Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: LSmlIGjSDUkKdJD2jQ5kdukyKptq8Xr5epWc/5vjjGk=
Subject key identifier: EA:09:C3:5B:C1:A9:EA:7C:C1:2D:2F:A8:34:99:31:1C:E0:1D:3C:F1
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019EC4EF2C72B5490AF67842734E137B9699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 140F
Signing time: Sun 14 Jun 2026 07:01:09 +0000
Manifest this update: Sun 14 Jun 2026 07:01:09 +0000
Manifest next update: Mon 15 Jun 2026 07:01:09 +0000
Files and hashes: 1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: rLlNT8GLKQvRFz3TmdiYCrPOHFtt8+s6jxu9b8qSMp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:ef:2c:72:b5:49:0a:f6:78:42:73:4e:13:7b:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Jun 14 07:01:09 2026 GMT
Not After : Jun 15 07:01:09 2026 GMT
Subject: CN=ea09c35bc1a9ea7cc12d2fa83499311ce01d3cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:17:8c:b8:81:f8:52:94:f4:3b:33:b1:ad:
06:06:d3:29:7c:14:16:dc:34:6b:5a:ba:6b:e5:0a:
b6:8a:4b:5d:8c:26:e0:5d:12:88:6b:a3:f2:95:51:
27:09:75:16:ae:27:a7:e2:0d:8a:12:7e:3a:7c:69:
49:d3:fa:81:c7:5d:7e:2e:73:77:c0:fd:44:ac:5f:
08:28:f0:32:63:36:65:1d:54:8d:75:55:9f:31:eb:
96:c8:20:90:62:e7:c9:c5:10:64:82:f9:21:ee:60:
c9:46:c8:96:63:50:9e:da:af:37:f9:5a:c4:d0:39:
3b:9a:35:97:77:b9:6c:1d:d1:4a:b8:63:e5:5e:53:
7d:c1:8b:db:6d:29:b3:c9:71:2d:0b:90:48:7c:79:
0c:f2:f0:9a:b4:b0:b6:7b:06:0a:ba:e6:cf:97:76:
74:ba:b7:68:c4:82:e7:81:f5:b1:d2:94:e4:22:d8:
f1:c9:96:7d:6d:92:54:25:35:3a:9e:61:7f:ce:ed:
5e:cb:0d:64:4a:6c:95:a9:4b:88:29:94:12:3c:16:
4f:c7:83:7c:dc:2f:0d:cd:55:32:ce:c6:ac:d2:65:
2d:2f:36:59:4b:9d:ba:ec:fc:ee:07:51:05:15:f4:
f2:49:33:b2:26:b8:39:5a:ac:f7:80:07:53:35:5c:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:C3:5B:C1:A9:EA:7C:C1:2D:2F:A8:34:99:31:1C:E0:1D:3C:F1
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:59:e5:ee:66:0c:01:1d:60:59:b3:a4:65:5f:39:41:dc:4c:
d0:dc:bd:5f:a3:34:76:ff:fa:57:18:ee:16:72:ff:0a:c7:8d:
7c:db:04:40:e5:bd:da:c1:9e:7a:ad:2e:d1:df:84:52:af:52:
e7:d0:fd:e2:ce:ac:47:c4:f1:7c:30:5c:ff:9a:6f:6a:15:f3:
bc:53:aa:9c:3e:d5:0e:f0:ce:98:fe:39:d9:b3:cb:37:ff:1d:
3a:e3:3c:3c:65:e7:c5:2f:48:14:01:d6:6b:ca:0c:4c:f4:8a:
31:54:8c:b3:54:5a:f4:2b:bc:99:69:1b:f9:62:e1:af:65:96:
b5:ac:a2:8b:86:91:a2:d4:72:cd:59:43:b8:b4:d4:f2:a1:13:
9d:8f:19:1b:54:5e:b2:21:e3:e3:bb:50:2e:3b:04:fd:1c:9c:
80:c6:58:5b:55:18:76:20:e9:e3:e3:f4:c2:d1:a0:8b:f8:43:
21:41:3c:0f:e9:88:9e:d0:80:14:0d:eb:bd:f0:10:17:49:2f:
67:9a:7f:4d:09:0c:dc:2e:f9:4d:ab:0e:10:cb:e1:5b:85:59:
57:f0:03:a0:54:e1:7c:2b:d8:eb:5b:e8:d0:3a:a7:c6:c5:e9:
90:91:f7:34:db:62:58:bc:46:57:25:29:98:66:ba:da:2b:f8:
20:6a:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 15:30:58 2026 by rpki-client