Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: vp/La4C1PP2cHmvtFD+bhgCJIFwmSDYPt4UnoCHya4E=
Subject key identifier: 63:CC:2F:82:D2:F5:3E:DA:9D:CF:D3:90:A1:04:42:38:4A:B6:FD:D5
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019F932472FA5D1866C05F08B7F376049B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 08:01:07 +0000
Manifest this update: Fri 24 Jul 2026 08:01:07 +0000
Manifest next update: Sat 25 Jul 2026 08:01:07 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: l7IUGnVZs6NIYAPFhtDQ7lSz41WVZFPuHSZBSNOuPS8=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:72:fa:5d:18:66:c0:5f:08:b7:f3:76:04:9b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jul 24 08:01:07 2026 GMT
Not After : Jul 25 08:01:07 2026 GMT
Subject: CN=63cc2f82d2f53eda9dcfd390a10442384ab6fdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:76:04:91:86:aa:f4:64:8e:12:8d:2c:80:
73:64:25:89:a4:e1:d9:3c:da:38:0b:61:aa:b0:7e:
50:fd:f4:95:69:30:18:07:e6:91:28:25:f2:d6:6a:
37:be:c2:63:d4:eb:b1:a4:31:18:68:16:94:8d:9d:
e7:f2:3a:cb:76:b2:6f:c5:8f:2a:e5:60:2b:e3:9c:
f3:bf:37:01:e6:b8:f0:09:73:d9:6e:60:4b:2d:83:
a1:72:db:72:31:cb:d8:a6:27:f8:b0:ba:45:b0:62:
0b:d0:5c:ca:71:02:7c:27:85:cf:05:21:32:d8:1d:
f2:09:58:03:58:94:3d:56:29:73:59:aa:d9:8b:59:
a9:65:54:37:16:24:b6:c8:44:63:96:a4:c9:af:77:
54:b8:84:66:cc:72:5e:69:ca:23:58:45:41:14:07:
6e:2a:38:7a:7f:89:50:8f:15:95:7e:32:d7:0e:38:
11:4c:9f:51:90:e6:9e:06:87:35:e3:6f:df:64:4b:
8a:0f:35:46:e6:9c:58:ed:96:fe:36:df:5d:df:2a:
ce:5d:98:3e:41:c5:db:a2:19:a8:15:7e:98:4c:66:
39:d2:5b:cf:b6:68:bb:58:be:c5:b4:ff:e0:4c:83:
4b:16:6b:3d:21:fb:07:c5:15:32:67:47:ba:47:97:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:2F:82:D2:F5:3E:DA:9D:CF:D3:90:A1:04:42:38:4A:B6:FD:D5
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4e:be:0d:0f:30:f2:6d:e8:7d:90:0e:11:af:5f:95:90:68:
30:b9:b3:d7:7e:b3:04:74:24:f6:14:5f:fa:9e:bb:45:84:8a:
82:2b:7a:9c:b6:3c:38:25:b7:83:f6:5a:7f:03:86:8b:62:70:
1c:ff:73:c0:d4:a4:e0:72:96:c0:9e:6e:48:d4:59:cb:93:55:
c3:c5:da:b1:c2:5d:87:d7:b6:be:c3:0a:98:f1:01:07:7f:bd:
6a:e2:c1:19:24:64:02:bd:73:39:34:a2:b3:41:71:d3:61:22:
6d:fb:cb:c1:04:30:14:82:78:d7:c6:05:c0:35:25:96:42:de:
89:60:48:39:2a:38:3f:58:67:92:c7:4c:36:34:c0:b2:33:43:
21:3a:be:a7:c7:ce:2e:b7:b4:ab:81:dc:29:17:a7:92:95:84:
bf:ed:d5:cd:b8:f2:c1:c2:21:1b:ba:03:a9:aa:74:b5:06:34:
1b:d3:5c:97:b6:cc:f2:83:a8:0e:78:7d:1d:2e:27:fb:d5:0a:
3f:39:6e:3d:70:51:85:8c:2e:25:e9:c7:4a:6b:e3:3f:a6:fa:
08:f3:03:a7:b7:69:5b:88:6e:84:b3:89:00:95:72:38:12:3d:
c4:ae:a7:c3:c0:93:83:8e:6d:3c:b9:4e:f3:55:bb:c5:61:b8:
e5:b4:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:14 2026 by rpki-client