Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: /7Rx7tkXm75fC76tkJJyjvM+Cq5svME8BXml4thU4DI=
Subject key identifier: B0:6D:4E:7C:7F:DA:50:AD:13:88:3A:13:73:5B:E5:50:0F:C1:C6:2A
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019CAC1001426FF8FB9FA79941E108A26D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
2: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (hash: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI=)
3: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: 5P6nArPpGpHl11hP3BUQln8mPdHncqJ5mAWt1oGbMVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:01:42:6f:f8:fb:9f:a7:99:41:e1:08:a2:6d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=b06d4e7c7fda50ad13883a13735be5500fc1c62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:e3:54:ab:8e:da:7e:56:84:bb:b4:2c:fc:
b5:f1:fc:8c:e6:c9:3e:bd:e6:89:05:53:95:f6:dc:
5e:06:bb:e0:9a:f0:99:f1:18:1c:e1:3d:22:f2:ef:
25:00:ac:d6:88:ff:97:3e:c9:fc:12:9e:17:73:18:
b3:43:d7:f3:18:06:12:63:a5:85:a3:68:7e:b1:43:
c3:b8:a8:2c:38:e6:bd:1a:a4:11:a8:60:d4:0f:97:
32:67:56:03:fa:8a:77:a0:92:b9:46:f3:b7:0e:d7:
59:e1:6b:f2:b7:71:2d:73:7b:9b:24:0a:9e:04:04:
83:14:29:b5:08:11:df:33:47:66:e7:25:95:88:54:
d5:51:07:61:51:c6:d3:fd:15:7f:1f:37:59:99:64:
7a:d1:5e:90:2e:7b:94:10:f2:65:8d:c8:ed:ea:a0:
4e:41:e2:93:a4:4f:a5:82:fa:ac:84:89:0e:2b:66:
ea:51:14:28:78:da:52:34:c5:d2:01:b0:c8:db:81:
ae:a0:41:22:80:53:38:52:d8:bb:a6:05:49:38:09:
ed:55:b0:28:1a:8c:bf:9a:bc:bd:60:07:0a:0e:18:
b3:b5:79:f3:ad:b8:14:2a:b5:53:20:a3:d9:4e:5e:
f3:07:df:80:52:a3:ab:82:2c:6b:28:df:f3:af:ee:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:4E:7C:7F:DA:50:AD:13:88:3A:13:73:5B:E5:50:0F:C1:C6:2A
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b5:02:53:3a:03:03:8d:9d:9d:e8:01:f0:93:85:45:ac:6f:
e8:b0:90:59:0a:59:07:fd:79:ce:4b:cf:d4:25:87:0f:5e:9a:
42:98:72:1e:a7:93:1f:42:72:24:c6:c7:7d:e7:ad:86:cd:9b:
a1:e7:15:df:3d:42:4c:63:e2:b8:04:7b:13:79:03:ff:87:57:
05:85:42:fb:a3:19:8b:7f:e6:11:0f:ef:9a:5e:52:01:07:1f:
cd:f3:33:ce:a5:54:bd:86:9b:a7:68:c3:39:af:87:1a:62:dd:
48:32:f8:5b:d1:92:df:b8:a2:15:78:da:a8:4c:2f:c7:00:9a:
23:df:06:71:99:27:c4:32:e4:95:9c:4f:1c:d5:7b:1b:73:67:
5a:53:0a:0a:c5:67:e4:c1:87:c3:fc:dd:f4:65:01:83:1a:34:
25:f2:b1:03:a9:c8:74:7c:fa:a4:21:d5:7b:20:c7:13:15:dc:
15:d7:b0:5d:6b:7e:79:ef:a4:d3:2e:3b:77:a4:39:a6:88:50:
f8:98:7d:a3:00:30:b5:8e:d8:c9:03:ec:f0:5f:83:96:89:9e:
06:16:f4:50:5c:f3:06:38:17:8e:75:08:19:e8:69:e3:67:7f:
32:fe:f6:2b:82:22:f6:24:46:dd:93:d0:6b:e8:c6:25:aa:9e:
5f:7b:25:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:36 2026 by rpki-client