
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: GR7MMQio3kF5xDjBQVOsaEmPFKTsXD36PmhRKQAWd44=
Subject key identifier: 0D:34:03:A1:B0:6C:34:6D:2F:20:09:C1:0C:41:0C:D9:45:52:3D:76
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 01A0C70F26A09DFBDFD0A41A979D7F1AA6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 19B9
Signing time: Tue 22 Sep 2026 03:00:53 +0000
Manifest this update: Tue 22 Sep 2026 03:00:53 +0000
Manifest next update: Wed 23 Sep 2026 03:00:53 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: GOloV25PCg+9SSOAhJsp9gJTWY7KvQSBxlDfWwnGXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:26:a0:9d:fb:df:d0:a4:1a:97:9d:7f:1a:a6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Sep 22 03:00:53 2026 GMT
Not After : Sep 23 03:00:53 2026 GMT
Subject: CN=0d3403a1b06c346d2f2009c10c410cd945523d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:58:db:1e:23:87:3a:d0:41:87:41:ec:1a:7d:
d2:d1:3e:d4:5e:37:89:83:b9:fe:e1:fb:07:ff:54:
50:68:0a:e7:97:72:22:3f:ea:99:da:27:3b:c8:aa:
0a:f8:64:ce:b8:5f:bc:7d:bd:06:17:d5:75:9a:6c:
95:2d:47:6b:b1:89:c8:cd:a7:cd:f4:3b:d9:50:86:
11:ca:f4:e8:e2:05:a1:ab:1f:ba:30:c0:af:f7:89:
32:a8:ad:0d:5f:9e:42:9a:0c:af:9b:87:20:25:de:
91:f0:e9:a5:a5:5b:fe:b4:f4:2f:ba:80:89:eb:79:
e6:75:1e:3c:dd:a5:8c:a3:28:7c:fc:a3:75:52:c3:
22:fd:3e:f1:6f:e8:73:85:7e:c6:d8:53:7d:70:45:
e1:26:5d:1b:68:00:08:bf:02:49:5c:0f:5e:42:4c:
1c:57:f7:a8:8a:c2:3e:db:b7:d3:2e:df:57:d9:55:
1e:20:41:93:6e:61:d4:77:96:48:bc:2b:1c:fb:6d:
2a:42:d7:ed:b4:70:a0:fe:fa:f6:82:e9:48:7e:61:
2e:1a:a8:8e:a8:5c:ac:53:6a:56:62:12:2a:47:c9:
45:2d:d8:04:6e:6a:66:1e:38:7d:d5:3c:8f:05:44:
b7:7b:fb:e3:70:be:21:7d:95:63:d7:78:7a:57:0c:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:34:03:A1:B0:6C:34:6D:2F:20:09:C1:0C:41:0C:D9:45:52:3D:76
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ba:48:5d:d1:6f:40:f0:98:0f:62:02:3a:6a:e9:97:fc:ac:
da:e3:08:ae:87:03:77:18:f6:1c:dc:fe:cd:6e:bb:67:c0:f4:
14:58:a6:40:43:a5:19:08:85:75:6c:7c:76:1b:e3:c2:cb:5b:
bc:8b:9f:47:ad:e2:02:c3:65:49:d1:03:c5:97:ef:37:24:31:
23:56:80:f2:07:84:7f:9d:65:46:39:83:42:ed:43:c4:23:25:
ca:f2:b9:74:de:21:e9:98:cc:6c:3b:71:b8:16:d2:f3:41:af:
32:15:ea:71:a7:9f:de:33:8a:02:84:43:5e:1d:66:14:d4:21:
cf:fb:81:a8:52:21:d4:b7:99:20:b2:25:14:1e:10:d2:f4:57:
8e:f0:45:a2:45:a4:55:d8:75:66:71:8f:8b:1b:ea:31:c3:76:
ed:ae:4b:fd:66:e6:75:6c:75:c1:6a:29:c3:3c:bb:b0:ee:bd:
56:53:2e:69:31:4d:61:dc:b3:61:9d:a6:6b:c7:f9:9a:0f:e7:
2b:30:1d:12:af:a6:38:f8:f2:67:37:80:1b:d3:a8:86:22:08:
b6:6f:c0:fa:ed:93:43:e9:92:6f:bb:5d:ee:76:05:66:c1:11:
db:81:76:3c:c9:42:6c:0d:06:f0:ae:66:78:75:7e:a0:e7:e7:
70:49:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:19:40 2026 by rpki-client