Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: T4wt9zRPtiq8zKJenkZOhF/oH5NHab7F2i2xhNySQ+s=
Subject key identifier: 55:F5:BD:61:E3:38:33:76:41:C1:17:E0:EF:15:D8:2E:85:1E:03:E7
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019CAA8F9D6D74C129D306B53FD8EB5578CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0F2D
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: be7hxyh6jeoVbpr7WrKsRjwtBkVqm1Gl7wbVr2S+xZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9d:6d:74:c1:29:d3:06:b5:3f:d8:eb:55:78:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=55f5bd61e338337641c117e0ef15d82e851e03e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:dc:dc:bd:84:8a:c6:30:d4:9a:91:bc:e3:
59:da:08:6d:ac:66:f5:84:2c:86:b0:a8:56:de:4e:
ba:a8:07:dc:4b:49:d5:41:ab:f9:eb:c9:ee:ec:88:
a1:83:e6:24:8a:30:85:b1:ce:ac:b5:f0:5c:4c:04:
1e:3d:96:b0:56:84:d2:56:8a:bd:7e:a6:ed:d3:bd:
35:bb:2d:04:8e:52:f4:ef:48:e2:c1:af:59:13:c4:
61:f1:cf:13:2a:07:dc:6d:81:c8:6b:ec:d0:c4:91:
e2:01:ec:65:60:e7:1e:1c:b2:9c:cd:9a:77:6e:82:
aa:a4:27:1a:f1:8a:49:49:0d:bf:61:a9:e5:3d:0b:
7c:fd:90:ce:75:8c:42:fc:b5:7a:df:19:24:0e:8a:
75:7e:f0:59:3c:d5:40:6b:5d:70:86:82:93:25:38:
53:c8:67:f6:00:a6:f1:e7:d2:fd:87:eb:b6:ed:92:
c0:f0:f5:ba:0c:ff:62:7d:a4:ff:c8:7d:00:64:d7:
5d:81:e7:1a:8f:8d:07:12:cf:d3:12:0e:28:06:7f:
c0:7e:f8:32:48:89:6b:8d:91:81:65:12:83:cb:6c:
9b:42:38:87:36:71:32:4d:04:29:09:38:f5:34:9a:
6d:c2:5c:0f:70:f4:76:fe:2f:02:0e:3a:2b:9f:3e:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:BD:61:E3:38:33:76:41:C1:17:E0:EF:15:D8:2E:85:1E:03:E7
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:87:84:3a:23:2c:dd:93:5d:2b:ca:2e:07:27:65:1e:66:bc:
f5:d1:20:8b:99:90:c3:ec:15:81:e7:6a:7c:b3:2b:d8:b5:80:
d0:4f:fd:cd:79:ce:f7:5b:6f:4c:6c:84:80:ce:8e:98:af:e0:
76:10:09:9c:95:7f:1c:13:85:30:1b:c8:14:80:05:29:aa:c4:
b9:02:52:b3:a4:70:17:d1:8d:f9:c0:c5:a2:e8:81:a1:22:54:
06:11:5a:bc:fb:f6:7a:04:63:56:53:ce:f7:6b:19:41:21:42:
a6:f2:97:74:a5:6d:a7:e7:f2:90:b6:28:71:3b:38:b2:ae:e4:
95:85:7f:1e:70:85:ab:06:51:87:ec:1a:ea:d8:b6:cf:bf:18:
b3:13:e5:12:56:8d:21:75:bb:ac:3b:5f:5a:96:af:b0:e9:9b:
01:c0:f3:d9:b6:b2:88:9b:de:06:f1:17:44:4e:3b:bb:e5:df:
0b:5a:37:35:17:43:d7:2e:a7:83:33:74:8e:19:18:b3:32:67:
eb:9c:47:30:16:12:81:54:dc:0b:65:d0:69:7a:00:7e:12:31:
04:6e:a3:93:ef:40:28:0d:8b:7c:94:94:cc:ab:7a:94:5a:81:
af:b9:8f:26:bf:5f:b5:e5:02:72:be:c6:98:32:d6:de:6a:7f:
e6:35:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:50 2026 by rpki-client