Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier: 1K4jntrNzzyHt8sZVbMpmqUwkx9oydkFzFDoY2ujtVI=
Subject key identifier: 6A:27:D7:E9:66:6D:3B:38:01:3D:5B:70:70:9A:A5:7C:B3:7D:0A:4F
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 019CAB349D51860903EBAF53363ED8447690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number: 0F18
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: JYjW-QeIcYRWKin5Cm85fHuAnLg.roa (hash: wT0Z0IE6rXGq31xtB0HPl9NnDaewEv+R19XnkN3Ujm8=)
2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: FzHuX6WlBfeIcdrm4lL69G7Knq5SVTIhByxGawHDpkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9d:51:86:09:03:eb:af:53:36:3e:d8:44:76:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=6a27d7e9666d3b38013d5b70709aa57cb37d0a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:d9:2c:39:b8:4e:17:94:8b:89:69:ca:e4:
53:dd:24:a9:94:f3:8e:84:0f:60:18:cb:1f:80:e6:
5b:b3:41:b0:9d:e5:24:6f:95:54:55:a5:a4:2c:4e:
30:3c:c0:3b:c5:f5:27:a6:91:24:10:fe:16:71:e2:
bf:a9:5d:2e:b8:8a:3f:21:52:42:0f:23:35:d6:d9:
45:63:87:3c:88:c4:01:55:f6:ac:e6:89:7f:f9:6e:
3c:81:7f:b6:2e:db:18:b8:d2:37:50:52:fc:d5:cc:
d5:bd:aa:08:b2:e5:0b:a1:29:c8:9c:ca:ea:72:cf:
03:77:9b:0c:ed:bc:cc:ce:0b:4b:99:46:0f:f7:12:
b7:1e:b6:8b:cb:09:7e:cc:22:78:cc:8b:f3:18:a2:
36:01:7f:2a:7b:71:06:22:ae:69:0f:5e:9e:c2:41:
b6:ed:a0:a2:04:f3:0a:be:6e:2f:92:60:75:ce:cd:
a0:9c:30:66:04:88:55:b6:21:64:3b:2d:95:4c:04:
f0:df:c7:1c:a0:9d:e6:a2:fd:04:f8:08:23:63:5a:
98:6f:fe:19:70:b2:c6:14:f3:b4:57:8b:77:75:3b:
19:9a:29:c9:dd:fc:b7:b1:51:86:99:9e:bc:4b:7d:
a7:6f:e0:0d:fd:22:e5:a2:c2:58:e7:28:1b:6b:ef:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:D7:E9:66:6D:3B:38:01:3D:5B:70:70:9A:A5:7C:B3:7D:0A:4F
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1c:a1:cf:d4:e8:cb:fd:ef:a0:d3:3d:a8:3b:b8:27:2f:b8:
fd:10:ff:f5:95:1b:0d:45:e0:2d:8b:65:a2:04:aa:85:91:8e:
e5:34:e9:a0:d9:53:42:62:d5:21:31:b4:2f:65:82:45:7f:c7:
31:ba:67:26:4d:2d:99:ec:31:36:cf:a9:c4:46:d5:e7:fb:e8:
b2:6d:8c:f8:1d:e3:46:18:47:8d:07:1f:4e:ec:1d:7a:cc:51:
9c:26:fc:be:36:28:f1:23:df:d8:92:2c:9d:97:ef:59:6a:9d:
84:77:1a:e1:9a:e8:1b:e0:d7:5c:48:04:ba:0b:d6:4c:75:16:
63:7a:b0:a4:36:25:5b:f7:4c:45:1a:df:71:b1:df:94:63:96:
bc:3b:c6:ff:10:bb:6b:06:84:5e:58:36:78:51:39:04:22:48:
d4:6e:39:c6:a5:0c:a8:a9:2d:4c:8d:d5:4d:03:a8:d1:95:12:
d7:ae:82:1c:f5:af:2c:7b:da:74:73:05:ce:bc:92:58:68:e2:
07:64:3b:87:ee:0b:1b:0e:86:b7:eb:d8:fc:26:c3:08:06:f2:
86:28:0d:d4:03:2a:a0:eb:c1:b6:2a:9d:15:98:b7:22:2a:57:
71:21:d5:f6:fb:e7:a0:1d:72:c9:67:d8:4b:3b:09:10:b0:fd:
d4:28:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:18 2026 by rpki-client