Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: R8NoCcRf7rnETnrSgOvqjdmJdqBfaHaV5RtSrKkrfVI=
Subject key identifier: 38:7D:E2:7E:32:DF:CC:E7:1C:51:51:76:A6:98:0A:0A:6A:FE:F4:5C
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019E205AB4C83F45A24E83D15453B80DC315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0FAF
Signing time: Wed 13 May 2026 08:01:15 +0000
Manifest this update: Wed 13 May 2026 08:01:15 +0000
Manifest next update: Thu 14 May 2026 08:01:15 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: NjDVzCXCPzVRPTRY3yyxDjN/JwxlKzlc8IOw1cmvxgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:b4:c8:3f:45:a2:4e:83:d1:54:53:b8:0d:c3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: May 13 08:01:15 2026 GMT
Not After : May 14 08:01:15 2026 GMT
Subject: CN=387de27e32dfcce71c515176a6980a0a6afef45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:ce:91:5c:e8:10:40:a0:2f:1d:39:c8:d9:
a2:85:1d:9a:5f:c1:a7:c5:87:74:27:c1:23:dd:e5:
19:74:5e:04:38:08:7c:e6:bd:6d:8f:6a:c9:91:7e:
d2:2a:19:ef:06:a0:8d:e8:62:21:91:3e:3e:6e:14:
0f:9c:4f:5d:b0:0c:2c:6c:c3:1a:2e:10:ce:1b:fd:
56:26:e2:b5:f3:eb:e5:3f:6d:b2:7b:2d:74:22:bc:
20:f6:9a:d4:0c:9c:7f:ec:43:8b:d8:ee:59:e6:43:
1e:09:d3:33:81:b2:8a:c3:80:7e:a4:b6:84:02:5b:
4d:8c:dc:9f:93:e3:cb:87:44:fa:2e:70:f5:e5:bb:
48:f2:59:f7:b0:e2:82:5d:fb:e4:b3:ef:6c:13:8e:
2b:ad:c0:cc:2c:0e:75:c0:bc:8a:b6:f2:f4:84:54:
55:6d:f2:fc:8b:f5:fd:c4:f5:59:80:1e:f0:96:27:
18:fa:89:33:f7:90:98:86:ce:f7:69:91:dc:c6:27:
d6:f7:00:52:23:d8:9f:b7:bd:24:64:65:76:9b:2f:
ff:f7:97:e5:1d:7e:bb:c7:e2:08:b5:86:c2:02:52:
12:79:77:8a:03:d4:19:04:89:bf:08:d3:93:a5:09:
0a:d2:97:e5:62:d6:60:f6:a7:5d:28:6d:9d:7d:ef:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:E2:7E:32:DF:CC:E7:1C:51:51:76:A6:98:0A:0A:6A:FE:F4:5C
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:be:cd:a0:31:e6:e4:a9:3a:ba:b3:37:8b:75:35:48:52:
c9:ab:c1:07:c1:47:be:9c:2c:19:3b:77:dd:40:59:50:78:5a:
f1:9f:b1:66:af:30:3f:27:2e:3b:3f:92:95:9a:a7:7a:32:ba:
f1:e5:91:03:4c:b6:02:4a:4d:3a:0e:5a:47:fb:e1:eb:33:e3:
b6:86:fc:f6:cb:00:cb:ca:a7:8f:09:0e:cc:49:1b:bf:c5:14:
ec:f3:9f:66:e7:70:15:6c:8d:b6:59:65:e3:52:25:53:e8:f0:
99:e4:ee:b3:95:d1:2d:c2:76:d6:95:50:bf:63:c8:c9:60:0e:
3f:e6:7c:8c:a6:cb:0a:cd:71:b3:37:c3:3a:66:50:2a:46:70:
f8:20:94:0d:d6:6a:29:7b:21:7e:2b:a9:2c:de:6a:d5:e8:ba:
d1:6b:03:9c:80:e1:27:19:bb:e7:c2:17:d9:4d:76:d4:49:c9:
0c:e9:91:de:80:76:96:cf:4f:d2:03:ae:00:03:83:06:85:ac:
c8:8e:9a:fd:49:77:02:a4:99:1f:23:4a:e7:7e:76:7c:39:34:
42:f5:8c:de:33:9f:3b:2e:ba:e4:40:4f:bf:c5:19:41:05:41:
b4:c9:a7:8a:ce:1f:b8:84:6d:bc:22:6e:59:5e:f1:34:17:4b:
57:cf:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:55 2026 by rpki-client