Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: mTLIqL4JPc39auo+7noNNXSH3F33MTbJi55Nc/mtUnE=
Subject key identifier: DB:4D:2B:7F:07:AA:91:E4:B6:CE:32:85:42:B3:A5:65:43:E6:80:E3
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019FAB2CB79640602E88B2DBB5B8FA76FC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 10BB
Signing time: Wed 29 Jul 2026 00:01:02 +0000
Manifest this update: Wed 29 Jul 2026 00:01:02 +0000
Manifest next update: Thu 30 Jul 2026 00:01:02 +0000
Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: pgo0QmNb8Me7bS82gkYqBgLaQmZRc4zC18uZ4ml+5kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:b7:96:40:60:2e:88:b2:db:b5:b8:fa:76:fc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Jul 29 00:01:02 2026 GMT
Not After : Jul 30 00:01:02 2026 GMT
Subject: CN=db4d2b7f07aa91e4b6ce328542b3a56543e680e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:cb:5f:47:73:92:9a:a4:69:9b:b3:92:ff:
f0:5d:71:a4:0d:d8:4c:a1:96:fa:97:c2:2b:6a:30:
e1:a1:c7:6a:8b:08:bf:ce:1d:cb:dd:90:3c:b5:f6:
a7:60:5b:a9:bb:99:6f:21:1a:03:b1:a5:55:e0:a4:
2b:03:c9:d9:1b:32:3d:72:b2:01:50:ff:29:6e:2c:
5b:17:26:65:2e:f1:80:f9:52:1c:d3:67:24:ac:06:
35:e6:5a:b3:5e:a9:18:60:44:50:39:31:30:1f:b6:
0f:53:9c:1b:15:9b:f0:a7:75:4a:6c:be:00:75:b0:
67:eb:fb:b1:a9:47:23:84:63:b9:2a:17:d7:41:ef:
31:12:e5:50:60:c3:87:da:4a:54:26:e3:91:c7:62:
31:d4:4d:b8:21:53:a5:5f:56:b8:6b:41:ee:74:80:
5d:90:d0:5e:fa:38:fe:80:18:14:63:02:6c:b2:44:
78:5e:4e:b5:a2:8c:9f:65:6d:65:f4:f6:e4:a4:45:
f1:84:dd:8e:e2:6a:66:a7:ce:e0:39:9a:d0:1f:5e:
92:aa:59:d9:91:22:28:cf:42:11:01:f4:78:00:16:
f2:91:f0:23:9b:8f:a3:b1:ce:f7:58:51:84:74:71:
07:46:47:31:de:56:34:6c:a3:7a:a1:39:d2:90:ea:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:2B:7F:07:AA:91:E4:B6:CE:32:85:42:B3:A5:65:43:E6:80:E3
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:3a:de:fe:d1:fc:ff:8c:2a:9e:ab:e8:d7:5e:4c:46:0c:
52:64:64:42:b7:3f:bd:ba:f0:bf:26:7b:31:a8:dc:c3:08:03:
7f:6a:57:11:91:52:26:b6:57:f1:ac:e4:e1:12:c3:b5:f8:7f:
b6:75:8d:36:9b:eb:be:40:c4:b9:19:24:8c:52:13:6a:8a:7a:
ac:9c:1c:9a:96:29:50:0a:bf:6b:48:bc:29:98:2b:6b:8a:e3:
d0:c4:67:28:e6:44:83:02:dd:81:2c:2f:e3:b9:c4:7d:db:32:
e0:13:ca:da:2a:5e:60:c7:c2:96:c1:18:06:19:95:03:e2:43:
8e:eb:ae:62:61:84:3c:8d:c0:d9:c1:f6:f8:b8:31:35:64:8d:
51:78:8f:e3:f0:8b:06:68:17:60:1a:3e:8d:e9:4f:3f:f0:f5:
e0:2f:8c:af:e2:2d:75:74:af:18:31:e0:55:8b:07:96:b1:7a:
03:bc:a6:7a:c4:5c:eb:91:d2:a1:5d:a3:0e:58:09:f3:91:e8:
f0:43:0e:14:13:6a:93:26:59:66:c5:56:06:24:49:00:1f:ed:
45:79:45:bc:db:9f:4a:96:ad:21:fc:4d:80:ca:ac:60:e9:44:
19:45:0a:73:5e:0e:49:3b:d5:5d:97:8d:dc:c0:3a:10:0f:75:
95:c0:e3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLLeWQGAuiLLbtbj6dvx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJkYmZjNDY2YmQzNDgwOTBlZGMxYWUzMjkyNTIyZTlk
NzNiZDkwHhcNMjYwNzI5MDAwMTAyWhcNMjYwNzMwMDAwMTAyWjAzMTEwLwYDVQQD
EyhkYjRkMmI3ZjA3YWE5MWU0YjZjZTMyODU0MmIzYTU2NTQzZTY4MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiHLX0dzkpqkaZuzkv/wXXGkDdhM
oZb6l8IrajDhocdqiwi/zh3L3ZA8tfanYFupu5lvIRoDsaVV4KQrA8nZGzI9crIB
UP8pbixbFyZlLvGA+VIc02ckrAY15lqzXqkYYERQOTEwH7YPU5wbFZvwp3VKbL4A
dbBn6/uxqUcjhGO5KhfXQe8xEuVQYMOH2kpUJuORx2Ix1E24IVOlX1a4a0HudIBd
kNBe+jj+gBgUYwJsskR4Xk61ooyfZW1l9PbkpEXxhN2O4mpmp87gOZrQH16SqlnZ
kSIoz0IRAfR4ABbykfAjm4+jsc73WFGEdHEHRkcx3lY0bKN6oTnSkOrf6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtNK38HqpHkts4yhUKzpWVD5oDjMB8GA1UdIwQY
MBaAFI8S2/xGa9NICQ7cGuMpJSLp1zvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgt
NGIwOWJkOGVkMDRhLzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgtNGIwOWJkOGVkMDRh
LzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr463v7R
/P+MKp6r6NdeTEYMUmRkQrc/vbrwvyZ7MajcwwgDf2pXEZFSJrZX8azk4RLDtfh/
tnWNNpvrvkDEuRkkjFITaop6rJwcmpYpUAq/a0i8KZgra4rj0MRnKOZEgwLdgSwv
47nEfdsy4BPK2ipeYMfClsEYBhmVA+JDjuuuYmGEPI3A2cH2+LgxNWSNUXiP4/CL
BmgXYBo+jelPP/D14C+Mr+ItdXSvGDHgVYsHlrF6A7ymesRc65HSoV2jDlgJ85Ho
8EMOFBNqkyZZZsVWBiRJAB/tRXlFvNufSpatIfxNgMqsYOlEGUUKc14OSTvVXZeN
3MA6EA91lcDjzQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:16 2026 by rpki-client