Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: v2JE5vTJbTIDh/ElywaBb/sDv2C4vqMs+ynQ8h5Itvo=
Subject key identifier: 2C:E2:D8:A6:98:CA:3B:A4:AE:D5:54:13:C5:51:55:B4:76:6B:27:DB
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 01A0D1C93FE8685C638DE7EDE129618BF2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 1114
Signing time: Thu 24 Sep 2026 05:00:22 +0000
Manifest this update: Thu 24 Sep 2026 05:00:22 +0000
Manifest next update: Fri 25 Sep 2026 05:00:22 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: JInsPwlu71bAaf1e0psfMQIO8DlTW2f93E0VNGt38qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:3f:e8:68:5c:63:8d:e7:ed:e1:29:61:8b:f2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Sep 24 05:00:22 2026 GMT
Not After : Sep 25 05:00:22 2026 GMT
Subject: CN=2ce2d8a698ca3ba4aed55413c55155b4766b27db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:82:81:2b:d5:65:db:a8:34:5f:9e:ba:51:
82:37:4d:09:42:f2:c3:d5:7f:88:29:7d:06:11:de:
3e:d7:73:b3:01:57:c2:da:a5:77:87:0f:78:ae:cb:
59:3e:91:d9:e5:42:db:b4:f4:51:39:6b:fa:cf:0d:
97:b2:da:3b:c5:db:ed:c7:91:76:58:77:01:27:a5:
5b:d2:0b:cd:17:8b:cc:97:3d:26:97:a8:49:f0:d1:
4e:a8:dd:dc:13:0b:91:67:24:16:60:04:8b:e6:04:
fb:3e:a1:dc:17:81:0f:45:cb:a9:a2:11:70:d4:1d:
50:84:18:62:b5:db:45:f3:e0:3f:24:36:d8:19:e0:
37:22:ce:8a:70:92:ee:3a:72:c4:e2:e2:37:db:47:
20:ab:5a:f0:87:fc:2d:de:05:0f:1a:11:48:b7:38:
63:61:e5:c2:1e:43:73:16:49:2d:07:f6:dd:52:51:
a6:df:6f:17:18:c2:01:c3:34:f6:1c:8f:a0:59:62:
2d:ca:ad:86:86:b7:26:76:73:1c:8e:2b:7a:01:61:
81:dd:56:4c:ad:14:3f:d7:68:da:26:fc:9f:d4:75:
ec:9d:ce:70:6f:9c:7e:f6:fb:17:65:f4:eb:24:a2:
d2:4d:ff:e2:32:b3:5e:30:96:86:a5:d8:cf:78:5d:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E2:D8:A6:98:CA:3B:A4:AE:D5:54:13:C5:51:55:B4:76:6B:27:DB
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b3:2b:ff:d9:d0:3c:09:8b:96:a4:f9:a0:64:20:10:7d:70:
58:b8:04:b1:67:e9:4a:66:7c:3c:c3:dc:75:1a:5c:a3:fb:e0:
72:fb:e8:06:c6:9c:5a:61:2f:e4:0a:78:48:3a:68:14:5a:3a:
69:d3:e7:2c:1c:f7:a7:e4:0d:f3:b8:ad:ab:d8:99:77:7a:09:
a2:fa:51:e5:8e:d4:c1:cc:d6:f5:21:e6:37:42:7d:7b:81:9b:
09:17:86:0d:0e:3b:7b:fa:a4:bf:6b:c3:d0:9f:cc:4f:d1:90:
db:78:0c:6b:f8:85:da:bf:c9:92:23:1c:36:8d:32:30:48:20:
17:f0:6e:0e:6a:76:eb:90:d2:7a:e2:2d:6d:a1:ea:84:3c:43:
b9:b5:c0:c3:28:bc:68:a1:6c:80:e3:80:87:80:6d:17:de:90:
05:3d:b9:83:41:a6:70:82:08:b6:69:a0:f9:cb:45:7e:cf:7a:
aa:a9:06:fc:c3:f8:a5:45:72:8a:20:0d:43:f3:d3:bf:09:c8:
79:52:82:51:48:8d:33:ac:33:f6:15:c9:d9:53:75:4c:71:24:
0c:79:26:c5:ba:fb:59:dd:8d:38:01:0a:c7:6c:0c:5e:d7:c3:
73:98:1a:4c:d8:3d:b9:70:47:ea:69:90:fc:b0:74:06:62:de:
84:e4:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:25:06 2026 by rpki-client