Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: CGA4pdBNIjdbmfK0lux7gj2Oku/gcmWhNXx+8/BWSqQ=
Subject key identifier: 05:26:C7:A4:CE:C3:55:98:0E:9D:89:59:5D:54:19:6C:0E:46:B4:C7
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019E1D594C71C88120CE52D3AFB29336F9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0FED
Signing time: Tue 12 May 2026 18:00:51 +0000
Manifest this update: Tue 12 May 2026 18:00:51 +0000
Manifest next update: Wed 13 May 2026 18:00:51 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: EML0c9S/DO8KW+r1jD3dcsrwTDBJbcwFdjCSk994dL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:4c:71:c8:81:20:ce:52:d3:af:b2:93:36:f9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: May 12 18:00:51 2026 GMT
Not After : May 13 18:00:51 2026 GMT
Subject: CN=0526c7a4cec355980e9d89595d54196c0e46b4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:5a:e0:63:45:1b:b9:a0:3f:95:e7:99:d3:
82:74:6f:ec:65:e4:c4:31:6d:b2:af:af:6d:5c:d3:
99:f5:55:2f:20:ee:61:82:8f:5d:fb:d9:9b:46:aa:
34:99:2e:75:dc:99:e9:ed:53:5b:6e:bf:b9:13:99:
f6:9a:45:66:d0:40:54:20:69:d2:1f:b3:78:0f:c0:
ed:2b:2d:d6:a2:da:ad:02:5c:64:8b:02:0e:6c:06:
35:60:52:d4:7f:18:d8:fc:ab:00:c5:99:8e:ad:2d:
ba:e4:87:58:05:78:d9:b8:9e:f7:30:d1:ac:c7:ca:
1f:0a:eb:37:5f:66:91:a7:b5:b3:f6:16:35:7e:8d:
d0:7d:2d:25:2a:d8:62:d0:63:e1:74:7a:82:63:1a:
d7:0f:15:38:ac:cc:e6:3e:90:61:9e:cd:b4:73:21:
5c:7b:e8:54:b3:9f:03:f1:9e:59:0b:c9:a2:f8:a1:
06:d5:e8:a1:3d:b3:ec:63:9d:c0:76:6e:0b:16:ec:
01:e6:98:6d:d7:43:55:37:a9:28:03:f9:e1:e3:ba:
46:5d:06:f2:3b:39:7f:f2:5f:2c:56:3e:93:7c:92:
a0:f6:8c:bf:ac:7b:ef:ab:e7:ed:9c:5a:82:23:99:
48:02:2d:77:c6:5c:89:3e:13:2e:57:db:6d:05:46:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:C7:A4:CE:C3:55:98:0E:9D:89:59:5D:54:19:6C:0E:46:B4:C7
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:a6:0d:47:c3:31:75:79:86:25:68:fb:eb:0f:c3:9e:35:
c4:aa:1c:d1:4b:ab:20:9e:5a:e6:d0:64:11:0b:36:ec:67:9f:
4c:05:2d:23:d1:66:ab:42:53:97:e3:59:c7:27:28:c6:0b:0e:
3f:67:66:8f:74:56:e9:f4:22:0c:73:88:22:e9:78:72:77:eb:
c0:e9:9a:f6:c4:7d:3c:96:82:d7:cf:94:aa:4a:2d:39:ac:f3:
0a:fa:bd:04:bf:d3:44:78:ae:9b:57:de:b6:57:d3:b8:b7:2a:
4a:b9:ae:e4:f0:55:bd:ec:ea:f0:8c:89:b5:82:0a:22:e8:3c:
5e:fb:db:31:71:29:38:6b:7d:69:47:5a:74:73:89:a7:d4:a9:
89:e4:4c:0c:d1:64:39:b7:81:f3:79:a3:a8:9e:82:a2:d3:d1:
4d:0c:a4:1b:c7:9e:28:79:ce:d2:05:00:80:db:1f:65:e6:ea:
1d:2d:b6:7a:d6:24:9e:6b:06:4a:2d:1f:20:a7:09:f9:c4:95:
a5:e2:de:7b:7f:d8:6d:df:ff:87:84:60:aa:96:5b:ff:98:b4:
5c:a1:c5:31:cb:84:5d:e5:4f:55:26:6b:e3:ac:aa:85:e1:19:
d2:b8:d3:c6:53:3b:45:c9:b8:bf:8c:c5:cb:34:15:6f:42:08:
79:cf:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:51 2026 by rpki-client