Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: 5fmys8dKn3MVTsIrt2jhBJ4nKGsV/yO89wOBzSo8ze4=
Subject key identifier: 3C:D1:41:C5:76:90:78:BA:A3:6F:76:24:AE:86:26:C2:9D:73:41:EF
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019CAA901D11A81F1AA433E29AA072D97FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1798
Signing time: Sun 01 Mar 2026 18:01:37 +0000
Manifest this update: Sun 01 Mar 2026 18:01:37 +0000
Manifest next update: Mon 02 Mar 2026 18:01:37 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: N9QSgtMfvac9OmcJ1aYkd0PwuUw5ZGumMTW0vDWwhBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:1d:11:a8:1f:1a:a4:33:e2:9a:a0:72:d9:7f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Mar 1 18:01:37 2026 GMT
Not After : Mar 2 18:01:37 2026 GMT
Subject: CN=3cd141c5769078baa36f7624ae8626c29d7341ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:74:e9:df:9d:9b:d6:c3:22:d5:1c:e5:9d:
0a:20:f4:54:2b:2b:00:a7:33:c6:b4:b8:ea:7d:1b:
e0:12:b9:06:09:17:f5:6b:8e:f3:15:e1:f5:63:d6:
54:fe:65:65:05:4b:0f:06:a4:ed:27:6d:f6:d8:04:
72:da:17:32:2e:7f:3d:8d:c3:90:7b:05:ce:21:76:
1a:c8:e1:c6:1f:d8:a0:bc:9a:bb:16:e1:9f:12:9c:
2a:3c:ea:9e:c9:a3:36:b0:be:03:7a:62:69:95:9d:
a6:88:a8:ac:5a:43:a2:d0:f8:a7:b0:14:74:71:28:
1e:43:8f:ec:09:6b:de:dd:91:8b:a0:92:67:74:45:
53:7b:c6:f3:b5:d6:99:ba:69:42:c6:5e:cd:2f:45:
aa:ec:4e:eb:9d:97:e6:58:67:96:c5:79:3f:86:35:
d1:dc:8a:3c:10:bf:15:36:26:0b:7a:8d:0e:73:5d:
0f:7c:90:47:85:52:c2:4f:13:ea:60:26:aa:58:79:
53:f7:e6:30:ba:02:e3:7f:85:02:83:26:91:4d:17:
27:11:93:95:de:ae:42:3d:ea:70:98:07:cc:0e:30:
8f:ba:a6:dd:fa:9c:44:9c:04:4e:ed:8a:ff:0b:d3:
c9:d1:ff:0c:5e:57:88:a0:5f:d9:48:2e:d5:4a:d3:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:41:C5:76:90:78:BA:A3:6F:76:24:AE:86:26:C2:9D:73:41:EF
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2d:2f:40:02:e7:1e:0b:a3:81:91:6b:ce:1a:1c:a5:61:c0:
48:3c:d1:27:4a:5f:a3:64:b2:ac:82:33:07:c7:6c:ec:5e:2c:
00:d4:a9:38:79:15:a4:09:b9:18:f9:b4:64:c2:09:a0:9c:21:
95:50:6b:87:fa:76:0d:88:36:df:13:4c:67:b0:7d:78:37:de:
87:b3:9e:11:2e:32:c5:0e:52:c9:86:92:6b:a4:2b:56:fd:ff:
25:e8:37:9b:06:a7:3d:7a:4b:08:e1:8d:e8:b7:3f:9c:55:23:
a6:01:e7:7f:12:64:9d:0c:4b:16:7b:59:8b:c9:bf:2d:d8:d5:
a8:39:48:d3:ab:ce:07:8b:23:c0:98:14:12:d7:c2:15:2a:1a:
a8:d7:9f:d5:fa:24:c3:21:f6:de:81:75:6f:2f:b4:ee:ad:01:
4a:a5:59:55:67:bb:84:e3:9c:9f:51:a2:3c:2a:68:b9:1f:14:
0c:c3:66:af:2a:e8:39:5a:ae:92:2b:aa:82:00:63:0a:b3:6a:
c4:3e:65:6b:98:d4:24:59:07:45:bd:3a:06:52:20:d8:31:cd:
18:d2:19:97:99:7a:77:9d:9d:48:c6:13:fb:1b:74:62:24:9e:
15:c5:a0:63:6c:78:5c:49:b4:06:e9:ed:5e:80:33:52:45:d1:
29:56:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:43 2026 by rpki-client