Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: n6FsyzmGBws2L0Z+ABS17uALXm/jLxigkTpT9vaYAXI=
Subject key identifier: B5:F8:6A:E8:38:BD:AC:F7:6A:CB:B4:4A:67:ED:C9:C6:C9:10:04:76
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019CAAFD3DAB1881A0743AB98F1E9614CF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 146D
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: C4pSXR9sDoJmWbySOa/2KysQsju75PWp+1ZrrynDodw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3d:ab:18:81:a0:74:3a:b9:8f:1e:96:14:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=b5f86ae838bdacf76acbb44a67edc9c6c9100476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:76:30:21:69:a0:8a:73:1f:cd:cf:1e:39:
b3:a4:e3:79:a7:0e:f8:45:77:2f:86:64:c9:a3:d3:
c7:89:67:48:9e:17:ab:30:17:91:1b:2c:1d:8c:6a:
20:c7:d4:ea:b2:68:4b:69:85:19:e7:15:b8:72:fb:
0f:7f:d1:57:28:eb:37:d2:a1:df:4b:92:01:20:05:
45:39:aa:43:c6:4b:8a:9f:f4:2b:41:59:0e:2f:a8:
3a:39:25:bd:88:f7:c0:d2:a3:09:75:d5:14:82:81:
7f:f5:d8:05:a1:e5:63:a2:00:09:22:4f:06:92:fe:
26:fa:38:30:da:39:13:29:46:c8:8b:83:30:c5:b8:
a4:11:d0:c6:e2:ee:87:43:f8:ee:5c:7a:ce:ed:52:
ad:27:69:9e:fb:04:d5:df:df:10:09:80:41:13:24:
bb:8f:f9:7d:c7:d8:d7:2c:eb:7d:14:ef:1d:4c:b5:
82:37:0a:4f:fe:92:e3:cd:88:41:44:56:85:93:23:
7e:08:46:a3:0b:ef:76:01:cd:49:44:0c:ac:b5:02:
01:2d:3e:e8:b7:e1:d9:ca:1c:73:cc:44:ea:91:73:
72:53:ad:56:30:07:5b:74:89:1e:bb:67:c1:d4:bc:
e7:47:50:9b:5b:54:29:9d:1d:3b:39:4d:61:2d:6d:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:6A:E8:38:BD:AC:F7:6A:CB:B4:4A:67:ED:C9:C6:C9:10:04:76
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6e:83:1d:2d:ab:7c:b3:0e:58:d5:85:42:54:11:41:21:e8:
a8:2b:fb:83:b1:21:f5:49:04:ee:40:90:2d:6d:0f:a5:0d:ba:
a5:b4:ea:31:fc:8d:48:1e:3e:66:ad:d6:85:9f:7a:29:bf:82:
6d:2d:f4:57:18:04:85:97:76:dc:b7:f5:6c:8b:20:71:f6:8e:
83:ec:35:eb:45:55:fa:64:8e:96:fc:d4:fc:da:0f:a0:99:e0:
94:07:c8:2a:65:71:df:dd:5e:d6:2b:3d:9a:5d:ee:9e:68:b9:
23:f1:61:c8:3a:50:2e:c4:7a:74:f1:ff:96:66:7f:61:46:73:
f5:e3:8d:2c:68:a3:a7:7e:9a:8c:77:5c:b0:ca:83:69:0c:3f:
c8:db:a9:68:82:8b:6f:14:33:7c:3f:7f:6b:6e:6f:e5:22:f8:
16:cb:8b:45:57:b5:14:16:67:90:bb:79:71:64:62:fe:1e:a8:
65:b5:99:8a:77:1b:9e:6c:89:41:90:0e:75:6d:09:ba:66:fd:
c9:b0:e4:ef:c0:45:b8:71:81:f4:6a:15:15:d8:23:a3:f9:88:
e4:8d:27:91:f5:7a:54:0f:2a:bd:8f:fc:b3:5b:0a:86:a7:e9:
40:64:af:54:3a:47:64:05:1a:9f:69:33:9a:89:a9:c7:06:27:
93:27:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:53 2026 by rpki-client