Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: JSUWt0zMGvBI+le0qFs+MWAASk1WJkBbrtSrY44b7WA=
Subject key identifier: AA:FF:2F:33:5D:CB:BB:9C:EF:43:DB:15:FA:D8:6F:8A:FC:1A:F5:21
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019CABA1D255BC0707DEA815332722D54B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: +cf0M10smPzHuEnWBPcXYRWfRznLwjjtrzWTJBZlbg0=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d2:55:bc:07:07:de:a8:15:33:27:22:d5:4b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=aaff2f335dcbbb9cef43db15fad86f8afc1af521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:b0:16:8c:90:ed:8e:bc:8a:11:1b:e3:7b:
ec:66:d6:2a:5e:c0:21:ec:ad:41:f2:84:4d:48:3f:
d2:6b:c4:8a:95:51:09:ef:ca:1f:30:60:f1:9d:e2:
90:6c:33:47:1d:70:1f:1c:32:94:0e:78:ac:08:15:
88:f4:35:91:bf:a1:f2:06:f3:0d:4d:f4:87:b6:89:
92:4b:f2:1f:de:ff:2c:e4:6e:6c:48:40:6e:25:94:
07:78:13:6d:1e:5c:e9:99:33:0b:19:b0:c2:c4:e0:
cb:b2:60:b7:47:1f:c7:64:4f:86:15:4a:42:6b:c9:
9f:04:bd:a6:0c:b2:ed:1f:84:73:92:30:55:bb:97:
79:23:69:3b:38:75:3d:b4:73:c6:85:79:76:fd:12:
ec:de:13:1c:5f:54:a5:0d:a4:36:ca:bb:56:f8:fc:
a2:ef:4d:0a:e7:ca:28:71:ee:6e:a5:5d:d7:aa:da:
b8:5f:b0:17:1a:3d:37:37:97:2b:0e:bd:8c:7e:e9:
95:12:a2:f8:85:c8:25:84:71:05:47:a4:ef:79:af:
ba:75:69:1f:12:71:76:b3:5a:24:f4:83:5c:eb:82:
59:53:1b:74:f8:44:ed:aa:33:4e:7d:dc:da:bd:a9:
78:31:32:22:a5:82:db:df:89:0e:b4:32:05:09:82:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FF:2F:33:5D:CB:BB:9C:EF:43:DB:15:FA:D8:6F:8A:FC:1A:F5:21
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ed:2a:d1:83:5e:41:4c:bb:6d:71:9c:e7:09:e7:d4:c0:40:
85:a3:47:2d:d9:11:e1:b5:c7:d9:99:b5:ca:e9:06:e5:85:37:
b6:f0:af:d3:97:1d:5b:66:5e:b5:c7:c0:98:16:7f:8d:0e:0d:
59:2b:66:97:31:c6:fd:57:35:a1:37:fb:79:32:df:d1:d6:3a:
c8:3b:3a:d3:ed:57:11:39:41:8b:7b:16:5b:84:fb:76:15:a1:
54:2c:60:ec:08:af:10:21:75:db:d7:7f:90:92:68:cf:68:22:
c0:52:83:68:d9:64:9d:50:e6:69:3f:57:a3:ad:41:0b:f4:90:
02:56:9e:2f:9b:76:cb:bb:e0:72:e5:b8:e2:fa:f7:31:5f:c9:
31:17:a4:11:f8:e7:2a:29:8f:8f:91:33:43:1c:cf:7c:d8:bd:
d1:c9:f8:94:75:a5:b2:7f:82:a3:36:ac:1a:82:6a:5e:05:ec:
7d:0d:27:3a:8d:87:75:e2:57:2b:9b:1e:06:e0:b6:b5:22:5a:
f1:35:28:ce:f4:1f:41:65:3b:ad:ac:d2:0f:db:09:4e:f9:61:
14:6a:76:a0:2c:40:5a:ea:ff:1e:18:f7:16:88:61:29:4c:2b:
92:f3:70:f1:4b:a4:97:bb:89:bd:dd:95:88:c1:03:17:45:54:
df:f7:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:57 2026 by rpki-client