Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: oorGu2+5ePV/a+Y6fNuKn2o2BgV9DIBYl3NMgGpWLHM=
Subject key identifier: 9E:B9:96:8A:65:C0:36:C0:36:AE:1C:28:22:5E:49:9F:42:AE:A0:01
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019FAC3F0B213862644123C519E76A08D594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:40 +0000
Manifest this update: Wed 29 Jul 2026 05:00:40 +0000
Manifest next update: Thu 30 Jul 2026 05:00:40 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: N8qdF8rXS3ae+lY/sWxdEkOdaVszVPZyxzG3+clu+rw=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:0b:21:38:62:64:41:23:c5:19:e7:6a:08:d5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jul 29 05:00:40 2026 GMT
Not After : Jul 30 05:00:40 2026 GMT
Subject: CN=9eb9968a65c036c036ae1c28225e499f42aea001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:19:e7:b4:6d:7c:78:ac:e4:b8:dd:3a:ac:
74:cb:1b:77:e7:32:94:9a:ea:73:c8:d1:e2:11:b0:
c3:f7:d4:a5:60:d6:9c:d0:5c:31:f4:69:21:30:51:
8b:12:ec:7e:91:dc:95:d0:a8:b5:af:d0:18:4c:cc:
30:1a:df:5e:89:32:ab:e0:94:54:ae:d0:41:0e:0d:
5f:bb:9f:9a:ec:a1:8c:98:8c:d9:1c:3b:5b:8a:b8:
76:3f:d5:48:b6:86:b9:41:e0:53:0b:76:c4:48:79:
0c:2c:50:6e:53:f3:7d:97:3a:cc:ac:da:fb:b8:a1:
ca:a0:42:41:c9:76:c1:25:d3:35:33:86:84:c9:ec:
eb:b9:74:0f:29:7e:1d:12:aa:b7:f8:5f:82:ba:a8:
0e:3b:3d:01:3d:cb:83:66:69:35:0b:13:17:78:88:
73:0c:1e:f1:00:d3:c6:d6:ac:1e:9f:70:1f:68:c1:
32:68:d1:2a:a7:fc:70:d4:16:57:e1:4f:1e:b1:1a:
58:7b:de:0c:15:a4:68:1e:7f:fe:ec:ac:90:0c:67:
95:a1:cc:8b:10:b4:c2:ef:3b:d2:e3:47:9c:52:39:
39:ca:aa:a6:82:a7:67:8a:64:18:b6:13:8f:ae:4b:
ca:4f:86:6e:6e:f0:17:99:ae:b2:c3:4b:0a:8d:5d:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B9:96:8A:65:C0:36:C0:36:AE:1C:28:22:5E:49:9F:42:AE:A0:01
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:17:c6:d9:12:4c:00:54:ba:99:47:3c:18:43:e8:0c:be:d1:
91:f9:d9:b8:e0:92:de:cf:3e:47:24:34:5c:90:b6:c2:b2:d6:
94:17:72:c3:d3:36:88:09:e1:67:1d:54:a2:73:1d:46:01:30:
3f:b6:4b:db:eb:0f:ad:1b:ef:b7:52:55:5b:88:fc:55:e7:33:
b5:44:d5:41:19:6b:4a:d8:56:57:16:7d:0a:bd:f2:db:ea:28:
27:31:40:ce:43:58:1c:26:23:06:2c:90:6a:5c:b3:dc:8f:6b:
7b:b2:2d:bd:2e:f3:00:4c:a7:e6:c3:56:b3:17:10:eb:48:bf:
22:a5:78:cb:cc:72:3e:dc:8a:14:c2:3b:15:f6:e5:d5:0b:a4:
2c:11:5c:ae:fa:7d:76:64:f7:5f:c4:96:da:7e:c9:5f:19:fd:
dd:18:c7:69:e9:6f:b2:14:77:3f:dd:e8:b2:0e:24:71:77:89:
6d:10:7d:96:c9:fb:3e:2d:3a:39:bc:46:8b:57:59:17:26:ca:
a6:ed:ca:ff:03:70:d1:10:35:a4:65:6e:d1:fb:88:56:6b:63:
e3:89:39:4d:f7:18:da:f3:a6:1e:db:01:c5:b1:91:37:4c:86:
e7:34:c8:6e:0c:92:c7:69:f6:54:a4:f7:0c:03:13:f5:9f:a6:
d6:af:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:42 2026 by rpki-client