Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: eZreG+fp3CXArdBllXjRfCC62frOWiD/Hwz7tWbKwsw=
Subject key identifier: C7:ED:AA:F2:B4:76:38:FA:C4:95:FC:8F:C0:BA:30:C8:C9:37:F7:5F
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019DA3AF5CEB5DC93BE9555E4A6214104474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0FAE
Signing time: Sun 19 Apr 2026 03:01:11 +0000
Manifest this update: Sun 19 Apr 2026 03:01:11 +0000
Manifest next update: Mon 20 Apr 2026 03:01:11 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: PdCdx9j+4vcDxe19eQ1+nw6vkYSu7LG2DSPal11Jjpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:5c:eb:5d:c9:3b:e9:55:5e:4a:62:14:10:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Apr 19 03:01:11 2026 GMT
Not After : Apr 20 03:01:11 2026 GMT
Subject: CN=c7edaaf2b47638fac495fc8fc0ba30c8c937f75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:00:b6:18:02:8b:7d:52:b2:5e:c5:30:d1:
76:b0:fd:c7:99:ef:00:6e:8f:1b:ca:d4:78:d8:d1:
78:be:10:9d:80:8a:1a:32:c0:da:7a:ae:e4:13:0c:
f1:fc:f8:50:ce:74:2c:b0:c3:40:28:3e:00:77:a2:
34:86:78:51:f8:3d:e8:21:3a:40:2e:2b:38:62:83:
8e:2b:18:3e:4e:36:c6:7d:c6:c5:d4:9d:1a:6d:23:
53:b1:5d:d9:94:94:9f:fa:b4:36:c5:9f:c5:bd:f5:
84:4d:71:74:10:50:d9:62:1d:56:46:84:f2:56:0f:
a4:2b:58:36:6f:85:2d:24:53:ba:87:21:42:cc:0f:
53:39:d0:0b:f1:73:a4:9e:e8:5e:c8:57:32:de:4d:
24:77:52:9e:63:d6:90:37:4d:58:a9:40:ee:a7:5a:
a7:70:d3:dd:a0:3b:b6:f2:88:37:32:ec:a1:65:d3:
d0:e7:65:b9:b0:0a:68:c5:57:7a:14:77:e2:9d:fc:
ba:10:53:08:2d:dc:64:31:1f:f5:fc:e1:db:ba:d9:
3f:05:d6:e7:52:b9:05:76:3a:6e:6a:7a:ad:9c:27:
c7:4f:99:ae:e9:99:cc:2f:cf:55:22:d5:4b:37:f7:
99:a7:c6:4b:63:b7:d7:ed:a7:57:3b:ca:4b:57:89:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:AA:F2:B4:76:38:FA:C4:95:FC:8F:C0:BA:30:C8:C9:37:F7:5F
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0c:b6:94:6b:d1:91:b0:e7:ee:8a:06:4a:ee:cb:f4:c2:3d:
67:82:83:96:e7:eb:ce:54:8d:e9:22:ba:09:fa:8a:92:df:d2:
93:f9:3c:61:8e:ca:42:f0:58:d1:2b:3a:35:9e:6d:32:89:05:
50:27:1e:28:89:04:8f:22:f5:07:3b:d6:09:0c:6d:83:53:3f:
1e:aa:53:77:48:13:dd:ae:77:db:54:55:e4:5e:3c:77:6e:be:
64:ac:3f:ea:09:d3:8e:8e:4f:46:02:be:0a:ae:23:a5:28:2d:
89:41:b3:f2:15:31:ab:26:02:0c:23:34:fd:39:ae:31:8e:d8:
63:e7:57:b7:19:03:78:b6:32:2e:6d:19:75:14:4b:38:5c:fc:
fe:74:24:46:4d:29:91:0a:68:62:7c:40:82:32:66:7f:a1:2a:
9e:ac:65:06:6e:b9:3a:91:c8:a3:d4:2d:8c:9b:58:1c:18:1e:
75:63:1f:35:14:d8:ef:4f:cd:fb:8a:81:7b:f1:da:2e:a3:67:
25:83:4a:3e:cb:bd:84:01:55:14:52:d0:b6:2d:d6:04:a3:af:
84:3b:56:66:3c:06:e2:d2:a1:0c:2a:34:46:db:d7:47:46:20:
ff:66:52:97:98:0c:b8:7f:b4:28:5b:02:60:62:6e:4c:1b:91:
09:ab:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:06 2026 by rpki-client