
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: JnsXnbXDnPL3HdfMzdAsiu+TYQlR/iPY0Yc+TgFxNaU=
Subject key identifier: AE:0D:17:27:AC:2A:5B:2D:3D:49:AD:5F:FC:CF:21:62:F3:67:1B:37
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 01A10F9593A3944A8157178E8C5602403A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 05:00:23 +0000
Manifest this update: Tue 06 Oct 2026 05:00:23 +0000
Manifest next update: Wed 07 Oct 2026 05:00:23 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: Ezpnq13Qts/k4HBL747b21t3igFaIiQYGAqNLw9DI3U=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:95:93:a3:94:4a:81:57:17:8e:8c:56:02:40:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Oct 6 05:00:23 2026 GMT
Not After : Oct 7 05:00:23 2026 GMT
Subject: CN=ae0d1727ac2a5b2d3d49ad5ffccf2162f3671b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:22:88:17:27:85:a8:64:24:dd:0b:f0:01:
9a:25:a4:74:67:a9:cc:fa:76:65:6f:12:e5:55:e2:
31:3e:2a:ce:38:a9:f4:3e:d5:8d:ba:1c:7f:58:11:
7f:10:80:e1:01:d4:83:43:37:9a:83:f0:67:b5:36:
b7:14:7e:ac:7a:5b:84:62:b6:18:b8:53:38:0a:d6:
8b:33:ff:0d:ca:e0:92:bb:43:78:f1:e5:59:4c:cd:
e9:d7:52:b3:29:9c:5a:2a:f1:75:45:2e:a3:73:08:
7a:4e:a9:4b:6a:c1:81:6c:c9:a9:79:9a:e3:94:e6:
cc:08:1f:fb:21:f9:1f:c0:fa:2e:fe:4e:f4:88:15:
15:e7:70:e1:b6:4c:48:cf:1f:52:19:5e:cf:d8:17:
f7:e7:af:40:36:4f:ad:86:42:2c:15:b8:0c:2a:ba:
fb:ee:38:3e:65:6b:e9:db:92:f4:c5:d7:1e:6d:df:
3d:d2:57:cf:c9:60:1f:2b:cd:71:0b:19:25:66:92:
81:0b:dc:23:55:01:34:6b:42:0f:44:e4:d6:8a:80:
63:98:db:01:a3:6b:65:ca:a3:ed:f6:f3:c3:66:2c:
50:67:33:b8:76:0b:b0:4a:c7:7c:4b:d2:fb:48:94:
1b:25:d4:73:89:b7:81:05:55:59:c4:6b:e3:3c:07:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0D:17:27:AC:2A:5B:2D:3D:49:AD:5F:FC:CF:21:62:F3:67:1B:37
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c6:4b:e2:2d:30:2d:a3:c8:34:bc:ef:ad:48:21:5b:6b:63:
ca:da:25:c4:ac:a4:25:f6:5d:f0:61:ad:aa:f0:78:0b:9c:b5:
68:fd:89:2b:d7:37:db:57:9b:f7:d0:77:60:0b:2c:da:ce:1d:
66:41:3d:5f:2e:3c:c1:0d:15:1e:bd:7c:5d:97:6f:6a:3e:ec:
9a:b9:b6:d6:55:07:2a:4d:ea:91:6b:59:70:19:86:3d:c7:89:
c6:79:ae:27:55:0b:7e:59:65:a6:0b:cb:4b:f8:f1:41:21:a8:
ac:54:f5:c8:4c:b7:6d:6e:da:41:3e:6c:19:39:b4:17:ab:6f:
16:6c:db:68:a3:48:90:e8:f6:8e:80:82:a4:60:b2:aa:2e:30:
bf:c2:44:b0:26:74:a7:f0:2a:48:9d:a0:f7:52:33:c3:d1:ae:
90:4a:4e:24:09:51:86:d3:55:38:d0:8a:aa:aa:82:af:8c:12:
ce:ec:3d:a6:a9:3b:f4:fe:7c:a4:bd:dd:42:90:a7:6f:90:24:
32:89:58:f2:95:86:f1:41:4d:70:b0:c9:6c:a8:7f:b0:c1:7b:
e4:a4:89:d7:37:a7:79:db:65:76:14:4c:70:9d:31:ac:2c:b5:
51:ec:1a:ef:c8:3f:b1:06:7a:72:a0:53:bd:ea:8d:91:7e:f1:
75:84:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:45:19 2026 by rpki-client