Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: rQISCwA+tHAmYkKhLnoLGHllbNMNDdIzXr84/3EeCxE=
Subject key identifier: 81:07:72:CD:12:07:A7:BC:5B:65:EC:3B:4D:A4:34:C1:31:CF:17:DA
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019D992B5ADF3BDEDD1861BB404B0B33314F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:48 +0000
Manifest this update: Fri 17 Apr 2026 02:00:48 +0000
Manifest next update: Sat 18 Apr 2026 02:00:48 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: 41AJo2e0F1hzFlD0UA6xW+QJ36km3dd9AMQ4tjGmT3M=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:5a:df:3b:de:dd:18:61:bb:40:4b:0b:33:31:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Apr 17 02:00:48 2026 GMT
Not After : Apr 18 02:00:48 2026 GMT
Subject: CN=810772cd1207a7bc5b65ec3b4da434c131cf17da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:f5:c9:ab:d0:98:d1:d3:6b:d8:69:04:26:
bf:bf:63:be:10:8c:d1:22:28:ba:6e:c7:84:a7:e0:
6c:21:c7:da:0a:e6:3f:a3:f7:f4:13:8e:9f:95:1a:
2c:24:28:6d:cc:c6:a7:69:84:2b:6a:dd:b0:4b:06:
ed:8d:30:92:89:99:8a:b6:5a:70:fa:a4:ac:a7:ea:
31:6f:66:8b:51:7d:48:93:eb:02:78:c3:f5:9e:39:
68:b5:b3:d3:8d:fd:09:ac:69:1a:34:83:c0:37:2a:
7e:76:a6:de:63:12:34:d8:87:e3:14:61:9c:3a:dd:
b0:57:f6:4e:51:c4:40:43:19:3d:9f:e0:2f:2a:d2:
c9:70:21:01:61:6f:7f:bb:83:20:62:73:27:dc:8c:
b0:f9:71:94:be:fa:8c:ea:de:b6:4e:7b:c9:06:16:
41:c1:42:fe:9d:e7:7e:79:2a:51:cc:c5:a4:40:14:
f5:af:69:90:4c:eb:3d:6f:b6:5d:d3:60:02:27:69:
e0:c1:ab:53:63:12:c2:dc:5a:19:c7:c1:59:88:9b:
05:7f:b5:85:f5:8e:f7:fc:96:4a:e3:92:23:c1:f1:
fb:e1:b0:45:4d:c1:fc:42:25:52:a7:b0:33:2b:8c:
72:26:55:89:59:36:d4:31:ad:a8:73:87:f3:cc:2c:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:72:CD:12:07:A7:BC:5B:65:EC:3B:4D:A4:34:C1:31:CF:17:DA
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4e:77:4e:75:f3:a3:3b:05:fb:0b:2f:d8:75:31:56:46:9a:
17:e9:d2:60:5d:86:5f:a8:da:3c:47:ba:ea:c7:58:a8:3c:61:
91:14:e8:1b:1e:be:3c:a1:6e:18:96:8b:02:b9:1c:73:0d:ec:
0b:7f:a7:07:ce:67:70:c5:9b:be:75:3d:9c:c7:fd:d0:df:51:
20:d8:48:ca:53:44:04:c1:d4:0c:d2:59:c3:9a:ca:1a:b3:6c:
e3:7f:80:79:6c:ee:fb:f8:8f:17:e9:31:bb:bb:9b:50:b8:f6:
3e:bb:ee:ac:57:9a:df:c6:21:d5:28:6d:c2:c7:7c:93:1c:c3:
27:91:4e:1f:57:83:54:4c:51:e6:51:b4:e6:e8:8e:d1:1e:95:
ca:23:bc:84:33:e7:5e:69:23:d0:e4:44:d0:dd:60:07:75:5e:
1e:c4:6f:7e:85:ed:a4:0a:7a:e7:da:3a:76:69:61:a5:21:5a:
c4:89:c1:6e:a1:77:19:c3:42:1e:a5:2e:b2:15:76:cd:21:e7:
9e:e5:d6:da:33:33:3c:e6:f0:7e:c6:30:ef:79:bf:79:1a:50:
e1:1a:b5:13:99:47:67:aa:0a:2e:23:58:9e:5c:f9:dd:37:1b:
c2:28:a6:f6:23:c4:ce:d1:31:b2:2c:14:55:b7:90:77:7a:0c:
af:13:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:29 2026 by rpki-client