Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: xVIlQW+lM9MgBvcOIM9ooA0QMc8Jt1+iOI0TWQC+EGw=
Subject key identifier: 4B:3A:BB:5F:6A:D2:54:35:54:30:13:47:F0:67:8F:44:DD:77:0D:5A
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 01A0DD60D7B8291E189308DD72CB020885C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 111A
Signing time: Sat 26 Sep 2026 11:01:46 +0000
Manifest this update: Sat 26 Sep 2026 11:01:46 +0000
Manifest next update: Sun 27 Sep 2026 11:01:46 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: RYxYi4mmABsAnSx5dpvDIXBCat1oyLEPJ9lB7zNnUm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:d7:b8:29:1e:18:93:08:dd:72:cb:02:08:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Sep 26 11:01:46 2026 GMT
Not After : Sep 27 11:01:46 2026 GMT
Subject: CN=4b3abb5f6ad2543554301347f0678f44dd770d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:a9:37:2f:a2:2e:27:3f:40:52:4f:28:bd:
f9:c9:9a:01:ec:4e:ed:78:e4:f2:19:13:96:13:50:
44:68:c2:a6:5b:4a:cb:0c:93:37:32:f7:73:9f:e3:
95:76:49:43:47:d6:7f:9d:21:e0:db:43:4f:65:2d:
24:9b:91:c7:5e:01:9e:0e:a2:b6:03:7d:11:63:01:
05:51:66:45:e1:c0:df:a1:aa:a4:24:29:d0:87:51:
fc:5b:cc:bc:7c:40:cc:8e:ed:bc:fd:9f:23:aa:cf:
ff:b4:19:8f:b9:40:59:f4:62:38:0a:3c:93:09:ca:
1a:87:fa:d9:3f:91:94:c4:e0:84:db:b9:f5:c9:e1:
15:e1:de:5b:65:61:1f:76:9e:d0:40:61:0f:3e:4e:
71:44:e8:14:c9:08:03:3c:f0:61:03:a2:65:2f:4a:
9f:8c:58:f3:0c:1c:02:40:1c:e3:e1:e4:99:93:06:
71:1d:6c:24:21:92:3b:f7:bd:7b:0a:c7:04:bc:09:
52:52:70:f4:a1:51:89:11:60:20:ec:a4:a2:e2:6d:
5a:2b:ad:56:80:d5:e6:0b:81:7e:73:23:1d:c7:cf:
13:ae:b1:77:03:8a:3e:56:18:31:a8:d3:e8:05:52:
f7:1b:35:94:cb:c4:ab:bc:8f:4a:03:5c:ec:e5:2c:
35:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:BB:5F:6A:D2:54:35:54:30:13:47:F0:67:8F:44:DD:77:0D:5A
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4e:41:5e:4e:03:6b:5e:3a:f5:43:1d:38:93:67:f2:f4:c3:
79:b1:d2:e8:70:fb:3f:63:2a:64:e3:f4:1d:68:fe:9f:12:5c:
50:44:af:c4:26:f1:23:50:d3:3d:61:f3:ea:c1:ea:ac:b3:fe:
86:0f:53:20:af:df:a2:e4:2f:d7:d7:b4:73:2b:78:d6:58:a2:
f7:71:91:35:39:30:96:b6:e6:75:8f:a7:cc:28:7a:d0:68:8e:
df:56:ac:85:62:c5:c9:2f:b9:48:bc:5b:fc:92:c3:e3:24:72:
c3:81:4a:8c:90:fd:0d:f4:60:f5:d3:fd:fb:21:72:71:da:19:
2b:0c:06:4d:96:fa:d7:27:fc:00:65:f4:5d:ef:c7:3c:41:be:
74:76:35:9a:1e:d0:32:8d:a7:78:3c:1c:ab:68:d5:fc:64:1c:
c9:fc:68:d1:8c:ae:07:2a:a7:88:00:a6:da:0c:af:fc:b6:99:
0c:c2:4e:65:18:c4:28:87:83:cd:03:71:61:e6:ee:7c:9c:ca:
55:4a:33:a2:30:0e:49:75:bb:b7:77:0c:94:a9:48:2c:ac:fc:
a2:2b:cb:8f:f1:ee:6a:68:65:64:cd:0e:59:79:54:8e:8f:e0:
0b:70:aa:c9:5f:a9:32:1b:7d:af:f4:22:58:16:0b:8d:16:85:
62:9c:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:21:28 2026 by rpki-client