Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: H26d2u/VqOPf88bbQm87RxzU1s7cnixT5F086Gu6png=
Subject key identifier: 43:1A:A0:F2:6F:23:BB:69:29:50:6E:17:32:EB:42:E7:C2:FA:3C:09
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 01A0D4CB43E50AC39AFF432AACD8FE3243C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0D2F
Signing time: Thu 24 Sep 2026 19:01:26 +0000
Manifest this update: Thu 24 Sep 2026 19:01:26 +0000
Manifest next update: Fri 25 Sep 2026 19:01:26 +0000
Files and hashes: 1: 3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa (hash: rJHtn8lGExcQ1k9wE7wx+7iji7/5AXFn9zAwDRMm85s=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: MnajNR2alkRD7tu135bRB0gFqSEFpU5ffmSMVSWrt38=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:43:e5:0a:c3:9a:ff:43:2a:ac:d8:fe:32:43:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Sep 24 19:01:26 2026 GMT
Not After : Sep 25 19:01:26 2026 GMT
Subject: CN=431aa0f26f23bb6929506e1732eb42e7c2fa3c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:dd:2b:5e:57:d1:26:fc:60:32:81:b5:e4:
36:33:29:93:2a:1a:7d:6c:d7:de:11:49:75:5b:cb:
df:25:b7:d1:be:19:83:1b:78:25:9c:88:6c:3c:89:
6c:50:92:dd:89:90:e7:0c:cf:6f:d8:c2:a3:0a:d7:
96:96:e7:2b:7b:1e:48:8c:2c:c2:a7:b8:7f:8b:40:
77:a5:bc:6a:1c:57:ed:80:6a:f6:d0:4a:ed:06:1f:
6f:5f:de:49:b0:5f:46:d2:bb:2e:3f:5c:15:19:ee:
65:f0:3d:6b:27:8e:4b:c7:5b:f5:84:43:c4:64:ba:
0b:6b:a4:a2:f9:6d:79:7c:a2:87:be:96:3c:f5:9c:
a4:57:e8:75:d3:27:49:86:e5:74:28:37:b1:e6:df:
fd:5f:de:0e:d3:ae:0b:fd:c3:20:41:6d:68:f9:c0:
61:7d:b8:48:f0:1f:36:92:22:c9:80:3d:7a:20:a7:
08:97:e7:d8:f8:79:a1:35:c3:81:a3:77:16:6e:cf:
b0:fc:48:f5:11:9b:ac:93:56:f7:ad:fc:b6:5a:b6:
b8:55:94:fd:dc:c4:ad:5a:9b:bb:a8:0b:46:c2:1e:
6a:a7:81:65:05:aa:f1:94:42:9b:b0:c8:13:bd:6d:
6a:46:52:6d:2f:10:09:88:3c:fd:4e:51:58:e6:f3:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:A0:F2:6F:23:BB:69:29:50:6E:17:32:EB:42:E7:C2:FA:3C:09
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:e3:a4:c3:f6:95:70:58:c6:33:01:81:c8:fa:d2:db:61:
90:37:82:41:ce:54:e3:2c:10:a2:6c:3b:30:88:e8:3b:4b:c0:
a3:c8:0a:d6:fc:4e:2d:72:63:0e:c0:22:d0:d7:a6:f1:e7:ce:
74:02:99:d1:11:14:74:f6:d1:35:24:d7:de:92:82:94:ef:b8:
90:da:fe:a2:77:59:2e:b3:0c:64:db:a2:52:44:1b:94:0d:21:
49:83:f7:c9:41:64:c6:61:e7:9c:9c:ce:05:cb:3c:6b:47:2f:
93:98:0f:af:21:07:0b:8c:98:6e:3b:15:4d:d4:5f:24:ab:a5:
fe:00:e2:e9:1d:9a:90:b4:8f:ca:c6:6b:22:c2:24:7d:9b:12:
cf:76:50:4b:8b:6e:65:8a:c1:9d:33:11:78:14:8e:19:78:b7:
ca:b3:3f:82:01:9f:8a:1d:59:72:c2:6c:8c:5d:2c:05:30:17:
44:d5:2a:1e:e2:aa:d0:95:e2:aa:ac:49:fd:4c:ae:8c:38:fb:
60:73:ac:6e:23:fc:7d:b6:fe:10:60:d2:0d:22:8b:5f:06:34:
b5:9e:4f:f8:c5:6e:af:cf:1d:ca:53:a2:4a:ac:83:a3:d6:41:
39:8f:0b:d1:65:16:b6:c4:7e:17:91:67:29:28:2d:a0:f8:f7:
76:58:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:15:08 2026 by rpki-client