Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: nlWlHzDWdk1O/Dq5CEhWkgAKIwtZ5oW2IsRPSfyg8S4=
Subject key identifier: FA:10:0D:CA:A7:70:6D:6E:7D:1C:49:5A:15:FC:F8:8C:40:99:27:99
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019D29293B5274F330E572558BC3664899C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: VeSTBG5AJdD7Yho1rV3qdtQbYLm+jv0rGTbDq5QhkuE=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3b:52:74:f3:30:e5:72:55:8b:c3:66:48:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=fa100dcaa7706d6e7d1c495a15fcf88c40992799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:e1:f4:d0:1f:b4:22:b9:ed:68:97:ba:48:
c2:3b:e8:40:d1:40:4c:11:f7:66:ae:7e:ee:8f:3c:
49:81:e4:25:4f:6a:44:ab:99:44:ba:1b:21:1b:35:
28:c6:eb:64:86:c6:d0:18:e5:a6:df:13:2a:9a:18:
6c:eb:16:79:8e:1f:19:e2:52:36:a3:09:a8:73:11:
22:0f:97:12:58:e3:10:14:2b:7d:3d:80:cd:ff:7b:
dd:0a:2a:d4:7e:82:10:72:29:0f:09:9e:86:d7:25:
1d:4e:51:89:b0:56:f8:bf:ab:a4:33:f8:14:37:ce:
18:18:b5:c8:6a:35:19:d3:f3:e3:b1:8c:bf:c3:d0:
07:9e:ea:f6:30:8e:cd:73:b9:62:29:56:1b:72:33:
b6:51:e0:80:6d:f3:4d:6d:d0:fa:03:8d:0f:a4:a6:
0c:dc:25:33:bf:70:c5:de:2e:1e:c0:21:d9:45:09:
da:d0:83:47:c9:bd:15:43:62:c5:7c:4b:4b:65:db:
33:ad:99:13:3b:e3:22:69:ec:67:d3:dc:c0:09:15:
1c:bf:0c:fd:ac:5c:1a:53:78:d9:bc:df:f7:07:05:
af:72:4e:bb:0a:d4:1b:4d:da:87:f5:45:c9:57:f7:
c3:db:80:de:c4:6d:28:b5:ed:3a:8b:94:a6:1e:60:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:0D:CA:A7:70:6D:6E:7D:1C:49:5A:15:FC:F8:8C:40:99:27:99
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f8:3a:79:86:d4:96:f3:13:63:88:a2:5f:3b:8f:c3:8b:eb:
a5:9a:2e:54:6a:8f:89:24:92:49:e7:e8:ba:2c:63:b3:10:bc:
fb:8b:2e:04:b8:67:6d:1d:54:79:d6:07:3d:95:8b:d7:67:11:
af:65:45:36:16:4d:b2:45:5f:43:7f:57:68:d5:28:0d:ca:cf:
e9:14:1a:e2:49:ef:f1:7f:f9:11:d2:45:e2:cb:b1:69:f3:cb:
3b:e5:bc:8f:41:6a:32:51:5a:84:cf:e6:5c:ad:47:ad:17:cb:
a3:25:a7:56:6f:66:5f:e3:68:11:ab:9d:d7:5d:b2:ad:13:71:
cf:38:9a:55:16:b8:a0:92:3f:18:d2:d3:f7:c9:49:7c:96:9d:
ca:41:07:db:49:20:79:ef:1b:3b:03:aa:53:ce:a1:60:83:9f:
6d:7b:26:f7:e8:3d:d3:19:d4:2c:50:d8:4f:b3:c3:ab:b8:cb:
00:ee:d2:6c:88:18:86:cc:b0:91:ca:36:f5:86:82:98:c6:d6:
d1:0f:b9:11:e2:58:ec:e4:0c:a8:09:15:21:91:5f:59:5f:bc:
26:03:73:d5:09:68:60:df:a3:0d:e6:df:46:6d:33:39:5a:89:
a6:15:53:32:ec:0b:c0:c8:b2:7a:0d:23:ca:28:9f:80:a7:2d:
eb:e9:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:33 2026 by rpki-client