Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: Y4Qd2qtZOuTmDlo4+x48BanwqszC97dABRopYu+7W20=
Subject key identifier: 98:FF:AE:14:A8:5B:2B:07:A1:DE:F3:69:D8:E5:C5:39:67:F7:7E:05
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019CAC472366E4BD4A4B91C9401895FBD37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa (hash: 92P0sRZzCNI5Tycv/hRZey2LUOQu+EgEzREqInMSicw=)
2: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: vKi1u4s2diCXW3HHLCbj/QMjma77IVhY9NhKS5Bb1vo=)
3: tEF7W8QAASjmD3ZJv31PpbtJPmE.roa (hash: +pnJPXwKfh/vR28pIs9jPAqM5aVgozefoHrHe0Y59Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:23:66:e4:bd:4a:4b:91:c9:40:18:95:fb:d3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=98ffae14a85b2b07a1def369d8e5c53967f77e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:42:57:5c:a7:17:ff:cc:22:54:a4:31:b6:
db:c8:0c:88:e9:b4:98:30:74:64:db:af:2b:4c:09:
a8:b6:ca:ff:ea:f7:a3:4c:f0:7c:57:d5:49:df:cc:
9b:1b:ec:3c:13:6c:e7:c5:1c:99:c0:8b:60:b3:d3:
f6:85:9b:1d:a0:ea:ab:03:ad:07:f8:97:9f:77:9c:
53:05:b8:dd:f4:73:57:c5:e2:26:b9:f4:d6:8f:15:
4f:ae:b9:c2:06:f0:64:d5:98:fd:b6:84:5e:cd:16:
51:4a:14:d0:3e:81:b0:01:69:38:f6:20:a9:45:11:
9d:d3:f0:75:fb:fa:f9:61:10:b8:f7:05:6a:3a:53:
c7:ce:8e:d0:43:5d:38:6f:bc:60:af:6d:70:31:f2:
c1:02:b5:f4:e5:a3:d6:f6:55:f0:1a:19:d7:c9:b5:
5c:b4:c9:43:8c:47:a4:82:52:e5:50:a8:1b:09:cd:
5f:ec:91:6a:1e:17:e7:1e:a1:57:09:49:a9:7b:68:
ae:84:63:5f:da:4f:91:1b:04:d9:e2:e2:93:72:fb:
04:80:1e:0f:8f:ce:24:06:8b:b9:ec:81:f2:22:0c:
ee:b7:2e:3b:44:06:a7:48:04:d4:be:c3:74:35:17:
7c:d4:f4:3f:8f:c6:49:3b:4c:55:d4:33:54:b9:c0:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:AE:14:A8:5B:2B:07:A1:DE:F3:69:D8:E5:C5:39:67:F7:7E:05
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:56:57:80:9b:28:7c:d3:2e:c5:0b:38:68:6c:da:65:e3:
10:03:4a:db:c4:b8:18:ab:32:ee:1b:94:69:a1:70:db:a5:e8:
92:57:3a:36:4b:08:3a:b6:ce:78:eb:a0:fe:d9:81:ce:9a:9c:
e3:dd:ce:b3:89:56:78:83:83:83:25:bb:f0:39:91:96:20:fb:
c6:ec:35:93:7b:cb:6c:17:8b:7d:ee:85:9b:d1:42:7e:69:6e:
56:7a:f5:58:0f:d2:e6:78:44:53:c3:54:80:d7:59:04:ba:32:
44:ed:c0:b7:52:f9:63:da:b7:d3:aa:4d:35:1b:27:54:c2:b0:
cf:8a:cc:7e:fc:2c:fb:99:1b:7c:1d:bd:e8:b7:fe:72:4e:f2:
93:49:55:2c:0c:d9:75:f1:af:e6:01:87:d1:15:05:6e:97:06:
32:ae:08:bd:36:92:6d:44:94:c1:92:fa:85:44:85:53:95:35:
c0:16:b6:3e:cf:ea:b9:29:d1:b2:8d:f9:c6:fd:73:d6:c6:17:
0c:40:de:4c:4f:ba:81:2e:4b:23:d4:80:d7:56:84:24:af:84:
94:94:26:fe:2d:71:5a:ed:eb:9a:47:56:c9:6f:79:d7:79:72:
8a:92:96:19:a2:2a:db:2a:b4:82:4c:fa:d3:81:bc:3a:75:fa:
e2:69:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:27 2026 by rpki-client