Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: 8C1O/rgMYKU9dGl3cg6g3Pwz+hIkQ25W4wzWFUdDLPo=
Subject key identifier: F4:F0:A0:5D:F3:03:55:34:6F:D1:A6:3E:FB:6A:9A:BE:6F:01:38:76
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019D9A754218D5ACFD9B680EC402A1DD2FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 14E9
Signing time: Fri 17 Apr 2026 08:01:08 +0000
Manifest this update: Fri 17 Apr 2026 08:01:08 +0000
Manifest next update: Sat 18 Apr 2026 08:01:08 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: tGnl6w3ePjHFsGdeXyOwHykPlF2yB9VGXgmMBepJjmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:42:18:d5:ac:fd:9b:68:0e:c4:02:a1:dd:2f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Apr 17 08:01:08 2026 GMT
Not After : Apr 18 08:01:08 2026 GMT
Subject: CN=f4f0a05df30355346fd1a63efb6a9abe6f013876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:9b:d0:23:a9:3e:36:00:78:6d:19:62:00:
ce:e0:f2:42:2b:62:65:06:a6:e2:e2:ef:ce:47:14:
1d:08:46:f3:23:41:36:6d:aa:67:ae:28:b4:f6:4e:
3b:61:59:5b:59:b3:39:43:6c:da:5d:f9:a8:5e:68:
b3:50:d5:6f:f9:0d:08:bf:58:fb:c9:81:e2:23:ea:
ef:b5:7f:e6:9b:6e:6c:f9:ce:54:7a:07:5e:43:98:
96:53:87:b7:e6:fe:aa:01:b2:b5:5b:3c:e2:6d:d2:
1b:ee:3b:3c:65:c0:90:0f:57:30:40:70:e2:4b:c4:
ed:4b:06:d7:b9:7d:0a:8c:7f:17:c2:22:40:96:2a:
a8:46:13:bb:2a:f4:93:d4:d2:84:6d:82:c1:24:ab:
c7:72:cb:ba:02:1c:c7:f5:6d:ab:49:2f:f4:2e:b6:
7e:2d:a3:c1:c1:23:79:0a:9d:67:45:74:66:b0:d1:
31:d1:c0:c4:06:41:a7:8a:c6:df:57:f1:28:78:f9:
9f:10:b5:cd:98:28:ea:dd:d7:19:b9:c2:e2:2a:52:
69:f2:d4:b7:4e:a1:e9:eb:62:60:59:80:3a:26:dd:
e8:5e:da:e1:58:82:b0:bc:a3:4b:c6:f4:71:e2:a2:
4a:4f:33:fd:40:1e:aa:76:07:c4:82:cc:b7:cf:58:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:A0:5D:F3:03:55:34:6F:D1:A6:3E:FB:6A:9A:BE:6F:01:38:76
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:7a:f9:2f:61:32:cb:63:e7:d2:21:6d:d6:77:61:2c:39:
41:aa:84:06:40:dd:b0:68:12:e7:6b:69:37:82:d3:bc:d3:e8:
78:cd:eb:5b:5c:61:86:1f:b9:20:ca:38:5a:d4:ce:90:9e:51:
55:18:ed:03:df:7a:6a:9b:24:79:63:28:bb:6b:e4:e5:7f:d2:
68:d1:68:36:3b:2a:be:03:13:92:9b:da:a7:62:f2:54:ac:32:
4f:b0:f0:57:e7:07:26:4f:c8:68:24:8b:13:e7:f8:46:0d:53:
e8:75:34:bb:cd:48:5f:34:45:d6:0e:0e:56:09:13:18:39:28:
de:f2:fb:4c:f7:98:50:4a:75:fd:4b:07:f7:b5:33:78:31:7f:
ae:a8:05:d9:8e:07:59:10:75:f8:bc:b7:15:b8:33:09:2f:ba:
79:e6:f0:a5:87:3e:d6:49:41:6f:76:6c:50:55:27:11:c3:a2:
14:07:09:f6:b6:43:3f:ae:74:7e:0f:10:64:1d:81:a2:12:0f:
0a:b3:0e:46:7e:70:24:22:a7:9a:52:f8:66:17:ef:00:c5:71:
1f:40:aa:2d:94:c1:96:79:0b:32:09:31:4a:90:9a:a7:bf:5f:
7f:70:fa:c6:af:6e:6f:93:f8:e0:da:ec:97:e0:5e:48:f7:21:
de:f4:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:28 2026 by rpki-client