Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: vm8vBXbKDU1bJnfeSk5MYKfCRVTvzlKdAVTq9HlPEfg=
Subject key identifier: 48:DB:9E:5E:E4:51:F8:1D:10:DC:57:79:12:6A:95:E2:2C:4F:90:89
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019DA3AEC14363CADA6A40E1DED71F7C22E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1819
Signing time: Sun 19 Apr 2026 03:00:32 +0000
Manifest this update: Sun 19 Apr 2026 03:00:32 +0000
Manifest next update: Mon 20 Apr 2026 03:00:32 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: 0Rb0nSD8cYIskmm1apQwWJK7icjxnJwpy4LzOj11X9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:c1:43:63:ca:da:6a:40:e1:de:d7:1f:7c:22:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Apr 19 03:00:32 2026 GMT
Not After : Apr 20 03:00:32 2026 GMT
Subject: CN=48db9e5ee451f81d10dc5779126a95e22c4f9089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:6a:fe:48:8c:eb:c3:ad:cc:a6:91:df:2b:
dd:70:18:46:cf:2a:7f:12:33:3a:d6:e4:bd:41:57:
6b:74:7b:54:05:77:f8:72:e5:12:6a:7c:e0:37:fc:
4c:09:d6:35:2b:46:89:d9:db:1c:aa:b2:9a:ee:d3:
30:c6:da:55:de:fd:14:c8:92:7a:c5:ef:2b:23:54:
9a:f0:68:27:b9:24:44:32:88:6a:f4:1a:0b:25:da:
95:2c:a3:82:18:a5:1f:af:bf:97:1e:9b:ba:fd:e3:
57:56:90:ae:c8:a7:e1:7c:7c:e0:ad:c9:73:67:6e:
43:5a:9b:55:92:ea:ca:43:b8:cb:72:65:33:1f:fb:
d6:3c:4a:01:d7:2a:14:ed:f6:f7:ff:7c:2a:1e:9f:
a2:ce:47:c5:6e:ec:0e:01:9e:e0:54:88:ed:4e:9d:
94:41:fd:f5:8c:a0:4d:7c:2c:4a:ca:11:e6:f6:79:
1f:da:41:8e:c3:02:c9:ca:fd:6b:44:2f:54:71:92:
e2:0d:e7:0c:25:30:74:b0:17:ae:b3:e3:d8:98:52:
97:bb:c4:a8:c0:12:1b:b4:63:88:37:f4:6a:c7:ac:
cd:ae:d2:7f:4b:56:ba:8c:82:ec:62:d2:9e:e4:38:
dd:af:61:c2:b3:d0:00:fd:62:6e:d3:f9:66:88:e9:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DB:9E:5E:E4:51:F8:1D:10:DC:57:79:12:6A:95:E2:2C:4F:90:89
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:37:80:19:fd:13:df:9e:4d:a5:6b:a3:c2:f8:c6:c6:a9:2f:
4f:c2:a2:30:31:92:54:4e:ec:17:35:b6:b7:ff:6c:f7:53:04:
24:cb:c6:58:0c:1d:d5:60:42:f1:9c:bf:6f:cc:f6:e9:05:dc:
70:40:1e:1a:93:39:66:a7:8c:51:87:be:85:1c:53:e0:fa:40:
06:b3:cc:35:0d:e4:30:4e:fc:53:70:fa:47:92:b6:ff:4d:a4:
13:4d:ce:e0:06:2c:c0:55:7e:b7:52:5b:c4:b2:c9:84:fa:3c:
f7:80:88:c1:6e:43:e8:a3:5b:c1:94:f2:93:c5:7e:0a:07:bf:
09:f5:e2:e8:99:a9:c2:25:7f:8d:f7:35:d9:77:c8:c3:17:44:
54:ae:84:dc:65:10:ae:f3:4f:8f:81:6e:7f:85:62:a6:7e:b8:
4b:a3:55:b5:e5:65:26:58:2e:f5:26:44:68:a6:58:93:86:25:
33:aa:0a:00:2b:bb:7a:c9:41:ff:46:74:ca:a1:9e:05:0d:8c:
7e:2e:ec:7f:aa:60:4e:b4:fb:f8:09:37:30:57:fe:d7:8a:18:
bb:4a:b8:5b:c5:5a:d6:85:09:b4:8d:3c:99:db:ed:3f:62:ab:
ed:e0:35:49:4c:4b:38:31:11:0a:bb:ed:05:a5:98:fc:fb:55:
d7:e4:45:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:01 2026 by rpki-client