Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: lbmv63MHLQYO4wVaDt6ybF5vrxFJAZR6LcyNbBGBxP0=
Subject key identifier: 10:BB:23:8A:55:3C:B3:AE:64:8B:57:52:E4:57:EB:66:6C:58:8E:4A
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 019D258381B98F5AD763DC05FC87B2889A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 057D
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: 1mBr9qM8BaNGTVxWWG-3AL-6aKo.asa (hash: NmnXm1UkUh4+zMI0tM7r+DaLRQDNnioKlhBZDFPOibA=)
2: EO45mJpwo3EeFrckKnmDBhkeeTY.roa (hash: Khku2szHPHCEtCEgn2TtWXecH2vJHsJWVn9GOGsCAsI=)
3: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: Q82TuKEAKrt4sSBDtyvIDs9cU9tIv0XjhQmDpoJY80U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:81:b9:8f:5a:d7:63:dc:05:fc:87:b2:88:9a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=10bb238a553cb3ae648b5752e457eb666c588e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:fe:d3:f6:fd:d3:e0:91:42:08:07:6a:17:
2f:2c:96:ad:31:13:ab:ec:bf:ca:83:f1:9f:3c:8a:
65:09:de:ec:23:89:7d:43:cd:f1:81:7a:1d:d1:56:
6d:91:97:91:6d:39:82:69:ac:96:f0:d8:b7:25:f1:
d6:e5:39:20:92:bd:d5:f6:97:f3:6d:02:57:ea:ea:
04:ea:79:d2:d4:a7:69:7b:e5:49:13:88:c1:11:00:
99:48:07:b6:81:ae:9a:b3:8b:cf:37:81:4d:ae:73:
aa:2b:5a:77:21:3e:99:6e:91:1a:ab:a3:19:ab:49:
9f:8b:40:3b:ee:07:e6:ff:87:2c:7a:10:a1:92:ba:
1c:a9:9b:e8:92:54:f6:98:95:0e:de:7c:b9:dc:52:
75:8b:f7:90:56:e7:58:77:b9:a9:0b:ee:21:0d:d5:
63:66:68:14:0e:33:e4:b6:4b:3b:c0:1d:19:ea:c7:
f2:28:67:96:70:0b:62:8d:eb:eb:d5:2b:70:5c:ac:
78:72:31:eb:89:8f:da:ff:28:2f:91:f6:97:5c:b3:
7f:8e:73:e0:c4:9a:2d:2d:bc:6b:bc:52:2d:b4:91:
9f:07:70:b3:13:59:e2:9f:74:31:bb:a1:6f:9c:74:
93:18:ea:a7:03:ed:51:d2:ac:86:6c:33:4a:12:64:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:23:8A:55:3C:B3:AE:64:8B:57:52:E4:57:EB:66:6C:58:8E:4A
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:17:38:e6:8e:fe:d4:be:06:2d:9f:20:43:28:a4:0a:af:
17:7e:ce:9f:ad:7a:3c:f3:59:ba:0e:91:92:bf:83:7e:c7:2b:
4d:69:4e:f4:7e:c7:21:a9:6d:6d:9b:57:72:0b:b3:11:b1:69:
8f:98:b0:f9:8b:54:51:ca:46:f1:a0:57:7e:07:d6:96:e1:e2:
bf:52:80:92:29:a2:f8:e8:ec:6a:a0:68:b8:f3:24:d0:6e:be:
be:6e:34:a2:18:1b:fb:95:ae:36:f7:f0:9d:9b:24:58:82:ea:
a7:e6:6d:51:b6:ab:18:9d:9c:71:12:27:5f:fb:a4:43:bd:58:
e0:3d:fe:36:e3:04:22:b1:d7:24:88:90:68:77:72:18:ad:1f:
e2:b4:66:5a:54:14:a1:64:ec:71:6c:fa:ff:e5:9f:b1:41:22:
55:5e:2a:0f:cb:fe:8a:95:b5:0f:40:81:ac:f7:97:d1:5c:f9:
a9:e4:ae:57:67:84:15:c8:bb:4b:4f:d1:d2:30:7c:6e:99:d0:
dd:1f:f3:39:34:5b:6e:47:ab:92:47:8d:4c:ca:35:3f:66:18:
b6:87:ca:3a:da:b5:ac:fb:89:3a:ba:ee:36:c8:ee:2f:a4:b2:
38:97:3e:dc:17:9b:d5:6c:1c:14:e5:c6:f1:12:56:6f:eb:12:
b0:e7:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:55 2026 by rpki-client