:cc:b9:65:7c:35:
21:56:c3:c0:e3:48:86:c7:58:c3:d8:8f:4f:90:63:4a:ec:02:
2c:6e:1f:48:2d:ad:0a:31:2b:7b:bb:35:d3:ee:01:8a:ed:0c:
f4:8d:af:08:4c:2c:ae:f1:d7:b6:f8:52:8b:fd:2c:05:96:ec:
8d:e8:c9:72:b2:07:d3:75:cf:3a:f5:9f:c0:d1:4a:68:8b:51:
0c:fc:30:63:67:0c:c6:ac:31:7c:c5:48:02:1b:8a:4a:b5:c0:
2a:1f:67:7c:36:c1:46:1b:fb:bb:3b:e0:0e:95:0d:05:d5:40:
61:d4:97:9e:fa:36:98:f0:3f:d2:9d:28:65:b4:eb:ae:6b:0c:
c9:b3:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:18:45 2026 by rpki-client