Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: /+BWt6W2XfBugq1NgeKYFtR8v+DYgaoM7JpcgnCdV5c=
Subject key identifier: 55:8E:A6:BF:0F:FB:8B:D4:C4:B8:6E:5E:1B:EB:6F:D1:F5:9D:77:CB
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019D992B4C51E9A5A1E6539858D1496640A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0F69
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: veSoMBS4r2ZuDHvgBYJGWESm/rDY87NrXb5X2SdYqzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4c:51:e9:a5:a1:e6:53:98:58:d1:49:66:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=558ea6bf0ffb8bd4c4b86e5e1beb6fd1f59d77cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:68:2b:c2:34:f3:ed:c8:0a:1f:72:57:75:
a1:d7:c9:e8:99:fb:cf:43:ca:a8:ea:fb:16:91:a6:
f5:4a:30:1b:f9:35:14:7a:fb:c4:5b:4f:f6:aa:54:
c4:d1:1f:12:f0:00:bf:b5:ec:05:f3:0d:7c:75:78:
e6:5d:22:22:a1:84:30:ec:81:5c:63:63:ad:6a:7d:
32:a4:05:04:50:11:fa:f0:79:69:b1:8c:e3:5c:87:
6c:57:87:07:22:95:77:d8:e7:91:1a:9d:82:81:da:
25:86:e9:34:8c:2e:c7:d3:28:e5:bf:1a:c4:66:35:
bd:a9:cc:1b:3b:6f:0b:62:d2:ee:93:4e:35:ed:02:
1b:22:2b:c3:37:d4:f7:78:7b:18:42:11:c6:a7:33:
2c:ea:ac:35:49:e8:39:ea:7b:88:3d:58:7a:16:89:
f9:11:c7:4f:58:4e:a8:01:de:4d:ab:6f:c5:db:e6:
89:93:f7:68:bc:ab:4b:56:ca:e5:b3:42:33:02:56:
e6:6e:8c:db:b7:bb:3c:e3:f7:d6:25:50:df:2e:ac:
bd:6e:88:08:eb:3d:e0:90:93:50:bb:a4:6e:bb:df:
21:0d:a6:84:22:43:75:17:bd:43:63:bf:fe:3c:56:
7a:9b:03:c6:72:5a:e0:21:da:d8:c5:9d:2a:90:15:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8E:A6:BF:0F:FB:8B:D4:C4:B8:6E:5E:1B:EB:6F:D1:F5:9D:77:CB
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7b:c6:0a:ba:21:a5:24:09:b1:22:3a:35:1d:05:71:58:c0:
d1:7f:68:35:ce:be:e6:1f:47:ee:31:c1:07:81:61:8b:30:6f:
2f:01:a2:2b:3a:3b:27:5f:49:a8:f0:73:cb:5f:25:1c:e3:fc:
4d:01:04:68:5d:a8:e6:7a:46:0d:40:91:f1:61:6f:dc:37:a5:
4c:b3:1b:6c:f7:fe:88:0e:26:a7:db:38:7d:be:7b:27:8f:23:
f5:4d:d9:e3:ff:9a:e0:ab:f2:99:11:71:f9:de:32:dc:04:6b:
60:2a:0f:a6:27:df:0d:93:6f:03:b3:f8:a1:04:28:31:27:f1:
2b:a0:6e:f6:cf:73:5d:d7:6f:35:8c:c0:39:6c:2f:85:a8:f0:
b7:d6:68:0d:31:19:da:34:a0:f7:85:5b:d7:12:c5:41:46:b7:
e2:fc:f3:3c:48:10:94:e0:a9:ba:13:1d:28:27:cb:4f:e7:6e:
22:f3:61:f0:0c:05:cc:fa:7d:1f:c5:74:3d:18:52:94:ea:c3:
fa:c6:b4:53:d0:67:7e:cc:2d:61:cf:b9:2c:30:f5:e0:db:0b:
0f:65:bf:36:f9:72:dd:60:fb:b2:29:fd:f9:39:d6:47:76:70:
c3:2f:8a:75:e7:24:21:bc:8d:3b:de:23:86:56:ee:a2:c0:4b:
99:0c:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:21 2026 by rpki-client