Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: IDLCg6QFdKTOAzy6FgfBtFFwhu5UQ15tyRpFulBBuas=
Subject key identifier: A6:94:27:5C:94:E6:1F:80:B3:E4:58:29:D9:34:48:C8:79:FA:D3:C6
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 019CAB6BB0B92AD379F8CD12D03450B7F198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 0403
Signing time: Sun 01 Mar 2026 22:01:27 +0000
Manifest this update: Sun 01 Mar 2026 22:01:27 +0000
Manifest next update: Mon 02 Mar 2026 22:01:27 +0000
Files and hashes: 1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=)
2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: VPBhxD40jyJN90G+5mc0kqAUhmPVqJ7Iio5mP8zzY4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b0:b9:2a:d3:79:f8:cd:12:d0:34:50:b7:f1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: Mar 1 22:01:27 2026 GMT
Not After : Mar 2 22:01:27 2026 GMT
Subject: CN=a694275c94e61f80b3e45829d93448c879fad3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:5b:bd:16:d4:93:f2:c8:9b:ef:6b:55:2d:
ab:ab:a0:a9:14:e0:d0:d2:27:70:05:b2:56:f4:e7:
eb:7f:0a:d7:2d:1e:c4:e2:7b:2d:1a:f6:a5:de:12:
26:84:fe:82:6c:4c:42:e6:b9:eb:98:b5:70:a3:0f:
2a:68:46:e0:0f:94:73:01:0a:5f:c1:68:0c:99:63:
6f:c7:f6:1d:ef:f6:41:89:71:26:0f:dc:a7:8c:b7:
2f:2a:d2:89:a5:59:3e:19:94:a6:e8:0a:01:4a:10:
8e:14:6d:e6:4b:9e:b9:65:da:2a:da:3f:dc:41:b9:
22:92:f5:83:1d:2d:59:50:08:cf:c5:00:cb:1f:f1:
62:c7:de:88:e8:9b:ca:13:f6:7b:74:52:21:9d:72:
e2:6d:85:1e:7b:49:55:1d:69:95:58:ab:c3:a6:d1:
c6:05:bc:dc:8a:29:d6:0c:99:d9:7c:21:ce:24:0c:
0c:6f:72:83:71:74:cb:5a:4c:b4:84:f7:f5:58:19:
68:c9:d3:d5:17:0d:86:49:47:e5:2b:71:39:64:0b:
ab:71:c4:ae:50:97:64:16:de:98:1d:a9:74:a6:99:
70:eb:d8:01:0b:7a:28:b7:41:4a:3f:00:e5:86:8c:
99:3c:c1:4d:dc:0f:bc:a0:c7:e5:87:51:8b:97:ab:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:27:5C:94:E6:1F:80:B3:E4:58:29:D9:34:48:C8:79:FA:D3:C6
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:58:9c:4e:1d:5c:75:95:ce:c0:fd:1a:6e:c7:2b:cf:3c:6e:
11:53:60:55:48:4b:27:46:ca:fa:8c:92:27:5e:b4:83:bb:71:
51:cc:ce:c7:dd:a0:99:7f:76:4d:ad:4f:54:2f:95:72:a2:d8:
25:58:3c:62:ba:7b:a3:c5:e6:d3:29:fc:83:c9:1c:c7:73:57:
be:1b:5d:02:9e:fc:cc:79:cd:4c:25:78:88:55:28:b9:86:72:
d6:80:ae:83:e1:d3:d9:f0:9a:b7:95:3a:69:c4:b0:55:ee:71:
be:53:ec:d5:c1:99:15:81:42:22:29:cd:db:49:70:d0:93:22:
37:08:ac:dc:3a:fd:8f:bc:19:4e:50:94:57:5b:e1:eb:e2:1b:
33:32:c3:69:7e:cc:19:6f:2b:0c:f3:2c:d8:5a:2e:b8:db:dd:
4a:fb:65:a9:ca:19:0f:90:bc:97:ff:56:ac:39:83:65:89:c4:
03:f6:da:0f:54:65:c7:15:10:e6:26:bd:f4:21:2e:a5:1c:89:
c8:4b:1d:ca:38:7c:41:41:c2:d5:55:8c:f9:81:d6:12:4c:00:
85:6f:3d:b9:df:36:be:ab:7a:aa:b6:67:49:e8:c1:17:73:6c:
5b:70:c6:da:3e:32:be:72:a7:be:b2:44:66:a2:ec:4c:b1:f3:
18:a8:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:47 2026 by rpki-client