Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: 4cq5b5Y3ipEwUPwM5mxqSGEqlYXIx36aETzCfMXvkPc=
Subject key identifier: E8:1F:3E:2D:12:E0:0D:95:95:CD:D2:F0:A1:00:53:76:01:FE:01:24
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019FAD7D675B1A6AF891D0FBBE48772EDDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0C96
Signing time: Wed 29 Jul 2026 10:48:24 +0000
Manifest this update: Wed 29 Jul 2026 10:48:24 +0000
Manifest next update: Thu 30 Jul 2026 10:48:24 +0000
Files and hashes: 1: 3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa (hash: rJHtn8lGExcQ1k9wE7wx+7iji7/5AXFn9zAwDRMm85s=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 509HRVfstbGUKjtOdtZPX0rIt/fehyws769QIc7LDLM=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:7d:67:5b:1a:6a:f8:91:d0:fb:be:48:77:2e:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jul 29 10:48:24 2026 GMT
Not After : Jul 30 10:48:24 2026 GMT
Subject: CN=e81f3e2d12e00d9595cdd2f0a100537601fe0124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:6a:c4:40:2d:48:ef:63:ee:3a:a9:ef:50:
64:45:07:9d:db:fe:ac:21:cb:43:ef:99:f6:0d:5c:
d3:f8:95:fc:a4:0a:26:03:0f:84:b4:a0:36:56:08:
fc:bc:2f:5e:8c:ac:88:a3:0c:f6:53:3b:94:69:d5:
3b:b6:a8:81:40:87:b6:30:bd:95:66:12:43:e5:86:
75:6c:1f:e7:1f:ac:b9:f9:56:39:13:f9:e8:d2:56:
ff:2d:d9:75:e1:cc:66:ff:77:9f:fb:e1:29:58:68:
af:f3:fb:6f:25:e3:2d:4b:fe:0f:f6:7b:06:33:98:
7d:00:24:22:26:19:9c:ee:0d:04:d6:3f:b7:e4:34:
ea:19:0a:06:38:95:fe:15:10:d3:85:c1:d3:26:c0:
27:d3:40:c1:04:10:50:bb:55:35:2d:b4:50:4e:d8:
ef:b7:36:5b:9f:85:1f:f1:69:58:13:7c:b9:53:e8:
52:40:bc:89:40:d7:68:34:fa:36:77:49:6e:ef:b9:
02:ed:e8:61:40:ba:0b:bf:e2:1a:fc:5d:05:5b:32:
da:ab:d3:f6:0d:eb:87:16:24:49:52:1d:76:5b:6d:
7c:01:c9:6e:9b:8d:62:6e:60:79:b1:46:c2:fe:e0:
d3:e7:d7:24:e1:ab:db:3b:f6:70:53:c6:19:55:d2:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1F:3E:2D:12:E0:0D:95:95:CD:D2:F0:A1:00:53:76:01:FE:01:24
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d8:d3:f4:fe:a2:ba:eb:93:49:6b:ae:0e:8c:5c:f1:ab:6e:
6f:4d:4d:2d:92:42:dd:1a:83:4a:5c:63:61:a9:3f:aa:5b:03:
2f:82:32:d7:0b:77:45:e6:98:3a:fa:c1:bc:47:48:fb:c3:e1:
a3:b8:39:c5:3a:71:d8:54:93:fa:11:a2:ff:4e:b5:df:71:81:
4a:97:55:6a:7f:81:6a:b9:35:a6:89:b8:3a:3b:a4:07:5f:34:
29:33:d9:5d:ab:e2:22:d8:18:99:6e:14:94:90:fe:11:51:09:
6d:60:1b:4b:a3:1b:f7:50:f2:03:87:be:cc:16:92:36:f9:65:
86:36:df:be:be:f0:eb:8c:5a:cd:ef:e9:e9:7b:59:95:0b:36:
bb:62:89:03:6b:29:55:df:56:05:35:0e:3d:a4:b0:f4:dd:67:
7a:0f:3b:93:d8:e5:cc:8f:bf:92:ef:52:64:3f:6a:cc:11:6a:
09:52:5b:dd:73:42:49:2a:4f:37:fa:55:b3:52:4d:a2:49:f1:
2c:79:af:83:2e:25:51:08:ae:f8:74:aa:b5:a9:30:b9:70:99:
5f:ad:ff:35:21:dc:6a:fd:d3:b2:21:52:f3:b7:d1:0a:38:ce:
c9:6b:70:a3:d5:b6:09:20:fa:2b:28:bf:0a:79:fb:38:40:ae:
4d:8b:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:25 2026 by rpki-client