Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: Xd3QmQemjEq0gbTvyjZ2aMNJPL8PZIJ6Ap6GtX5psCk=
Subject key identifier: AC:A2:71:5F:80:5D:5B:78:D5:C9:90:ED:1A:18:CD:62:50:79:81:B7
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 019CAAC71D6860B3D656635641368AABD7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 06C3
Signing time: Sun 01 Mar 2026 19:01:41 +0000
Manifest this update: Sun 01 Mar 2026 19:01:41 +0000
Manifest next update: Mon 02 Mar 2026 19:01:41 +0000
Files and hashes: 1: TXQWqwg-_fg03GSnLtq9K2P-qXo.roa (hash: Ax0Uac+SRfpjnik5CivlZoRajYWhAEb1KtSZ4OnL+e0=)
2: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: 4h/vYO7/V89UERdP6y9idEfqSv51TOotA/Qtx1/SOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1d:68:60:b3:d6:56:63:56:41:36:8a:ab:d7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Mar 1 19:01:41 2026 GMT
Not After : Mar 2 19:01:41 2026 GMT
Subject: CN=aca2715f805d5b78d5c990ed1a18cd62507981b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:94:04:f3:c4:51:e1:61:e8:20:12:65:b7:
13:59:ab:7b:e3:20:3d:75:27:f5:55:f0:5f:d1:7c:
e1:1a:8d:d6:f2:f6:03:83:c3:b2:9f:36:46:cf:02:
c6:99:26:a8:86:0e:7b:bb:61:2a:c1:0e:c4:47:e8:
db:19:29:62:80:66:82:aa:2a:31:57:89:cc:70:f9:
5d:88:23:63:b7:ca:26:46:0a:3a:85:11:9b:ac:a1:
b1:2b:9a:df:de:ad:ec:40:a2:0e:5f:22:a0:6b:aa:
e1:42:62:5f:c9:8c:54:e6:70:c8:23:db:b0:b4:fa:
ae:22:a0:d3:3a:ee:74:73:ec:a3:fd:00:19:8c:77:
20:40:ae:72:67:89:d6:01:ec:18:75:ae:e5:95:72:
ca:a9:ba:46:78:a4:4e:b1:fa:14:38:d7:2f:aa:de:
bf:3c:82:cb:8b:d4:f8:eb:29:4a:6b:c4:cf:90:4e:
61:5c:58:cd:62:b4:2c:b8:15:fe:ac:47:fe:78:cf:
90:f7:6c:ac:ed:33:e1:b7:88:64:0b:70:5a:d2:4d:
e2:c3:60:62:06:59:34:cb:1c:e4:0f:35:d4:3b:51:
63:56:f7:1b:8d:9d:86:26:59:07:01:f3:47:ac:c9:
3b:6f:b1:a3:fc:e5:dd:43:44:8a:c8:f6:c3:ad:a0:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:71:5F:80:5D:5B:78:D5:C9:90:ED:1A:18:CD:62:50:79:81:B7
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:dc:49:a1:13:3c:f1:ff:db:0f:1f:f5:8a:bd:50:89:34:
bd:4a:11:65:5c:04:4a:e6:59:e3:3b:05:69:3a:54:8c:e0:b4:
fc:16:a6:65:13:be:cc:a3:a2:01:fd:32:96:1d:f0:e1:bd:54:
28:f7:5b:ac:a5:17:da:ee:e6:bf:ef:8d:c9:d6:21:63:88:51:
e4:b1:85:c5:d4:82:d2:96:87:a9:0f:04:19:80:2d:8b:5f:eb:
0d:e0:a5:dc:32:e8:f5:59:4d:a0:23:8e:c7:d2:54:fb:ee:c3:
f6:5a:af:d4:94:69:d8:29:de:64:da:45:12:fa:1a:56:a4:6b:
d9:38:44:36:37:88:b9:72:9a:04:ba:eb:e1:82:37:e8:49:d8:
7f:04:dd:61:31:2b:d1:49:ad:0a:35:0c:b5:77:6a:ff:b0:3e:
e3:be:eb:7b:c8:f0:15:68:d4:ef:5e:49:ab:ed:5f:ed:dd:40:
7d:eb:bd:29:78:f2:9d:0a:d2:12:c0:3d:f6:1b:4b:1c:8c:39:
ab:1b:50:68:be:07:2b:ce:95:1e:ab:db:a5:c2:35:42:fb:4b:
05:51:84:f4:c6:d9:12:d5:4a:f0:05:26:4e:db:28:3c:fc:90:
a1:bb:81:77:a1:e2:a1:00:3b:eb:c7:f6:10:99:fa:4a:48:92:
d2:12:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:36 2026 by rpki-client