Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: Ka1UhmUkT5499Y0D4dWE0eRouyU/nr07/dcmTeSgbao=
Subject key identifier: EA:F9:97:44:D6:49:C0:03:40:3B:E3:D5:21:08:BE:DE:89:55:41:7D
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019EC48100581FFD5C921DB4FF6A32C97090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0C1D
Signing time: Sun 14 Jun 2026 05:00:48 +0000
Manifest this update: Sun 14 Jun 2026 05:00:48 +0000
Manifest next update: Mon 15 Jun 2026 05:00:48 +0000
Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: ovuMsUTCk9zauy/jHzdguhjc7YjlERRsv2awxW0tPKQ=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:81:00:58:1f:fd:5c:92:1d:b4:ff:6a:32:c9:70:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jun 14 05:00:48 2026 GMT
Not After : Jun 15 05:00:48 2026 GMT
Subject: CN=eaf99744d649c003403be3d52108bede8955417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:8a:c5:01:21:b8:ff:ab:3c:39:86:e6:b6:
51:2f:fa:5f:84:7f:49:e2:da:31:fb:22:4b:d3:f8:
2d:1f:2c:75:be:f5:65:f1:be:c7:51:06:93:14:91:
13:0f:60:54:1b:16:41:7e:ff:0d:e9:d1:bb:ca:e3:
66:a4:07:f8:38:1e:8b:d3:85:5c:e4:85:79:55:82:
ca:01:8a:50:36:b5:ef:8f:4e:91:fe:cb:22:c4:81:
06:81:81:f2:d2:58:2e:0b:79:2b:18:3f:c9:16:87:
45:2b:36:cf:0f:4c:a0:03:f5:2c:30:7a:6a:78:8d:
cf:40:d2:3b:e8:1e:71:57:59:86:f2:e7:b2:23:cb:
c2:40:64:0d:68:ae:42:1a:6b:63:e7:7d:8a:db:e7:
52:b3:83:70:5c:a8:e7:fc:d4:bd:19:80:01:4c:38:
09:e7:13:9b:c0:2e:c5:59:09:2e:1a:a1:d3:79:b0:
7f:19:60:e5:7b:63:c5:91:56:e4:19:ae:ca:c3:3c:
49:a2:9b:bb:50:88:d2:3e:5f:4d:bc:5d:bf:e7:1e:
8a:63:0d:e3:dc:f3:ef:51:63:4f:7b:72:17:1a:67:
78:18:a6:26:1d:63:0d:25:c1:f0:96:68:4f:96:88:
f4:8a:35:5b:68:cf:c3:0f:ed:50:10:9b:c0:3d:33:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:97:44:D6:49:C0:03:40:3B:E3:D5:21:08:BE:DE:89:55:41:7D
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3f:78:31:28:c7:1c:4e:d8:fa:49:76:b4:0f:2f:f0:0a:6d:
bc:9a:ea:fe:b4:c3:94:36:79:7a:e2:05:22:23:af:46:9d:b5:
a1:90:a2:d9:8f:e2:e0:6d:26:20:88:3b:62:00:ce:ea:08:fa:
b0:a1:3f:20:d2:04:f2:71:7b:19:f5:96:29:83:31:d4:54:77:
58:8c:ad:bf:7f:a5:d8:17:78:65:69:05:5f:48:65:35:17:65:
a4:18:55:d6:5e:ee:4a:85:f2:06:a4:be:b7:12:f9:b7:d2:72:
51:ac:c0:c3:f1:52:ed:77:b1:9c:5e:b9:18:c3:6b:e5:d4:ce:
6d:e7:d6:be:ff:2b:ef:f9:ce:71:18:a9:a6:06:e8:67:e0:69:
22:ce:22:46:d2:f1:2a:15:1f:37:ca:3b:6e:6d:7b:3d:06:6a:
93:2d:95:1d:f4:09:bb:e1:4e:ff:5a:b4:77:38:e5:c2:e3:bb:
df:7d:ee:55:19:4c:15:d4:9b:23:7c:f9:d3:04:57:32:c0:02:
8a:0a:b7:de:de:4e:3d:c4:93:37:6b:5e:3d:7d:31:9b:01:d9:
59:5b:dd:b1:4f:08:7a:d4:e4:c6:a5:1c:57:82:d6:47:db:11:
dd:16:92:b0:eb:50:e9:bf:8c:0e:6d:af:f7:ea:eb:69:db:47:
1c:58:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:43 2026 by rpki-client