Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: Fbd68a1mrIuhreNG8dzSNl9SX6HawmOQapVEF3HdJ7g=
Subject key identifier: D1:49:3A:77:61:97:05:84:51:ED:AE:4B:D4:4C:E1:AD:74:D3:D9:A7
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019CABA25EDC7E187F05885275E14F86A34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0EEE
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: JkVcjMJzK0h7Jxe08n3tawvPnGZb1oDVg4WHyHTYIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5e:dc:7e:18:7f:05:88:52:75:e1:4f:86:a3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=d1493a776197058451edae4bd44ce1ad74d3d9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:4d:a6:66:18:9c:f7:92:c1:05:4d:2c:84:
b0:f2:5d:58:c7:7d:70:a6:02:6e:dc:e6:87:c9:c5:
29:69:40:91:0d:79:5a:3a:11:86:50:cd:09:eb:99:
fb:1c:c5:0e:71:c8:cc:86:cb:48:a9:36:42:57:50:
b9:49:73:7b:20:b0:c6:79:90:9c:d1:6c:12:38:86:
10:3f:93:e1:70:87:40:b7:ed:5b:e8:90:1a:fc:56:
61:0e:89:fa:61:fa:3b:10:0e:f1:55:4c:7a:20:72:
0b:98:89:b0:37:48:48:b1:15:11:f4:0e:1d:25:dd:
0e:aa:6e:1b:f8:dc:cf:0b:27:58:04:f3:b1:3c:67:
e7:4b:b5:fe:56:c8:ba:37:65:04:f0:fd:da:a8:75:
11:44:bd:b3:cd:6a:28:f0:79:7c:85:7a:93:30:8e:
6d:bf:c8:26:34:2a:b8:69:d6:eb:8c:ec:69:2b:08:
16:d9:0f:26:12:46:fc:a0:9b:c4:f5:03:6d:36:6e:
b8:67:56:b7:c5:16:b6:d3:0b:74:15:59:4c:0d:37:
4f:2e:e0:88:bc:f3:cb:e4:99:89:ff:f2:9f:d0:3f:
4f:bb:1b:d7:a6:74:4f:ac:8b:d5:52:5f:ad:83:d5:
7f:7b:e0:9c:c1:7f:43:c8:0a:b2:0f:31:7a:76:41:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:3A:77:61:97:05:84:51:ED:AE:4B:D4:4C:E1:AD:74:D3:D9:A7
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:44:45:f7:ce:db:0f:14:39:9b:52:a7:1c:b0:41:13:36:27:
ef:3b:05:3b:13:88:c9:29:b7:9f:46:d6:f4:1d:d3:36:06:80:
2e:f6:e7:70:f1:df:14:43:92:96:d4:82:2b:61:61:26:29:18:
6d:ad:92:79:20:45:5f:d4:91:6c:eb:7f:7b:54:d5:ce:01:30:
74:ef:dc:72:c8:a9:68:e7:2e:72:51:f8:70:48:ad:4b:3f:38:
8f:3e:1e:1b:a6:6f:44:66:ee:49:5e:3c:23:23:f4:29:21:9e:
32:16:60:51:6e:96:61:d6:b1:53:9e:37:cd:c2:80:66:fa:37:
10:7b:14:3d:a6:95:87:3a:5c:91:e5:f5:89:34:63:a6:42:52:
93:f9:19:72:ad:3d:90:6b:36:7a:4e:4c:dc:80:20:53:4d:df:
23:1b:ea:a2:5f:9f:b7:ca:e8:7f:d1:54:b0:af:d2:ef:60:27:
95:ed:ae:40:9a:08:92:2f:05:17:d5:5f:62:2e:95:65:91:5d:
4a:0e:1b:50:34:ff:d1:c0:5b:6e:5c:ac:57:33:f1:66:15:c5:
28:79:0f:26:48:71:5c:17:db:b2:b0:52:66:79:6a:28:52:76:
29:34:fd:f9:59:d9:6f:db:75:56:f1:17:eb:c7:5d:f0:c6:91:
3e:26:34:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrol7cfhh/BYhSdeFPhqNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy
NzFmMjQwHhcNMjYwMzAxMjMwMTEwWhcNMjYwMzAyMjMwMTEwWjAzMTEwLwYDVQQD
EyhkMTQ5M2E3NzYxOTcwNTg0NTFlZGFlNGJkNDRjZTFhZDc0ZDNkOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp9NpmYYnPeSwQVNLISw8l1Yx31w
pgJu3OaHycUpaUCRDXlaOhGGUM0J65n7HMUOccjMhstIqTZCV1C5SXN7ILDGeZCc
0WwSOIYQP5PhcIdAt+1b6JAa/FZhDon6Yfo7EA7xVUx6IHILmImwN0hIsRUR9A4d
Jd0Oqm4b+NzPCydYBPOxPGfnS7X+Vsi6N2UE8P3aqHURRL2zzWoo8Hl8hXqTMI5t
v8gmNCq4adbrjOxpKwgW2Q8mEkb8oJvE9QNtNm64Z1a3xRa20wt0FVlMDTdPLuCI
vPPL5JmJ//Kf0D9PuxvXpnRPrIvVUl+tg9V/e+CcwX9DyAqyDzF6dkFG/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFJOndhlwWEUe2uS9RM4a1009mnMB8GA1UdIwQY
MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt
NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2
LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0RF987b
DxQ5m1KnHLBBEzYn7zsFOxOIySm3n0bW9B3TNgaALvbncPHfFEOSltSCK2FhJikY
ba2SeSBFX9SRbOt/e1TVzgEwdO/ccsipaOcuclH4cEitSz84jz4eG6ZvRGbuSV48
IyP0KSGeMhZgUW6WYdaxU543zcKAZvo3EHsUPaaVhzpckeX1iTRjpkJSk/kZcq09
kGs2ek5M3IAgU03fIxvqol+ft8rof9FUsK/S72Anle2uQJoIki8FF9VfYi6VZZFd
Sg4bUDT/0cBbblysVzPxZhXFKHkPJkhxXBfbsrBSZnlqKFJ2KTT9+VnZb9t1VvEX
68dd8MaRPiY0Og==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:54 2026 by rpki-client