Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: XKRBYGzJbRJZ3YEdr58zT3UhqO4F09kpShLoZTRYLJE=
Subject key identifier: 33:0C:4A:12:32:AD:88:1D:87:43:B9:62:22:0C:33:63:21:08:2B:F1
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019D281650E51F91A46E819C832516C64E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0F6E
Signing time: Thu 26 Mar 2026 03:00:44 +0000
Manifest this update: Thu 26 Mar 2026 03:00:44 +0000
Manifest next update: Fri 27 Mar 2026 03:00:44 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: o1+J2TAO/N2b7yIJogGMHXH64RuXruh37BHaK5rokpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:50:e5:1f:91:a4:6e:81:9c:83:25:16:c6:4e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Mar 26 03:00:44 2026 GMT
Not After : Mar 27 03:00:44 2026 GMT
Subject: CN=330c4a1232ad881d8743b962220c336321082bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:89:51:6d:42:13:6b:fd:53:6b:ca:80:02:
0d:fc:97:48:4e:15:ee:48:5f:87:0e:e2:5d:2a:d5:
0e:b0:6f:81:2a:41:ad:b3:6a:38:20:36:3c:a7:b6:
83:aa:70:20:5f:e9:45:cf:80:49:96:fb:08:57:a4:
32:e3:5e:01:f7:b4:60:8c:d3:e6:43:da:ba:c4:04:
f0:38:8a:48:f3:a1:80:f9:cc:30:37:10:ff:89:61:
46:47:8d:55:e0:53:1b:58:d3:68:6a:d7:84:d3:6d:
55:4e:73:92:21:d2:90:49:1a:45:92:db:3b:46:94:
b8:2e:3d:2c:86:85:51:8a:28:0d:1c:ac:a1:42:aa:
4f:5d:5d:f5:95:07:94:78:f3:08:22:90:33:77:53:
77:c1:ed:a0:83:13:35:cf:c0:95:62:40:83:9c:c5:
06:aa:83:5a:59:fe:22:8b:70:ba:96:00:4c:61:d7:
9c:54:ae:97:2d:6e:5a:e1:97:74:52:b0:09:9a:09:
10:1f:76:65:df:e1:32:25:5b:f8:d6:88:66:f7:ba:
9b:c7:7c:26:d5:c0:74:42:8d:37:37:2a:fe:94:5c:
27:bf:19:50:8c:98:0a:89:23:cb:14:4e:9e:81:1d:
ce:09:c5:46:6d:5d:63:da:e8:dc:df:07:9a:de:b4:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:4A:12:32:AD:88:1D:87:43:B9:62:22:0C:33:63:21:08:2B:F1
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:45:61:d3:5b:ad:a4:c6:21:79:40:e5:cf:fa:b2:63:66:53:
96:2d:c3:6d:72:16:68:27:db:55:a8:4b:46:ed:1e:c5:f1:42:
52:bf:d7:81:6d:22:b8:6a:d5:1b:2a:6b:03:d9:09:1e:db:4a:
0e:1b:70:89:f5:f3:5e:1d:ad:8a:1c:a2:21:80:62:cf:88:19:
c0:37:d0:39:9a:78:3d:1b:a9:b1:a0:3f:ae:a3:3b:a5:4d:de:
79:46:e6:dd:cb:aa:b7:58:36:db:99:64:cc:8b:b0:47:26:d5:
d7:d2:3c:70:e0:7c:be:39:22:22:7c:ee:ff:a0:6e:46:71:52:
b9:3a:66:7a:64:ad:cd:b8:9d:2e:b3:0f:43:f3:69:f9:0b:59:
14:c6:a5:11:88:d7:19:ab:eb:88:e6:50:63:a2:c0:e0:4e:13:
25:74:10:af:01:e5:25:c9:47:ab:3b:8b:47:92:45:f3:45:6f:
01:59:3e:f8:02:48:2f:d1:27:25:56:9e:16:1c:fc:ef:46:5e:
6c:a5:b6:00:fd:a0:bb:8e:26:03:ef:8f:64:df:d3:89:49:c5:
4d:3e:c1:dc:38:6b:ad:e2:e5:b0:9b:72:f7:03:ec:f2:35:ff:
78:f9:3c:52:9d:b7:94:c9:50:2f:b1:10:a7:34:0e:60:2f:92:
7a:f1:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:46 2026 by rpki-client