Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: zmaZ+7g1Omfgw+KGdXLYFoprtSrz6H3iIthdL54SL2w=
Subject key identifier: 33:81:18:0B:BF:DD:58:14:14:03:A6:9E:D8:C1:29:2D:73:9D:9A:87
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 019CAC472002130290145C31CB28F03B7ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 0931
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
2: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (hash: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00=)
3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: byeIdi6I/WbKhR4tmgyaWap5CJkuLtw3QsaT277xR/g=)
4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:20:02:13:02:90:14:5c:31:cb:28:f0:3b:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=3381180bbfdd58141403a69ed8c1292d739d9a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:81:0f:4a:b3:f3:1c:13:b6:66:9b:e6:22:
a4:f6:ba:20:f0:b1:7d:4f:e9:05:b0:77:7f:83:d5:
49:dd:31:d7:08:d7:16:e5:bc:23:be:c6:6e:96:9b:
c0:c7:ec:a7:63:19:18:77:9a:0e:d3:37:cd:6c:76:
3b:04:16:59:60:13:0c:a0:af:4c:11:84:44:00:0e:
87:5f:82:69:0d:af:3b:67:30:05:bc:b1:24:29:76:
44:a7:e5:c1:07:65:02:c6:06:4a:00:5c:1c:53:1d:
a8:4f:af:4c:c9:d2:e3:e1:7f:80:ef:17:75:98:56:
2d:e3:86:c3:21:ef:a6:78:56:51:38:88:98:22:73:
42:55:44:8a:e1:91:e5:04:f5:7a:bc:87:7a:9f:a9:
14:db:7a:61:eb:d5:ce:a5:58:fd:d9:e1:48:7c:bd:
04:78:cf:ec:26:53:53:fb:71:83:d7:68:b4:bc:f2:
c4:4a:82:87:1d:43:29:4c:29:9f:54:40:d6:f2:d5:
d8:98:b0:8c:15:70:c7:83:57:83:91:43:6b:bf:cf:
87:b7:7c:5d:03:2b:75:de:ad:a7:0e:2d:d4:9a:9a:
b7:07:3b:5b:1d:7d:ec:85:26:c4:df:a0:4b:27:21:
72:9d:ea:fa:dc:17:0a:35:aa:7c:50:82:51:40:54:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:18:0B:BF:DD:58:14:14:03:A6:9E:D8:C1:29:2D:73:9D:9A:87
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:37:f9:7c:9d:3f:64:28:38:b8:3c:ad:40:62:20:22:43:69:
87:e3:30:42:2e:bc:66:ca:7f:2b:ea:12:d8:1e:86:3f:d2:3c:
5f:13:c9:06:0b:94:fb:1d:82:af:82:a0:1d:88:55:a8:d2:21:
db:cd:d9:f6:68:0d:5c:ef:9e:b3:f9:bc:32:8e:ed:3d:27:f0:
38:4b:d4:04:96:cf:90:8e:b4:4b:9d:0d:fe:a6:70:6e:8a:ab:
a8:51:0a:df:60:63:6b:fb:d2:ab:30:2c:59:bd:9a:38:9a:13:
1b:bc:3e:e5:e7:37:5f:7b:c5:64:d5:0a:0f:36:5e:31:7a:f5:
32:2b:85:84:5a:60:ff:db:bb:f0:e8:a0:76:34:ca:76:77:e6:
ae:00:4c:ae:5a:c5:5c:02:b1:8a:02:75:4b:d1:64:b1:4c:51:
c2:1c:3e:ed:72:2f:9e:d3:a5:14:4f:54:11:bd:72:99:e2:b4:
f8:9f:69:a8:1e:60:c2:25:cc:a4:69:e7:55:7c:09:25:4d:6f:
d7:51:75:1b:14:1f:a3:41:69:32:81:f3:50:84:d6:4d:84:e9:
c3:55:52:cc:cb:e7:85:81:e9:73:8a:ad:f2:29:b2:7b:91:13:
60:08:6d:db:8c:7b:a9:8a:11:9c:d4:35:f4:61:df:a0:2f:2e:
42:e4:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:56 2026 by rpki-client