Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: IKF28fCN8TU1liDhD+sUKEiYo1g3/GmU0mSfhwYmekc=
Subject key identifier: A3:CD:42:53:9B:F9:12:96:EA:CE:5D:68:97:1D:FB:C0:9B:39:2A:EC
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019E20C8AFC901FFDDA86BBCA97A59947F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 13BA
Signing time: Wed 13 May 2026 10:01:23 +0000
Manifest this update: Wed 13 May 2026 10:01:23 +0000
Manifest next update: Thu 14 May 2026 10:01:23 +0000
Files and hashes: 1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 06/I/QwUA/5lzNGu9+NkNCLf5T7C2lhcj0VdpUERyQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:af:c9:01:ff:dd:a8:6b:bc:a9:7a:59:94:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: May 13 10:01:23 2026 GMT
Not After : May 14 10:01:23 2026 GMT
Subject: CN=a3cd42539bf91296eace5d68971dfbc09b392aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:6f:71:63:7e:78:f3:82:a4:48:ed:47:9f:
7e:fe:46:5f:81:3e:a2:f1:37:60:61:45:eb:de:0f:
01:49:26:e7:b5:aa:c9:78:fe:5f:68:cc:b6:4e:42:
59:8d:b9:9d:33:d5:f7:2d:ba:79:fc:78:18:74:47:
75:c1:e4:e9:3c:40:75:b8:a5:52:22:64:07:69:df:
85:5f:36:d2:ec:a6:44:d2:a3:4b:82:06:2d:af:fc:
60:36:7a:52:27:49:b9:05:fe:88:c6:6b:28:4a:3f:
3a:6c:fd:9a:d0:2b:6c:35:80:31:13:8b:fc:c7:ce:
1d:12:4a:89:fd:c5:b0:14:68:0d:d7:60:18:d4:39:
6a:75:1a:63:0a:99:da:38:ff:22:38:a1:40:cf:26:
c0:f5:43:28:51:47:15:cf:28:72:91:33:c0:79:7e:
03:59:5c:bb:b1:77:8a:91:97:3d:ff:35:60:19:8b:
75:62:1e:2e:0d:4f:6c:bf:44:9c:07:2a:70:41:f4:
29:c8:48:37:05:f6:9c:37:36:8b:4b:d5:44:20:b7:
ea:34:c4:1a:52:26:11:69:93:7a:3c:43:17:76:e6:
a2:4d:c3:bc:bf:c8:80:91:09:ec:b0:d4:34:35:9f:
c8:b5:df:97:06:92:80:60:6c:09:98:29:34:01:2e:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:42:53:9B:F9:12:96:EA:CE:5D:68:97:1D:FB:C0:9B:39:2A:EC
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0a:55:0a:ad:be:07:19:29:bd:ec:83:0e:6e:c2:be:ce:e8:
fb:2f:bd:3b:9a:7b:2e:f0:22:e7:69:0b:bd:23:fa:54:b6:57:
22:76:d2:56:9f:61:2f:a5:16:8a:94:17:75:5d:49:ef:1c:75:
fe:13:b3:20:09:59:eb:f2:79:2a:b9:6f:da:8b:a2:64:cb:0b:
20:70:3d:1d:8f:c5:a1:fb:55:ef:c2:3d:eb:e0:b3:56:a0:71:
c9:9a:bd:47:51:13:f6:a8:05:19:b1:a0:33:22:07:fb:0d:01:
4b:a3:db:e9:cd:73:26:32:5f:36:e1:6d:22:83:52:38:32:e7:
65:95:44:eb:18:00:96:6b:42:4d:fa:3a:a7:d0:d8:59:4c:28:
a5:2c:b1:70:10:dd:81:92:04:7b:a7:ff:dc:96:05:81:9e:9e:
ae:d8:85:e0:e8:ac:7d:a0:7b:05:01:06:72:b0:eb:33:5f:6d:
c2:7d:a6:ff:41:d6:a0:3c:bb:55:32:b2:47:91:0f:1d:e2:86:
0b:6d:d4:ac:b3:3b:19:46:84:84:bd:f8:f9:e0:d5:93:9a:01:
f0:49:3d:2e:b7:e8:8c:cb:ae:c7:b0:14:7c:e4:af:ce:a5:84:
a3:ca:45:06:ca:66:2e:76:2b:fa:55:df:19:2b:96:be:fa:09:
a0:cb:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:50:31 2026 by rpki-client