Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: xOUKrhLBzwvM4WcR6cZQ2EOI9DKqOuQfMvOz26SM2ek=
Subject key identifier: 76:B6:EC:FB:A6:E1:41:23:0F:51:23:D4:1C:4C:DE:BD:5D:85:BE:25
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019CA9B395AEF98F4F67836C16AB229CC553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0B06
Signing time: Sun 01 Mar 2026 14:00:44 +0000
Manifest this update: Sun 01 Mar 2026 14:00:44 +0000
Manifest next update: Mon 02 Mar 2026 14:00:44 +0000
Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: EtSdXaNxV12BsAZkO4psPaWQJy5UD1/ALz1N5OJCktI=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:95:ae:f9:8f:4f:67:83:6c:16:ab:22:9c:c5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Mar 1 14:00:44 2026 GMT
Not After : Mar 2 14:00:44 2026 GMT
Subject: CN=76b6ecfba6e141230f5123d41c4cdebd5d85be25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:86:0d:4f:14:8e:8f:13:d2:69:a8:31:73:
34:f7:af:ca:6a:f4:b5:c6:e4:46:c0:a4:60:1e:30:
51:1b:2d:f7:ea:f5:5a:8c:c0:a7:7e:f4:85:96:3b:
92:ac:f1:8d:25:97:ee:4f:fb:8f:86:b5:22:fd:83:
1b:e8:09:c0:f7:79:f1:c1:15:04:23:ec:46:91:28:
98:97:44:54:e0:4b:e4:a6:d0:dc:ac:2e:47:86:a0:
97:79:74:84:03:56:5a:6f:ff:7e:df:cd:11:45:b7:
52:1a:5f:9d:49:1f:00:dc:85:02:06:01:1d:ea:c7:
81:7b:f2:fd:8a:28:5a:d7:98:29:60:bc:2c:37:af:
b0:40:c3:2a:d1:fb:b2:5e:1f:d8:ce:9b:67:63:7f:
90:ef:6e:a2:1c:8c:ba:64:42:53:ad:ac:18:61:1c:
31:db:f9:e4:fa:36:cf:6b:42:99:b3:7d:3e:e9:fd:
8a:79:3b:fb:6e:7f:5b:ba:13:9d:b0:ba:47:eb:6a:
c5:f6:5f:1c:a0:d5:5e:96:6a:54:60:af:95:bc:0b:
94:94:12:9e:54:11:8d:66:cc:87:54:48:46:c8:e7:
0a:c5:11:03:01:c3:11:51:b9:dd:41:da:e6:67:50:
36:f8:20:81:24:48:a7:0f:e6:09:a4:3f:31:f6:14:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:EC:FB:A6:E1:41:23:0F:51:23:D4:1C:4C:DE:BD:5D:85:BE:25
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:f3:6c:3d:b7:2b:f0:df:d1:20:da:40:5e:77:31:74:b0:
53:5b:8a:a9:e0:0a:b1:32:a8:c7:7e:08:00:f0:ad:99:5c:d5:
ce:ef:9d:eb:ae:82:b1:f4:a0:b0:34:5f:75:11:18:2d:28:80:
2f:c7:55:5d:5d:f4:20:56:4a:b8:1b:95:14:f9:45:4a:5f:ef:
3d:c1:65:1f:9a:35:20:69:3f:a3:97:8c:2e:a2:8a:78:8c:fa:
03:57:34:ca:05:f5:9a:92:8d:12:30:4f:29:5c:74:0d:0a:c5:
c2:50:66:de:fd:9b:17:1e:75:6a:d4:95:af:3f:5e:3d:66:36:
72:a3:e9:3e:3a:af:71:4e:5b:75:4f:8d:ea:47:c8:87:9a:94:
bb:f2:28:71:ad:8f:9d:21:f8:a4:99:1c:40:de:0b:b7:99:81:
ef:10:e2:12:a1:c4:61:e5:41:0d:f7:66:e2:ba:af:bc:eb:f1:
d1:df:b4:77:20:f2:a5:ec:5a:e2:15:c7:83:68:25:05:fc:7f:
df:f4:0d:9e:a7:6a:c0:00:bc:88:b5:e5:39:e1:43:9e:6e:57:
08:4d:7d:09:8d:52:6c:26:fe:f7:2e:b1:1b:ca:cf:90:71:b6:
6c:e9:42:9e:74:2f:97:af:eb:5c:e6:51:e5:24:9d:ad:61:56:
f1:4c:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:51 2026 by rpki-client