Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: Gl2JkfF41aAOMbwo3/tz/N9/lMOtbqRLAxVdPB6ZpjM=
Subject key identifier: D7:D0:CC:92:C9:85:5A:5F:22:DF:43:08:B0:EE:AC:C9:F9:FD:A9:AA
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 019CAC100736FAA9CC3E3BD1DCC8829FDD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:57 +0000
Manifest this update: Mon 02 Mar 2026 01:00:57 +0000
Manifest next update: Tue 03 Mar 2026 01:00:57 +0000
Files and hashes: 1: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: qM/tEIDTXoq46WQCvQ0/6CNbsQueub78UNMeYNZLE/w=)
2: wqo2yKaT_Oy-6AZMqxxn4GNk_cE.roa (hash: TLnFbPYehyFEASmdorMS1jkAMvulGnwe0TFiZO1diU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:07:36:fa:a9:cc:3e:3b:d1:dc:c8:82:9f:dd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Mar 2 01:00:57 2026 GMT
Not After : Mar 3 01:00:57 2026 GMT
Subject: CN=d7d0cc92c9855a5f22df4308b0eeacc9f9fda9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:d9:0b:13:6a:2e:36:c4:72:b6:7a:f2:dc:
9b:8c:01:ec:e9:f3:10:f0:5e:a8:27:3f:32:fc:c7:
f6:cc:61:d3:a9:9d:5e:0f:eb:d1:b8:74:0f:64:a9:
54:6c:c4:53:8d:7e:6f:f5:65:c2:03:60:9d:55:36:
96:dd:f8:cf:85:7b:62:18:f9:d7:75:21:98:71:78:
31:bf:5c:00:33:6d:89:6f:9a:e9:95:8c:09:19:99:
87:5f:e1:02:66:9d:d7:e3:c8:e4:66:42:3a:63:f2:
bc:4d:73:43:73:23:72:37:02:93:4b:7d:9f:a5:b2:
a0:f1:14:c0:78:36:2b:cb:2f:37:e3:7c:34:44:d5:
7f:63:8e:89:37:9a:98:43:ea:58:50:8b:5c:33:26:
9e:e5:d6:e8:d0:e7:0e:1e:5b:33:27:85:69:d5:5d:
b3:93:81:9d:11:3a:60:74:0f:5c:e2:8c:af:77:92:
a6:ea:d8:54:ef:bf:81:b7:86:9c:ef:6e:d9:79:f6:
af:71:ab:e2:88:2d:d2:c4:55:dd:1d:32:d8:53:14:
7f:37:0c:c3:ab:ed:f1:5c:b9:12:6b:b5:92:ed:29:
05:cd:a9:32:0b:6f:ec:08:cc:32:d9:22:58:e1:8b:
40:61:1c:b6:8c:58:8a:c2:74:1e:c8:b7:d9:b7:88:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:CC:92:C9:85:5A:5F:22:DF:43:08:B0:EE:AC:C9:F9:FD:A9:AA
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:65:e5:75:bc:a4:2f:fe:6f:ac:8a:21:11:3a:58:1e:f8:
e9:3a:8a:49:97:51:d0:13:f8:79:da:b5:99:10:e3:f9:0c:87:
22:b4:e8:4a:fc:e3:5c:03:b1:aa:3b:cd:89:04:97:00:93:d8:
ee:6f:07:e1:15:39:36:19:5d:59:d5:a8:0e:d2:35:7b:58:8a:
dc:99:29:21:e6:00:0a:f1:eb:3c:9a:42:ab:5f:66:55:f8:86:
3e:52:75:7d:90:2b:82:8c:fa:a3:b0:4d:a7:c4:5d:86:c8:c1:
18:b6:33:1e:cb:2b:a9:dc:4f:a3:3f:84:9c:4c:a9:b4:90:3f:
49:99:d4:d0:19:c0:c8:52:b1:13:c5:44:5b:3e:67:24:23:c3:
a3:ff:80:b9:d1:f0:14:1b:66:49:19:41:0d:09:e6:27:db:1f:
0a:95:70:d7:8b:9d:f3:53:90:80:b6:29:e1:b4:c3:aa:02:ff:
d3:c9:35:ba:ce:39:dd:04:15:e1:3d:1c:ef:5e:5a:e3:eb:14:
91:96:cc:1b:12:13:4d:e6:c5:78:0e:92:e6:c4:74:af:59:88:
84:7d:7e:5b:9f:df:83:7e:78:fc:e4:9d:09:d4:d9:44:c3:00:
d3:10:c8:97:86:08:7b:7c:2d:7a:d5:eb:42:0b:df:e1:47:c0:
0d:d8:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:43 2026 by rpki-client