Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: gmdJR1rp7RmOLTzo2UGlnS2fyVDaKp4g6a1B/3sqneE=
Subject key identifier: E6:09:6B:17:DF:38:70:10:14:D5:D1:14:B2:9A:4C:08:05:9A:2D:ED
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 01A0DC4D96E10D4340ECF6468629C9AA9418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 1159
Signing time: Sat 26 Sep 2026 06:01:07 +0000
Manifest this update: Sat 26 Sep 2026 06:01:07 +0000
Manifest next update: Sun 27 Sep 2026 06:01:07 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: v3HtDHFLl+f6r+UM96ZBY3yjVzW9C2y2DRnYPHZPUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:96:e1:0d:43:40:ec:f6:46:86:29:c9:aa:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Sep 26 06:01:07 2026 GMT
Not After : Sep 27 06:01:07 2026 GMT
Subject: CN=e6096b17df38701014d5d114b29a4c08059a2ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:e4:c5:c0:c8:5f:a6:37:2e:95:90:6a:d9:
8b:6d:7f:fd:3a:ed:0f:0a:91:6f:ac:2b:44:98:ae:
2e:02:e8:02:61:dd:8c:fa:c8:0d:c4:e0:28:ae:08:
58:8b:1e:b4:de:3d:ae:34:95:eb:6b:12:9b:5d:51:
8f:25:6a:33:8d:84:6b:95:6a:3d:76:81:16:80:59:
d6:8d:d8:d3:1c:d7:7f:e0:28:a1:c4:d1:d9:e1:67:
2f:14:35:86:33:dc:ae:1d:ca:2a:01:df:f9:f1:51:
92:a1:4c:34:60:22:0c:d0:32:c6:46:a4:84:9d:7b:
6d:dd:3a:34:69:e5:f8:54:15:1d:11:87:7b:44:c7:
13:b4:c7:28:60:4b:25:27:bd:52:74:e8:96:b0:a7:
c5:87:20:4e:00:59:d8:e3:2c:06:72:dc:1e:e5:cb:
75:fc:83:66:4e:ee:55:1b:8e:49:c2:c2:c7:84:17:
b4:d7:a7:cd:63:69:87:49:0d:b6:21:18:c1:c1:a5:
80:bb:0b:0b:84:fd:27:05:92:bb:f3:60:69:83:c8:
b4:7c:28:6f:58:97:56:ea:66:7d:ba:9f:35:01:f4:
af:d2:ba:96:a8:e3:c8:ac:0d:84:cf:03:e7:a5:ff:
02:e5:42:65:92:9d:8e:a0:a1:ba:8f:7f:7d:a8:b3:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:6B:17:DF:38:70:10:14:D5:D1:14:B2:9A:4C:08:05:9A:2D:ED
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3c:33:9c:cd:cf:db:84:8d:7f:0e:d9:e0:fb:4f:37:89:67:
59:05:40:9a:87:4c:d0:09:2d:76:05:d0:f9:7a:fa:d8:b1:0e:
d6:db:63:e8:93:99:e7:70:da:33:d1:8b:11:04:44:93:65:24:
1d:09:2a:5d:c9:3f:87:ee:4b:d5:a9:81:97:39:b9:04:d2:f8:
f2:64:4c:7a:0f:04:38:fb:89:55:2d:c2:03:42:44:ba:ba:e0:
74:5e:7c:a5:d6:f1:bb:e9:2c:a5:4e:06:66:ea:ef:37:73:fb:
f9:48:fa:53:3e:37:5d:d1:d5:f0:2d:22:62:2c:ac:1b:8d:08:
19:64:e5:68:53:a4:0a:a3:ec:07:67:97:af:13:7a:a4:f1:e0:
ac:e4:cf:19:e0:38:f5:12:07:c5:f0:00:27:71:9c:37:11:c1:
4a:37:99:03:08:1e:6e:41:a7:43:a1:33:ca:75:74:50:e9:38:
7c:26:05:bb:32:37:51:a7:9f:3b:e1:49:af:71:62:c9:da:14:
26:e3:6d:3c:9c:6e:c0:6b:3f:c3:de:92:52:55:49:8a:29:8a:
b3:4e:94:1a:86:6e:f5:27:01:e3:79:0f:dc:ea:3c:56:13:2c:
79:5b:5e:94:78:0b:b7:fc:b9:41:70:e5:32:55:a1:5f:3c:86:
73:c9:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:51:15 2026 by rpki-client