Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: L1UxnbgajWV+9M7k3r2PpYxz0Z07bb9lCQAFRThQHgo=
Subject key identifier: 71:60:76:D4:55:80:C0:7D:CD:D6:54:38:A9:B6:FD:4F:CA:3B:92:2C
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019CE4EC95681C7520B8D178D954171C7342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 148B
Signing time: Fri 13 Mar 2026 02:00:35 +0000
Manifest this update: Fri 13 Mar 2026 02:00:35 +0000
Manifest next update: Sat 14 Mar 2026 02:00:35 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: 08JtXWVTAOCehncWeYTYbebQrMaBENQr8xBVhiMfjAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:95:68:1c:75:20:b8:d1:78:d9:54:17:1c:73:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Mar 13 02:00:35 2026 GMT
Not After : Mar 14 02:00:35 2026 GMT
Subject: CN=716076d45580c07dcdd65438a9b6fd4fca3b922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:21:44:3f:33:5d:82:04:dd:a1:d3:e2:4c:
d3:62:95:db:69:e0:54:f6:89:47:7b:33:03:68:9d:
ff:35:cb:6a:65:78:02:ef:87:a8:bb:66:fb:a4:78:
45:4e:df:58:b5:00:58:42:8f:94:06:fd:8f:54:a6:
7d:d2:e4:b7:c0:d2:8f:cc:bb:ba:b9:22:7c:6c:bb:
c5:68:5a:e4:c8:77:92:7d:f6:2d:ed:7a:8c:fa:23:
d4:ea:2d:43:b8:7b:2d:88:69:32:1c:5b:d3:61:6f:
50:9d:7b:a7:3c:f6:5d:9c:9f:d8:c3:0e:2d:dc:40:
bb:34:ac:dd:df:5c:c6:0c:d9:d6:92:bf:2f:b1:55:
85:1b:79:e1:10:e8:6c:9b:b0:1f:d9:5e:c5:3c:4a:
7e:22:83:3c:f8:88:f4:4d:9e:63:87:30:84:d2:fa:
0f:5b:54:54:29:53:0b:95:1d:93:6e:04:cc:4b:12:
4c:5f:94:ca:29:01:f5:83:04:22:85:30:4c:78:b4:
4f:aa:b3:ba:97:6c:26:56:af:29:bd:fc:b7:e8:38:
9d:d4:d2:a4:c6:fe:ee:de:ab:d0:3a:77:22:d5:37:
80:a9:2e:08:a5:5a:36:bf:d3:7a:72:a8:af:ff:5b:
9e:86:26:e1:da:45:3b:2e:0a:76:d7:89:9d:b4:01:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:76:D4:55:80:C0:7D:CD:D6:54:38:A9:B6:FD:4F:CA:3B:92:2C
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b8:1d:e4:bf:0e:f5:ad:b0:b3:37:63:96:de:b6:90:7c:7e:
69:ae:4a:44:a7:91:49:73:4e:8f:33:58:6a:ef:30:54:64:d7:
6e:dd:f0:0a:06:19:14:6b:42:55:6a:a3:60:f5:4d:72:36:53:
24:e6:b3:25:97:6b:2a:c2:8d:cf:9c:b7:a4:f3:23:32:5b:23:
18:73:94:05:d0:41:36:80:60:6c:c7:f3:1e:38:d9:81:21:a3:
b5:f0:27:0a:66:5c:12:5c:7b:14:16:c8:e1:63:7b:63:ab:c1:
bc:a2:68:2a:89:be:3b:b7:86:9e:84:83:a5:05:f2:8c:82:8c:
60:92:92:73:f3:08:b9:9f:7f:fc:d5:f7:19:db:1f:2b:4c:53:
30:05:eb:f9:73:33:62:52:99:54:8a:f3:47:0f:d7:c6:d8:9d:
04:a0:32:56:88:43:f8:30:9a:1a:80:3c:a4:c5:5c:2a:98:7a:
8b:0b:b2:54:a3:51:c8:e7:fb:35:20:4d:05:20:2e:20:55:ad:
ee:be:35:87:a3:45:a8:cc:17:a6:dc:21:b9:c4:27:fe:e5:c5:
e9:1a:62:db:6b:d9:50:58:35:9c:9b:a6:d2:d3:71:94:b3:03:
d4:d0:93:e2:e1:16:40:c6:af:8a:6e:94:89:17:18:de:a3:59:
41:87:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:54 2026 by rpki-client