Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: Lb3Rl4MzqlmSGyENTbb+X0+rEiMXEMUl67GSTmYdye4=
Subject key identifier: 96:DE:11:44:1B:56:C7:D6:BD:EE:74:DF:CE:BD:EC:7D:AA:C8:5F:36
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 01A0FA58637BA8DE005CA945C0EB0A47B230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1A82
Signing time: Fri 02 Oct 2026 02:01:31 +0000
Manifest this update: Fri 02 Oct 2026 02:01:31 +0000
Manifest next update: Sat 03 Oct 2026 02:01:31 +0000
Files and hashes: 1: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (hash: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do=)
2: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: UNfducaqBnUMFeK/9k/9Pw5OOu4YFthD3nLdvLy/r+I=)
3: uxDJB12DNyUznvU-5izMHQhLDKk.roa (hash: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:58:63:7b:a8:de:00:5c:a9:45:c0:eb:0a:47:b2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Oct 2 02:01:31 2026 GMT
Not After : Oct 3 02:01:31 2026 GMT
Subject: CN=96de11441b56c7d6bdee74dfcebdec7daac85f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:a0:d2:c7:e3:95:cd:fb:77:fc:9a:ea:2b:
5d:c4:d8:db:d1:3c:09:e8:ef:d2:02:d5:cc:e9:bc:
e3:27:78:96:ac:2b:5a:15:96:92:87:8f:37:d5:eb:
35:77:46:38:22:0e:e3:ff:f5:98:d6:76:c4:10:ad:
2b:d0:b8:f5:71:90:27:05:2a:5f:c2:07:99:5d:3f:
58:20:9e:95:4a:6f:4b:60:d9:ba:c8:2c:5e:c8:41:
88:3c:ad:db:5f:ba:23:d7:dc:f9:df:7f:c3:7d:6e:
18:c4:e4:ac:14:68:d1:0e:8d:e5:50:46:fa:33:d6:
6e:5d:d6:e8:0a:d8:85:8a:26:f9:6f:70:65:e5:2e:
52:4f:5d:f0:3a:63:21:10:b7:23:74:ca:2d:c7:c5:
9d:b6:b3:89:85:0c:ba:f7:0f:d8:80:a6:b6:46:b9:
b0:1b:09:2f:d5:8d:18:bc:45:83:d5:bc:0c:30:d3:
52:26:68:2f:d0:38:b5:11:e2:28:6d:4d:67:75:19:
4e:61:eb:63:69:79:72:7b:7d:07:97:c1:5b:b8:d6:
b7:43:22:d0:d2:36:bc:99:e1:ab:e5:cd:61:85:d2:
7a:da:36:70:5b:c9:28:20:6e:34:9b:4e:7f:30:fe:
36:55:71:2d:bc:cf:ad:c9:ea:1f:65:1b:29:88:71:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DE:11:44:1B:56:C7:D6:BD:EE:74:DF:CE:BD:EC:7D:AA:C8:5F:36
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:d4:93:47:50:e5:9b:f5:5a:47:ec:35:ba:59:95:88:07:
7e:2f:dd:27:e0:a0:b9:f0:ab:92:ae:53:c8:36:0e:93:3c:23:
0a:87:b9:0a:3f:58:8f:39:e3:52:5a:88:09:52:5c:33:38:24:
d8:1d:4c:00:9d:43:ae:31:30:62:61:c8:01:b7:59:cb:b0:aa:
fc:d9:12:02:37:b7:71:d2:c0:2f:95:cc:85:7c:ca:bd:fb:c1:
14:2a:9d:02:af:2e:f1:0e:23:ae:96:79:71:07:8f:49:5e:c6:
b6:f5:a8:b2:ab:0a:37:55:db:cd:bf:2f:91:ab:cf:3e:d3:c8:
5c:e4:ca:e6:0d:c9:5b:e6:c1:be:f1:5d:0c:0d:54:b5:39:7c:
c5:ef:de:8d:3e:a0:08:a9:f7:89:36:c2:e3:ed:47:9a:a8:8e:
76:7d:eb:f1:01:cd:c9:ea:a5:cb:b1:3d:b9:67:2a:05:b9:13:
ea:8c:eb:b5:0f:0a:3e:a9:b7:a4:a5:ac:28:bf:66:4f:b5:e1:
60:b6:77:9a:3d:ca:e1:2e:6e:8c:40:cd:c8:e8:0a:77:45:b6:
e7:85:ec:17:10:6e:c0:80:90:a7:24:1a:65:9b:cb:e6:75:71:
a2:c3:fb:1a:06:ef:3d:23:8e:23:c5:95:ac:4b:d3:7b:87:08:
cb:1c:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 11:54:29 2026 by rpki-client