Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: twgMABF04pkQWkaRHOsQSuXvEEVB0fqOLRP3NzTMxsA=
Subject key identifier: 8A:1C:0E:A9:1D:EC:9E:66:EF:0C:57:4D:12:55:AB:63:48:42:F6:E6
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019D389C0BA7BA3C824B48103C50ACE7A786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0F37
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: /tEFP+6YcpjsPhdlcsN2BQ+tAT79nfWqy2AcSb3j5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0b:a7:ba:3c:82:4b:48:10:3c:50:ac:e7:a7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=8a1c0ea91dec9e66ef0c574d1255ab634842f6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:e3:8d:4d:23:54:07:ec:9c:5f:b4:21:44:
f2:2f:8c:a3:8f:43:d7:3e:5b:59:6d:48:45:27:c6:
2d:05:6c:84:3b:0a:c8:4c:d3:b9:a5:12:e8:39:ca:
95:41:39:59:7b:be:9e:bf:57:65:6a:21:43:ae:66:
f5:29:4f:6a:1c:2b:64:27:6d:11:4f:a4:48:f4:83:
13:c3:3d:58:2e:ee:92:64:6e:bc:53:40:bb:fb:12:
c5:56:4b:6c:e5:a1:43:09:0d:75:2e:d0:42:27:dc:
80:b1:f2:e7:4f:b6:9c:d1:c0:8e:cc:2c:56:18:47:
8f:5a:56:7a:d0:1e:96:e0:e6:ea:79:85:a2:ee:8b:
4d:7c:18:ab:27:09:63:da:6c:a5:08:c8:16:87:d8:
49:13:c0:cb:39:47:da:ce:da:a3:f7:30:3a:c7:34:
08:c2:6c:18:6c:f2:83:b1:d2:1a:f0:fd:c6:41:b3:
6f:aa:6e:d8:75:cb:cf:78:74:52:fd:da:30:6a:04:
83:ef:54:8d:73:6a:a9:12:1e:5f:dd:95:b0:79:92:
a2:98:f4:43:82:f3:6f:f7:0b:8e:45:8f:af:2d:3b:
8a:27:49:e7:0a:e2:57:7a:e8:4e:5e:7f:d1:9e:46:
47:01:8c:32:67:48:4f:d8:67:ef:60:a4:c6:f7:d8:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:0E:A9:1D:EC:9E:66:EF:0C:57:4D:12:55:AB:63:48:42:F6:E6
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9b:99:df:59:7f:4e:a6:01:dd:d3:d5:66:dc:a1:a8:f4:e1:
7d:47:15:f9:3b:50:a7:f5:6a:0e:f4:86:e7:d3:c7:52:2d:92:
79:68:ee:c4:1e:91:53:4e:af:f3:f5:db:a5:c6:e7:e8:cd:48:
41:5b:93:17:56:eb:4e:31:ff:52:63:64:6a:ed:ef:9e:37:fd:
c6:ee:51:5a:34:c3:ff:da:2f:0f:b9:35:96:74:bf:80:b0:0d:
5c:d2:05:71:ae:12:64:dc:62:08:a2:c5:d2:22:98:7a:8d:88:
29:3c:df:5a:25:9a:dd:dc:ce:78:0f:eb:27:4e:31:10:60:f9:
51:28:b3:d2:60:87:fb:d7:73:fc:77:8e:81:22:ce:f0:ab:6d:
e8:34:91:81:10:9d:e2:5f:62:98:dd:b0:90:89:aa:04:1b:09:
e7:06:d9:72:7e:74:25:08:6e:7b:63:a3:7e:ac:07:47:08:38:
1b:fd:46:8a:9a:5e:9b:51:43:e1:bf:7e:ad:e7:82:24:5d:67:
c1:06:38:3c:8d:12:4f:1c:8d:86:32:9b:8a:b2:1a:12:7d:46:
85:44:6e:08:a3:48:71:c6:8c:43:98:a7:a8:ad:de:2b:c8:bb:
5d:bc:85:01:e8:61:80:8a:f8:0f:74:aa:28:fd:05:91:59:47:
2c:e8:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:21 2026 by rpki-client