Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: sUseESHp7Tzc4Iu3XZZ16RW5/q03bcMB2AnOuyXt2qs=
Subject key identifier: DD:97:55:ED:64:28:00:D1:DE:F6:65:05:3C:51:D3:A6:B3:1D:4E:17
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 019E1E6C3BCDDA900A14CEB98A9A86D0AFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 0964
Signing time: Tue 12 May 2026 23:01:10 +0000
Manifest this update: Tue 12 May 2026 23:01:10 +0000
Manifest next update: Wed 13 May 2026 23:01:10 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: ujXuH7CcIR6JSM/eY4s1949DQlyzjqotErWdwE1uzVQ=)
2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:3b:cd:da:90:0a:14:ce:b9:8a:9a:86:d0:af:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: May 12 23:01:10 2026 GMT
Not After : May 13 23:01:10 2026 GMT
Subject: CN=dd9755ed642800d1def665053c51d3a6b31d4e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:e9:1c:f7:57:7f:9d:c3:06:1d:a2:28:ef:
1f:8b:b5:25:4b:5b:25:5f:ac:2c:09:9b:1e:6a:24:
65:d6:72:79:ba:0f:42:a6:74:75:d0:7c:f3:7c:47:
ae:9d:75:c9:bb:7c:17:2a:1a:30:23:4c:81:74:23:
3f:18:22:43:14:e4:00:14:4e:0e:23:c0:da:50:3a:
43:4b:46:75:4d:e3:ac:db:93:71:b5:fd:d7:a7:94:
08:89:cf:32:1c:db:86:aa:cc:ec:d0:48:97:42:5d:
ac:d1:0e:4b:a0:a3:ab:de:8d:74:0f:11:08:f1:d9:
64:69:6c:c0:4f:2a:25:bd:6e:9f:ca:2a:86:bb:b4:
86:97:3e:c7:8b:f8:a3:70:df:b2:87:eb:dc:c6:40:
4e:ab:72:a8:c0:1e:16:44:cf:d4:99:f7:86:d0:40:
09:62:61:a2:ed:b6:c4:14:ba:4c:51:0d:e6:88:8a:
75:9a:b1:c0:55:ce:84:4a:97:46:5c:c4:53:e0:46:
54:fc:c7:07:5a:9a:8e:9b:c7:57:97:89:f8:d0:e8:
0c:5b:cb:21:3f:22:ca:11:51:b1:1a:93:e9:28:e1:
42:26:df:fa:c0:27:a1:09:d5:c6:df:d4:6c:bc:00:
f1:b6:df:b4:d3:6b:54:ab:58:53:73:92:fc:e5:7c:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:55:ED:64:28:00:D1:DE:F6:65:05:3C:51:D3:A6:B3:1D:4E:17
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:a7:62:32:67:95:20:59:cd:6d:51:47:2c:08:d4:f2:db:
00:a8:5b:13:8c:90:9c:46:cd:b9:8f:1f:15:75:a6:56:0a:4a:
8b:49:f0:7d:90:d4:54:1e:b7:5a:c5:76:cc:19:63:f7:16:ae:
71:3b:8e:6f:4a:83:3e:a3:b2:96:5f:42:bc:2b:a5:81:75:4b:
2d:91:47:c1:cd:fc:22:20:7f:2f:5e:cf:87:64:26:9b:63:5b:
14:dc:1f:43:f7:d4:71:97:03:a2:f5:44:f4:6e:45:f5:ed:59:
08:0b:a8:1d:42:13:a9:dc:07:57:8d:ee:72:56:52:86:ed:b2:
0c:49:ef:75:57:12:56:9a:e0:7e:e4:44:c7:f6:c2:e0:7a:2d:
87:39:93:6f:d1:0c:e4:c7:f7:db:6c:04:f8:71:08:ce:79:ec:
5a:c5:da:f6:de:ef:85:1b:c5:a9:a4:ea:a9:d4:b4:d6:23:02:
17:1e:6c:71:84:f6:02:44:f8:c5:11:cd:97:c8:a1:90:5b:38:
1a:06:70:d8:5d:58:a5:47:a4:32:7a:4d:fc:fc:73:e4:ed:3e:
5c:87:de:3f:2a:bc:dd:b1:a8:33:83:ca:42:f4:72:31:e5:04:
33:a3:2b:4a:9a:5e:0c:26:52:fb:c6:e2:9e:ee:0a:85:55:89:
ab:32:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:24 2026 by rpki-client