Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: +QcBvgmI/oTHGmsY4zbn04ZEzAM9JweRdo8NV1phvLc=
Subject key identifier: 9A:97:36:22:6D:96:2D:AC:42:A2:14:60:82:59:C9:74:4A:42:7F:AE
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 019D99D011D7B0C00EA68D557F6483F80B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 0D6A
Signing time: Fri 17 Apr 2026 05:00:43 +0000
Manifest this update: Fri 17 Apr 2026 05:00:43 +0000
Manifest next update: Sat 18 Apr 2026 05:00:43 +0000
Files and hashes: 1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: 5RMcPhrKJHbHWWfb9GDvlTe4bsQl7U9Kzn9tTU/SPkQ=)
2: ybGK7D59nhsrV5zcx9pDpZj5zRw.roa (hash: lUVMObnC7ci77KqYjQKC6vaADGXMIPOZVK0KWxLUoCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:11:d7:b0:c0:0e:a6:8d:55:7f:64:83:f8:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Apr 17 05:00:43 2026 GMT
Not After : Apr 18 05:00:43 2026 GMT
Subject: CN=9a9736226d962dac42a214608259c9744a427fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:cf:c2:1f:42:b6:c1:ce:c7:e9:3d:cd:cc:
3d:cb:0f:ef:3c:f3:8d:e6:5b:17:7b:1b:d3:28:ac:
6e:55:b5:56:db:37:0a:5e:d7:d0:a6:c4:cc:d4:33:
86:9e:59:92:d8:42:56:56:f2:3c:71:45:4d:06:fc:
72:bb:45:ce:70:aa:e0:b7:6f:3a:8d:77:6f:15:c2:
db:4a:f4:f5:5b:fa:a3:76:66:a8:24:b7:dd:36:c2:
8b:de:c4:01:a6:85:87:61:fe:a9:17:9c:1d:21:cb:
13:6f:97:b7:81:54:bc:0e:9b:e6:a3:d0:3c:54:13:
c0:d7:d3:fd:6c:a6:c1:f3:9c:40:44:aa:96:2d:86:
f8:63:d3:b8:ce:d8:01:a1:e0:1c:5f:12:be:83:57:
32:85:88:39:2c:64:a0:c1:c8:2c:81:08:0d:f3:17:
f3:5e:57:e1:48:75:e6:bf:7a:43:3b:f9:b7:8e:7a:
b6:98:8b:30:f3:61:40:ac:c5:d7:fa:a8:ce:02:37:
ee:c6:63:ba:02:1b:77:f3:f0:44:5a:a2:0a:40:b7:
72:d0:73:f6:86:e7:41:ef:e1:8b:65:8c:32:23:9c:
a9:66:f3:dc:f4:41:11:1a:31:9c:3e:1a:93:30:ee:
d6:73:0c:2e:3d:9a:07:3d:f4:c8:34:98:d1:a1:ad:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:36:22:6D:96:2D:AC:42:A2:14:60:82:59:C9:74:4A:42:7F:AE
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0d:ca:42:83:cf:3c:bd:a6:71:a3:67:3b:6a:f7:ed:eb:00:
77:5a:f3:ed:85:26:2e:ee:1d:ec:89:94:34:1c:a7:f7:3d:58:
8d:e0:5f:2a:ae:37:75:18:e9:8b:a7:05:af:01:f4:8c:be:d5:
ec:8c:07:23:87:c2:f8:58:f8:bd:98:9f:71:1d:6c:b5:e8:b0:
94:e0:b4:73:a7:73:0d:08:3b:5c:a8:61:80:89:5b:4a:26:54:
17:ec:6b:63:36:ce:d6:f3:6b:ec:2f:c7:53:bd:fb:5e:cc:aa:
84:a0:14:14:40:42:c2:ed:46:2b:6f:27:f8:e1:9d:94:53:96:
80:90:50:5c:b3:19:e7:d7:75:36:c2:03:83:2e:bc:94:98:7e:
95:87:49:b5:1d:a7:e5:63:37:52:07:3f:16:12:54:fc:0b:03:
ad:3c:8b:d2:27:3b:3c:81:8d:0d:9d:7c:58:fa:40:3d:0d:d8:
31:96:4c:71:dd:f7:10:bb:85:1f:ae:74:19:b7:e9:93:e2:8e:
10:5e:30:5e:ab:06:3a:a5:9d:1c:52:cc:97:ef:50:ff:b9:4f:
72:d8:1c:dc:68:ae:93:38:36:fc:55:fb:9f:c4:14:f1:82:19:
92:f7:79:79:c4:db:06:cb:07:cf:7a:e4:7c:d8:eb:ac:84:4b:
67:be:de:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0BHXsMAOpo1Vf2SD+AsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4
NzZjZDMwHhcNMjYwNDE3MDUwMDQzWhcNMjYwNDE4MDUwMDQzWjAzMTEwLwYDVQQD
Eyg5YTk3MzYyMjZkOTYyZGFjNDJhMjE0NjA4MjU5Yzk3NDRhNDI3ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeLPwh9CtsHOx+k9zcw9yw/vPPON
5lsXexvTKKxuVbVW2zcKXtfQpsTM1DOGnlmS2EJWVvI8cUVNBvxyu0XOcKrgt286
jXdvFcLbSvT1W/qjdmaoJLfdNsKL3sQBpoWHYf6pF5wdIcsTb5e3gVS8Dpvmo9A8
VBPA19P9bKbB85xARKqWLYb4Y9O4ztgBoeAcXxK+g1cyhYg5LGSgwcgsgQgN8xfz
XlfhSHXmv3pDO/m3jnq2mIsw82FArMXX+qjOAjfuxmO6Aht38/BEWqIKQLdy0HP2
hudB7+GLZYwyI5ypZvPc9EERGjGcPhqTMO7WcwwuPZoHPfTINJjRoa3xowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqXNiJtli2sQqIUYIJZyXRKQn+uMB8GA1UdIwQY
MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt
YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0
LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQ3KQoPP
PL2mcaNnO2r37esAd1rz7YUmLu4d7ImUNByn9z1YjeBfKq43dRjpi6cFrwH0jL7V
7IwHI4fC+Fj4vZifcR1steiwlOC0c6dzDQg7XKhhgIlbSiZUF+xrYzbO1vNr7C/H
U737XsyqhKAUFEBCwu1GK28n+OGdlFOWgJBQXLMZ59d1NsIDgy68lJh+lYdJtR2n
5WM3Ugc/FhJU/AsDrTyL0ic7PIGNDZ18WPpAPQ3YMZZMcd33ELuFH650Gbfpk+KO
EF4wXqsGOqWdHFLMl+9Q/7lPctgc3Giukzg2/FX7n8QU8YIZkvd5ecTbBssHz3rk
fNjrrIRLZ77exg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:11:57 2026 by rpki-client