Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: 8F4HZnfxphCNzneQ4Eva3CxiG9S9Smhx8v9bO6Ecfvk=
Subject key identifier: 4E:A0:48:60:CB:1A:02:59:4D:63:43:0A:00:36:FE:BE:C2:6B:E3:30
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019CABD9BFC8CD51AB98922DD361D0010A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 17C9
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: Yw5TQlQKzBaT+tbUun2STgniAi1n0qt++apZgQH2sKc=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bf:c8:cd:51:ab:98:92:2d:d3:61:d0:01:0a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=4ea04860cb1a02594d63430a0036febec26be330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:5e:34:5b:31:fc:fd:7c:52:7e:7a:ba:bd:
94:7c:b8:ee:18:b8:e8:3a:c3:56:c3:9c:d0:05:73:
a1:ef:dd:07:9e:0b:fd:58:f3:db:85:bf:d2:39:b4:
0f:72:db:c7:9f:a7:ef:70:a0:b2:c9:c4:1a:98:39:
32:f0:11:6a:8e:d8:1b:92:9c:ee:0f:8d:27:3a:88:
b5:7e:7d:91:81:b0:f6:f7:c6:9f:7f:2f:c2:26:c5:
74:2e:a9:f6:d8:af:d7:92:da:c3:62:79:17:25:9c:
a7:09:2a:63:2a:8f:8f:2e:7e:a4:f8:3c:57:e1:99:
34:64:c3:0e:01:a0:73:7e:c9:72:1b:07:c0:cd:e2:
db:a4:03:d8:0b:47:4a:36:c8:2c:ef:fa:3a:a7:04:
04:39:c1:91:a3:ae:28:1c:b3:2e:3c:3a:db:1f:a1:
47:44:23:c3:cb:66:bd:e7:1e:fd:6d:c8:01:2a:2d:
59:51:d7:65:1d:0e:01:90:ad:6f:46:e7:7d:2c:c7:
8a:0e:53:d4:ce:89:8a:b4:c9:4b:ad:b7:07:0d:fc:
00:a0:4a:4e:f8:ca:26:67:85:2e:2f:02:b3:cf:4a:
8c:cb:97:77:3e:e8:ea:70:a0:e5:a9:e1:e9:29:d9:
7d:55:d2:9c:0c:6b:26:a5:9a:18:d2:04:12:4f:ac:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:48:60:CB:1A:02:59:4D:63:43:0A:00:36:FE:BE:C2:6B:E3:30
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:a0:fa:2d:8b:96:48:57:ea:76:03:9a:62:f9:5c:c1:f1:
43:a7:98:3b:3c:c8:15:73:62:0d:d1:d6:24:7c:c9:9b:6d:ee:
13:37:20:68:09:c7:91:9f:93:98:40:f1:3f:94:6b:1f:3c:ca:
cc:2d:98:93:23:87:b7:9b:61:66:6f:1f:3f:03:18:42:84:e3:
b0:0b:95:b2:8f:cd:db:16:63:6b:3b:73:c6:6c:27:55:42:cb:
d1:86:29:5a:3a:eb:4f:ea:d1:f7:c8:73:dc:f5:3f:86:69:1c:
67:53:66:a7:50:7a:c5:e5:39:5b:40:4a:6f:3e:15:fb:f7:eb:
59:9c:b1:12:4e:82:12:68:c4:81:60:0b:0d:c6:fb:50:f3:e9:
c7:f2:65:bc:b1:69:fa:44:cf:58:18:a5:f1:e4:a6:a1:2f:ef:
e4:91:1c:19:7c:d8:69:a3:16:a1:9a:58:5e:3a:c4:61:8b:90:
28:a4:9f:7a:f3:a4:8d:bf:58:b2:2e:28:a9:d9:1a:18:78:db:
b4:ff:2f:cb:c5:e9:ac:1d:d5:ea:a6:41:48:47:81:ee:37:aa:
de:f5:3b:6c:7b:69:9a:9c:3a:60:6d:07:28:5f:e8:5d:78:43:
ce:b1:00:5b:2a:6f:5f:36:70:24:56:fd:b9:43:74:fa:90:94:
90:f0:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:05 2026 by rpki-client