Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: w9HawGYo0ACkTyqjFe90131JwXlr0ed59qP62Deb75o=
Subject key identifier: 25:C7:C8:AB:97:B2:8F:33:3A:EE:F1:2C:54:64:FA:7D:C6:4D:01:08
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 01A0C8FCF8B98D7A95BE5757F740FBE2595B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 114F
Signing time: Tue 22 Sep 2026 12:00:16 +0000
Manifest this update: Tue 22 Sep 2026 12:00:16 +0000
Manifest next update: Wed 23 Sep 2026 12:00:16 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: sBuynmmll4IOLNDocI/usK+lIqN5gOyPv6X3uN/mxcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:f8:b9:8d:7a:95:be:57:57:f7:40:fb:e2:59:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Sep 22 12:00:16 2026 GMT
Not After : Sep 23 12:00:16 2026 GMT
Subject: CN=25c7c8ab97b28f333aeef12c5464fa7dc64d0108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:c2:e4:d0:b5:4b:e7:dc:38:a8:0d:52:18:
be:0a:3c:9c:a6:f7:11:b7:86:d8:60:7c:7c:ab:00:
ea:6d:2c:17:08:65:86:a4:91:13:b1:3b:bd:b8:fe:
71:6f:12:f6:8d:9f:a3:ad:dd:79:e8:0a:15:37:8e:
91:18:b6:d1:d6:e1:70:a3:73:e8:13:45:e3:24:53:
05:b0:3b:78:c7:b9:d5:a8:6b:21:86:40:fa:5e:29:
88:df:82:e1:3c:85:e7:e2:3f:2e:0d:71:1f:89:2b:
51:d0:d9:80:c6:40:6a:ee:10:e3:d4:c5:e8:13:ef:
af:fa:6c:99:20:b0:a3:58:6f:e4:53:86:ad:6d:08:
14:f6:9d:64:f3:25:aa:f3:2f:4d:f0:a1:88:f2:c4:
d2:23:d3:ae:51:48:76:13:e7:79:12:5e:dc:aa:3b:
3e:d7:d3:91:61:7c:93:0a:90:2a:7b:eb:62:fe:6c:
1a:69:ae:98:bf:6d:61:4b:34:92:43:85:3b:b3:e9:
5a:89:41:57:9d:fe:48:1e:b6:f8:e1:43:eb:8a:d1:
81:54:ec:48:e7:7f:50:ec:30:01:d4:28:f7:dc:fa:
aa:c1:93:71:4e:cd:ed:7e:a8:e0:d0:4d:ab:0c:f2:
29:de:88:64:66:54:d4:ef:74:44:98:e6:5a:c8:16:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C7:C8:AB:97:B2:8F:33:3A:EE:F1:2C:54:64:FA:7D:C6:4D:01:08
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:32:b1:16:e7:0a:55:42:67:ca:2e:ef:1f:99:43:8f:71:b0:
16:08:58:9c:4a:b4:91:29:82:90:c4:98:e7:d7:4e:09:1d:1c:
fa:22:a1:3b:31:2f:40:a6:9d:71:16:e3:05:04:a9:ee:a0:b7:
15:a5:78:e0:c8:f9:c0:ed:b0:4e:9e:b3:24:1b:e3:53:e4:b2:
72:11:33:61:a5:bf:fb:3c:25:d4:79:3f:51:dd:a8:88:2c:17:
20:47:47:95:78:a7:b2:02:23:03:96:66:63:85:8e:d7:8f:1d:
18:00:31:8d:4b:07:12:f0:36:7a:3f:14:6c:ca:e9:a3:0b:36:
a7:a7:7f:7a:40:de:2a:ab:5f:92:49:fa:3f:73:94:a2:e5:b7:
e2:3d:14:b3:ca:fd:44:fb:e3:a8:2c:8c:a9:ae:ef:03:ed:19:
86:d7:01:5f:4d:c0:ee:e4:07:d7:7c:96:63:7c:f9:2c:a5:a9:
69:e4:d5:ee:7d:5f:38:aa:ba:63:86:16:53:ad:3f:be:b0:9f:
db:62:49:dc:10:81:81:ac:a2:5f:cc:03:4b:06:0a:ef:dd:48:
ce:78:62:01:2d:5a:5c:0c:b9:2e:4a:0e:60:0d:91:07:2a:c3:
44:c3:27:a0:89:97:66:23:ea:af:33:1d:d1:e0:47:4f:55:c4:
ee:3d:26:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/Pi5jXqVvldX90D74llbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJkYmZjNDY2YmQzNDgwOTBlZGMxYWUzMjkyNTIyZTlk
NzNiZDkwHhcNMjYwOTIyMTIwMDE2WhcNMjYwOTIzMTIwMDE2WjAzMTEwLwYDVQQD
EygyNWM3YzhhYjk3YjI4ZjMzM2FlZWYxMmM1NDY0ZmE3ZGM2NGQwMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVvC5NC1S+fcOKgNUhi+CjycpvcR
t4bYYHx8qwDqbSwXCGWGpJETsTu9uP5xbxL2jZ+jrd156AoVN46RGLbR1uFwo3Po
E0XjJFMFsDt4x7nVqGshhkD6XimI34LhPIXn4j8uDXEfiStR0NmAxkBq7hDj1MXo
E++v+myZILCjWG/kU4atbQgU9p1k8yWq8y9N8KGI8sTSI9OuUUh2E+d5El7cqjs+
19ORYXyTCpAqe+ti/mwaaa6Yv21hSzSSQ4U7s+laiUFXnf5IHrb44UPritGBVOxI
539Q7DAB1Cj33PqqwZNxTs3tfqjg0E2rDPIp3ohkZlTU73REmOZayBYn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXHyKuXso8zOu7xLFRk+n3GTQEIMB8GA1UdIwQY
MBaAFI8S2/xGa9NICQ7cGuMpJSLp1zvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgt
NGIwOWJkOGVkMDRhLzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgtNGIwOWJkOGVkMDRh
LzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADKxFucK
VUJnyi7vH5lDj3GwFghYnEq0kSmCkMSY59dOCR0c+iKhOzEvQKadcRbjBQSp7qC3
FaV44Mj5wO2wTp6zJBvjU+SychEzYaW/+zwl1Hk/Ud2oiCwXIEdHlXinsgIjA5Zm
Y4WO148dGAAxjUsHEvA2ej8UbMrpows2p6d/ekDeKqtfkkn6P3OUouW34j0Us8r9
RPvjqCyMqa7vA+0ZhtcBX03A7uQH13yWY3z5LKWpaeTV7n1fOKq6Y4YWU60/vrCf
22JJ3BCBgayiX8wDSwYK791IznhiAS1aXAy5LkoOYA2RByrDRMMnoImXZiPqrzMd
0eBHT1XE7j0mpw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:28:03 2026 by rpki-client