Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: qbnSaVclGicnm/PqXfFDPhzToQElfFTi3xPjgk/EaE4=
Subject key identifier: 1C:0E:A4:F5:89:CA:22:69:68:34:3E:09:AE:8A:A1:95:B6:56:D5:BE
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019D992B9149DA1BC9D53C29896C7644EEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0B82
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: cWXqMgMQwLsa2ZgqhtbzhfhYwkGCp7r+uYyYovQjl4A=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:91:49:da:1b:c9:d5:3c:29:89:6c:76:44:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=1c0ea4f589ca226968343e09ae8aa195b656d5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:c3:56:1e:eb:51:f5:df:6b:7c:61:14:a5:
8a:72:b7:f5:52:d1:2c:26:bc:6d:57:0c:f6:56:bf:
d4:b8:3f:f7:3e:0b:69:da:70:4f:05:11:be:10:b1:
03:ff:6a:a3:96:e7:8f:f5:96:9b:f3:b8:2c:2e:1b:
18:70:93:b8:ae:4c:f5:ea:26:0d:1d:fa:9c:8b:19:
79:0a:3d:3e:6a:3d:3b:cc:0d:44:ca:66:59:be:e1:
ed:07:95:9a:25:8f:6e:13:82:5b:04:16:fb:08:6e:
e8:1c:e0:3b:9b:16:a0:ec:5f:55:ff:0f:93:2c:1f:
3e:01:b5:ee:80:da:58:7c:1c:de:4c:9d:a0:92:90:
21:23:cf:00:e5:9c:4b:cf:80:50:f0:09:b0:76:f7:
df:bb:03:0e:80:51:6f:f7:0e:af:af:98:bf:53:89:
15:d7:a4:4c:9d:ce:3c:67:d5:53:af:b6:43:42:c5:
cb:8a:e1:f6:ac:7e:61:e7:a4:47:5b:cd:d3:08:5e:
16:05:af:ed:ff:b4:eb:c4:f4:77:54:ba:f4:af:31:
5f:c2:0c:67:b6:f8:3d:c6:d1:d4:fc:28:14:ae:fb:
ba:3b:1e:37:ae:01:e1:87:7b:ca:21:cb:8f:a6:2a:
fa:b2:40:70:c0:58:a1:67:32:be:04:11:5f:26:91:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0E:A4:F5:89:CA:22:69:68:34:3E:09:AE:8A:A1:95:B6:56:D5:BE
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:f5:c4:b8:9c:28:f6:ba:a1:82:ae:fd:58:9e:f5:3c:aa:
bc:5b:4d:af:9d:d2:a5:57:cc:3f:87:b1:ae:ec:1c:89:67:71:
18:7f:04:2d:cc:f8:3a:98:2b:c5:48:8f:cb:a0:24:fd:42:40:
78:58:ec:6d:5b:16:d6:37:d6:20:e3:d5:00:5d:d5:83:8e:e0:
8d:bf:51:71:9f:11:5d:fa:a4:1c:6c:0d:d7:6f:d8:91:1f:3f:
da:d5:43:4c:1d:ca:63:af:5a:03:a8:26:05:23:13:92:37:ef:
63:6d:2a:61:6b:bd:1f:35:32:33:ac:f3:6c:ac:42:3f:16:bf:
48:ad:30:59:93:f0:5b:a2:a9:4d:ce:24:7b:c6:85:f1:0f:50:
f0:b6:03:0c:8e:19:31:69:f9:e1:05:9c:c5:30:f1:07:b4:76:
fb:3c:02:05:dc:1e:2a:51:c3:80:b2:6d:0f:75:3e:23:fe:f9:
a7:d5:67:95:e6:05:8e:34:b2:50:51:bd:71:f7:bf:0b:5d:b5:
32:48:1a:a1:66:d4:23:d8:bb:6d:37:f6:18:17:26:a3:40:67:
38:a9:4b:7d:30:8d:71:a9:38:8b:3a:44:71:2d:fc:34:6c:32:
ad:c7:af:3b:28:0e:d7:89:af:77:99:c8:6e:b8:d9:de:c9:93:
ac:cc:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:50 2026 by rpki-client