
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: MLHVhOiE6DMuS3ibsQHFpye7l7LNC9xpHFEgxASz9BU=
Subject key identifier: 1B:CA:3E:97:16:A2:39:5A:B9:C5:AB:EC:3A:F3:C7:1F:DA:94:B1:92
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019EBFFF707B46037BF092E10B8A7EE79572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1581
Signing time: Sat 13 Jun 2026 08:00:49 +0000
Manifest this update: Sat 13 Jun 2026 08:00:49 +0000
Manifest next update: Sun 14 Jun 2026 08:00:49 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: 4TdBQ2IQa8lla9AeQdQdVc2l3eElp59QMXdPOuV2rsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:70:7b:46:03:7b:f0:92:e1:0b:8a:7e:e7:95:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jun 13 08:00:49 2026 GMT
Not After : Jun 14 08:00:49 2026 GMT
Subject: CN=1bca3e9716a2395ab9c5abec3af3c71fda94b192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9d:70:19:8c:3c:54:1e:9f:4e:c8:5c:30:fa:
76:48:e1:d8:13:e4:0c:bb:6c:43:55:26:3b:01:06:
6f:34:f9:1f:5e:a6:15:35:d5:bb:cd:71:4f:e5:74:
da:2b:e1:5e:f5:67:d5:12:9f:15:55:a7:b8:52:9c:
ef:f7:36:a4:e1:f3:b0:63:d8:1b:4b:88:e2:7a:c9:
0f:16:e2:5d:cf:e4:15:ae:c5:9c:7b:99:92:9c:94:
86:c3:13:e7:00:df:17:e0:2d:8e:84:88:aa:01:08:
9e:3c:4d:5f:63:e3:0a:5d:de:58:3e:8e:8d:0f:ab:
db:88:6b:37:1b:54:28:cd:7d:b6:03:3d:14:d2:14:
19:87:7e:46:76:0a:4e:9d:e8:22:27:c7:5f:66:3d:
2b:7c:22:24:e0:ac:c3:c5:24:b3:2f:84:42:94:89:
0c:80:16:76:b4:82:4c:bc:21:2b:ee:64:42:c8:72:
66:61:97:70:a5:e7:42:58:0b:c7:7d:69:8d:a4:33:
2d:c4:90:55:be:4f:95:da:26:09:91:57:aa:60:a0:
cd:31:2b:2b:03:63:d7:b2:0a:80:33:35:b2:f4:cf:
b4:6f:87:3d:98:e9:22:6c:55:ed:71:19:e1:4c:cb:
d5:65:ea:46:99:a7:62:4c:ad:17:ed:f3:05:8f:a4:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:3E:97:16:A2:39:5A:B9:C5:AB:EC:3A:F3:C7:1F:DA:94:B1:92
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:98:8d:0f:1d:38:cc:91:60:c1:c8:dc:ed:49:bc:b0:bf:
1e:9f:28:80:30:c4:c6:71:69:02:e9:81:93:99:1a:6d:a7:f3:
03:2a:fb:3d:9d:0b:a8:3d:0e:67:a5:2a:9c:12:d6:40:6f:18:
4b:77:1c:5a:ca:c5:d2:d8:90:32:8e:cd:69:f7:39:ac:f4:76:
71:68:f8:73:f9:fb:d5:19:6b:94:21:40:d4:1e:a6:72:65:a7:
75:da:e5:f0:16:52:44:fa:18:64:f5:89:ab:59:fd:63:18:6a:
ca:f5:c7:42:09:f5:7b:48:38:ba:63:9f:02:28:0b:a2:b5:58:
34:62:4d:c1:f1:05:c4:0e:af:82:f5:04:6a:f1:12:ff:17:c1:
90:07:b7:ee:eb:4c:86:2f:c6:aa:36:19:3e:6a:41:3a:9b:e5:
c2:99:9d:b3:4e:7a:a6:5d:2c:ca:e4:f9:39:61:55:f0:8b:42:
69:23:4b:9d:2e:af:ee:33:cc:98:21:59:97:23:42:a9:39:eb:
c3:fb:72:6b:fd:23:77:62:9f:5f:41:a4:fd:44:36:c5:5e:03:
ca:7f:3f:c8:0b:c0:10:96:a4:80:c5:13:fe:83:cd:6c:50:77:
3f:06:a7:07:99:c2:3b:89:88:e1:59:b7:6e:84:5b:6d:4d:57:
6e:ba:51:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:47 2026 by rpki-client