Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: oWeIW6NjKbfLVjP5jexUxzSE7KMUmegE6ka+4ugLp9I=
Subject key identifier: 5C:22:0D:B8:25:A6:7D:B5:D3:F2:7A:11:F4:79:64:7B:2A:0C:AA:55
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019CAE3521C97F126BCB1EF945A6B97F9DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 04F3
Signing time: Mon 02 Mar 2026 11:00:43 +0000
Manifest this update: Mon 02 Mar 2026 11:00:43 +0000
Manifest next update: Tue 03 Mar 2026 11:00:43 +0000
Files and hashes: 1: Lm0YXMaLWclKoRURyg7-1BSKMMM.roa (hash: lcsnHzqJgV0Pr0+CJVRqQvA5eNcE3/rEZUnHTRT4+/4=)
2: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: dMNRgZSaKmyGppTcf2kAayuWiluI95Wyq1FUtLzdoSQ=)
3: s_i-4HgM08ZomafIARg5DCNgTzI.roa (hash: wSP0h+XQV0/zt4QIiT80nzFtCCr+jVfJzFx1wPlXOiY=)
4: uXDu77cxLGO111ouG3WizVkTwpM.roa (hash: jqcMrYd4GN+J0MgnqBXSyT/iy1d2bJSyGgMM3hAUiNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:21:c9:7f:12:6b:cb:1e:f9:45:a6:b9:7f:9d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Mar 2 11:00:43 2026 GMT
Not After : Mar 3 11:00:43 2026 GMT
Subject: CN=5c220db825a67db5d3f27a11f479647b2a0caa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:fc:85:2d:49:ad:eb:4b:3e:6d:c9:4e:90:
1c:94:e4:bf:81:62:f5:ea:88:d5:f7:ef:47:b6:4f:
83:d2:37:d4:9e:61:b2:4c:fb:a7:5c:9f:79:a4:c7:
34:79:f5:a9:d5:23:06:58:40:dc:87:1a:20:d8:77:
c9:38:a0:0a:ec:5d:e1:82:bb:2c:e5:ff:00:d3:24:
5c:6a:e6:21:c9:75:2d:94:c0:38:ac:8d:94:0f:9b:
f8:8e:5d:16:e1:e4:01:09:84:ad:25:f7:e1:70:60:
90:93:cb:12:99:3b:9e:dc:56:d5:7a:97:79:90:c2:
10:92:ec:08:50:75:aa:8b:bc:c6:38:00:28:f5:22:
a5:ec:89:75:5b:00:a5:29:31:fa:25:95:a6:ab:8d:
93:4a:8c:a2:06:64:6c:e6:2f:9f:16:dd:1a:41:38:
41:ae:58:ff:10:e0:fc:ba:ee:43:b9:69:74:62:d1:
6c:c0:fe:f4:46:66:f2:13:fc:87:26:ff:8e:f9:90:
3f:49:89:7b:ef:9d:30:aa:f4:f1:af:a5:85:15:49:
09:3b:e6:01:df:f3:62:dd:5c:53:6e:9a:a2:8b:66:
24:e5:6f:e7:90:54:a5:2d:ea:91:18:10:10:c2:12:
e6:7a:9c:67:4a:72:50:13:94:c7:c1:95:62:ee:4d:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:0D:B8:25:A6:7D:B5:D3:F2:7A:11:F4:79:64:7B:2A:0C:AA:55
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:75:47:51:4b:e1:74:85:d0:f5:6f:7d:38:1a:9c:e0:8e:
ad:7f:d2:aa:62:64:a2:09:b2:98:3e:83:da:12:bd:5e:c8:b4:
5a:ac:c5:e2:b6:71:c8:d4:41:71:2f:37:42:23:78:d9:17:4b:
12:57:ff:2e:20:f6:f0:3f:15:eb:b1:9a:e9:b8:3b:5e:19:ac:
48:10:b5:71:3c:56:71:42:6a:b5:a6:b4:b8:a7:c8:5d:d0:8f:
16:da:66:72:8c:d6:d0:6d:da:f5:b4:f4:87:77:e9:aa:dc:e3:
ec:12:13:51:5e:a7:c8:e2:e3:4b:46:72:9a:8d:26:7e:b3:4a:
66:0f:5d:23:3f:66:ab:0b:6b:76:72:b3:8f:26:8f:cd:73:00:
2c:5b:df:8e:5d:83:e2:af:78:d0:b8:79:b5:17:47:17:58:ff:
8a:db:e5:d5:f3:11:77:65:fd:34:15:40:69:94:f9:86:27:dc:
62:29:60:1f:f0:c8:03:b3:8c:05:e1:9f:d4:2a:21:72:14:a4:
48:18:62:bf:a1:5d:31:1c:b6:99:0c:8c:12:fa:fb:a6:3f:8d:
03:2c:79:aa:42:b6:bc:62:62:81:1f:10:74:df:69:8d:1d:72:
74:4e:a7:58:0e:4a:8f:05:cf:0c:80:22:89:ef:9a:52:9b:0d:
50:1d:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:59 2026 by rpki-client