Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: LBvFhuzVZXrFjxH3kl+mDadKJR04COkBRmdSk20p5bg=
Subject key identifier: 0D:31:4C:EB:E4:2B:F7:13:3F:CC:4A:C0:85:72:22:01:95:94:4F:3C
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019D273B0541D8DCEDA82EC3100544136903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0F2E
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: Zn0qfpzPtQR206fJ9B5Kg2+U6gi5E71tK1DeTV1yIvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:05:41:d8:dc:ed:a8:2e:c3:10:05:44:13:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=0d314cebe42bf7133fcc4ac08572220195944f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:72:b2:70:56:5d:32:ab:dc:ef:9c:ad:da:
8b:a0:54:51:34:7b:a5:b7:31:ce:66:bb:2a:95:14:
52:df:1a:52:6a:22:42:a0:d8:d1:f9:a8:ea:c5:17:
d2:04:c6:be:fd:11:c6:cd:e3:01:a6:37:71:0c:2f:
cd:b6:5e:d6:10:15:4d:9a:9c:15:ae:66:0b:46:47:
aa:97:2c:93:df:99:de:2d:04:87:e2:44:81:93:89:
07:03:ee:29:e9:d2:38:29:fb:91:2c:c0:62:2d:4c:
3d:56:1f:df:c3:c2:3f:c4:eb:23:b4:9b:4f:e1:05:
7c:92:e1:36:ef:a8:16:29:b7:f4:99:71:1e:18:1d:
a0:d7:0f:ac:0e:38:76:1f:10:cc:c7:e2:91:15:25:
39:0a:13:7f:71:c0:df:8e:b3:be:b5:13:57:9d:62:
f7:18:e0:78:c7:79:ef:79:50:07:30:ab:da:c7:14:
51:96:66:ac:81:d5:c4:47:35:06:d3:df:06:0c:3d:
48:55:76:87:31:13:51:98:6e:21:38:e6:05:72:05:
d0:b3:a1:54:6e:c2:e4:a1:15:23:8d:a6:2c:38:f0:
6c:65:22:43:0e:af:bf:a0:e7:88:a0:2b:de:b1:66:
b1:92:4b:eb:ab:54:a2:d6:79:0e:ce:ea:78:7e:a0:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:4C:EB:E4:2B:F7:13:3F:CC:4A:C0:85:72:22:01:95:94:4F:3C
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b9:b5:3f:e0:9c:f8:dc:25:10:a6:fb:56:1c:c9:15:88:eb:
28:76:31:19:de:c6:1c:a4:c6:52:57:a7:98:73:20:3d:f8:d0:
4e:46:87:31:59:bf:47:3b:b2:69:bf:77:5f:f9:ff:13:ec:9e:
8c:4c:83:ad:8c:fb:a6:e8:27:f8:0d:98:30:8a:de:f9:72:64:
fd:7e:ad:5c:03:6f:d8:5e:6e:df:ca:c7:ca:ac:49:cc:d4:28:
35:50:17:8d:ac:ab:08:0d:dc:97:9d:35:a3:91:06:d9:30:a4:
58:69:0e:1d:b2:f8:c1:bb:96:8c:98:9a:61:7c:29:34:b0:62:
17:11:5d:ce:c8:b7:37:42:02:9e:41:63:b0:80:12:21:27:ee:
89:cb:42:2e:3c:3b:8d:64:35:bf:33:a8:b2:a5:5b:98:8a:47:
e5:bd:13:11:0b:cc:4e:38:94:38:b4:e1:f1:ca:bb:75:dc:d2:
05:0a:98:6b:cc:d6:90:3a:21:87:a7:cb:2a:79:81:da:c9:c2:
34:0a:31:1c:9b:25:db:5a:cc:02:94:e7:6b:6f:64:08:f5:ae:
e5:66:8e:24:7e:27:ef:3b:16:b6:f6:d7:ba:a5:13:bd:6e:f8:
98:7c:af:33:c2:39:f7:84:c9:4e:82:11:15:0c:5c:7c:93:28:
29:3d:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:22 2026 by rpki-client