Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: GAW3jgVgbLSnB4BY83gbmTJW9gOW7/U+w06wrNnRaYU=
Subject key identifier: 3C:8E:D0:AF:18:32:3E:75:FA:EF:18:23:EC:01:73:8E:B9:70:C3:AA
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019CAAC68542B7BAFA8B2EB735584700EA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 061A
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: PV3CW5DVvnwFqYX4gbZuktvY+V4XIlDL1naxzgvkylM=)
2: Ti99byxMxEultByMj_ZtpNccqro.roa (hash: FyYPPJ+YgErTDDfONgmR0NO8SDJKFzr8LmNtsMbfpr8=)
3: kc-jaUVimyh7h7ZPoNuGNT6F-Uw.roa (hash: ntudmzWpvPZIJiKJAFzm/9dUZxLPcjchhqmnjmjWXog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:85:42:b7:ba:fa:8b:2e:b7:35:58:47:00:ea:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=3c8ed0af18323e75faef1823ec01738eb970c3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:95:11:d6:bf:ac:2c:57:15:5d:7f:35:a4:
97:7a:57:5a:95:4d:84:10:10:db:84:f3:22:b2:20:
49:87:63:63:bc:4f:d4:21:02:ff:6b:cc:07:ed:4c:
1a:5c:0d:8c:35:b8:e4:b3:61:09:79:b8:e1:b6:43:
d8:12:4b:32:80:46:a9:97:e2:7f:e6:32:ac:59:9e:
8b:a3:af:c6:e4:5b:fa:25:27:22:64:ed:4f:66:1c:
29:33:d3:9c:16:69:f9:f3:29:f0:8a:96:67:6c:cd:
78:93:4c:10:ee:61:ab:72:7f:32:2b:bf:ae:bd:df:
dc:f3:ff:c9:54:87:4e:e1:93:38:e3:e7:97:a7:04:
16:1f:c9:c4:9f:63:84:f3:2b:a6:41:92:7b:2c:d0:
d2:b4:65:f4:36:e1:02:16:81:b1:f7:45:40:3f:80:
b7:83:ce:94:d9:81:61:2e:fb:2d:b6:9f:04:73:e2:
ac:9b:b5:00:48:ce:da:52:50:d0:4d:b6:0e:79:ff:
59:bd:6c:6b:15:f7:dc:ca:45:fd:13:38:45:99:8c:
bb:11:5d:6b:70:0c:46:7d:d3:6c:6c:97:70:7b:33:
3c:d9:c7:52:ff:fb:30:a7:36:36:3f:22:63:45:90:
ba:b1:8d:bc:9f:0b:f1:e4:45:be:c5:ff:48:68:94:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:D0:AF:18:32:3E:75:FA:EF:18:23:EC:01:73:8E:B9:70:C3:AA
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f3:35:cc:c2:fb:e0:39:f7:5c:2f:b4:fc:0a:2c:70:5c:4a:
65:e9:5c:56:f1:2d:61:15:58:b6:cf:f9:a2:b8:d8:64:74:ec:
29:bc:e5:97:b6:f4:df:04:e2:ef:bb:65:8e:93:a3:60:54:3c:
25:df:bc:81:1d:b0:ca:ce:77:af:6d:ef:12:43:a6:d6:42:9b:
4a:1a:54:6a:77:7e:79:a6:5b:f5:a9:d6:09:da:36:bc:36:1b:
29:96:f5:c2:01:aa:86:46:6d:92:95:f7:e8:94:f3:6f:a3:9c:
7f:62:17:72:61:ce:ad:60:65:0e:0d:b2:c8:72:03:2f:6e:8f:
3c:f0:17:da:f7:3a:72:04:d9:b9:35:cc:1c:60:74:5f:00:52:
a7:87:c7:5e:e6:b5:59:83:1b:fe:b3:67:2c:98:4d:7a:0d:6c:
10:b5:62:e4:20:83:9d:b9:ea:82:87:26:a2:d2:b4:f5:67:a5:
61:6c:f2:ab:fb:c6:f1:9f:80:cb:8f:6d:04:76:bf:97:e5:e7:
11:18:d0:69:84:5e:15:74:be:a5:f7:5b:90:34:a2:0c:63:f1:
80:28:95:2f:73:78:4c:ad:56:05:53:ae:46:4e:71:80:78:f0:
b7:c2:c8:fb:47:f8:11:67:22:d7:cf:8a:b7:76:0b:1a:47:48:
79:73:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:34 2026 by rpki-client