Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: wlxJGU5hZVR3PPh/CresYUWtD2ZsCzHBfFeItSvQreA=
Subject key identifier: B0:C1:7B:D9:CE:6D:B9:FF:0C:A6:5B:27:57:A0:8D:79:5F:84:6C:42
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01A0B61B7CE9A62597C7219E762F89861E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1685
Signing time: Fri 18 Sep 2026 20:00:49 +0000
Manifest this update: Fri 18 Sep 2026 20:00:49 +0000
Manifest next update: Sat 19 Sep 2026 20:00:49 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: JIetdvQOdUrYZ5LsydOTBYOVlecbOelX4Th6ALqGkPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:1b:7c:e9:a6:25:97:c7:21:9e:76:2f:89:86:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Sep 18 20:00:49 2026 GMT
Not After : Sep 19 20:00:49 2026 GMT
Subject: CN=b0c17bd9ce6db9ff0ca65b2757a08d795f846c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:cb:98:86:ba:a8:11:ae:f0:13:5e:62:57:
cc:b6:37:08:37:8c:cd:5a:45:30:91:0f:1d:47:2b:
d9:5b:72:49:e8:9c:02:63:b3:cc:7c:a9:cc:37:02:
d6:f9:64:63:09:3f:28:54:58:73:d2:18:5b:53:38:
5f:9a:4e:21:c9:46:41:28:9b:84:50:6f:e0:13:d6:
5e:5e:11:f8:e9:14:37:a5:ee:15:50:29:8b:db:9e:
75:99:ec:bd:68:4a:e9:d7:c3:e7:e8:4b:8a:bc:98:
4f:1c:5b:d2:6d:1b:7f:8b:0a:af:4e:94:9d:9b:51:
eb:78:64:70:6f:fe:aa:0a:85:47:12:06:f4:48:d5:
06:a7:b9:b1:16:1f:b2:09:86:37:ee:4d:47:3f:4e:
0a:82:b1:eb:2c:46:e8:86:ac:d0:f6:ae:14:f9:ad:
0c:4b:72:87:07:7b:38:f8:59:67:3d:7b:9e:c4:ce:
e9:02:0f:34:27:3a:32:6e:fd:74:7a:0f:c9:50:d2:
6e:7c:12:d1:d9:66:41:22:5e:8e:f1:dd:cb:9e:ed:
18:ea:54:f4:d4:e6:2f:e1:74:0a:67:26:85:c7:0c:
cd:1d:7b:3a:0c:78:84:3e:ea:57:7e:2c:f0:86:a2:
f2:e1:c2:c7:72:5a:e6:33:72:c8:73:17:73:90:e3:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:7B:D9:CE:6D:B9:FF:0C:A6:5B:27:57:A0:8D:79:5F:84:6C:42
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9a:63:57:0c:0f:b7:23:63:f0:5a:23:50:fd:ce:95:5b:8f:
1c:c2:1b:c4:48:dc:ba:2b:84:c8:bc:25:4f:6f:02:4f:9a:7f:
09:62:88:0b:85:65:d1:4b:e3:5e:bf:57:c6:b8:8a:9d:03:86:
af:ad:2d:6d:71:c0:81:db:0b:3a:01:a7:5b:8e:dd:4d:f7:e0:
d3:cd:eb:6a:a3:60:35:fe:96:09:07:98:2c:cd:8c:c0:99:2c:
ef:85:7a:4a:42:c3:de:22:6d:15:08:b2:9b:4c:76:9c:eb:cb:
59:97:8d:c5:2e:2e:27:01:03:2b:c4:0c:2c:7f:38:60:ce:05:
5f:3e:09:f1:58:c3:88:bf:42:e7:0f:5e:3a:7c:98:39:30:ee:
df:e8:e4:1f:a3:f3:0e:15:80:01:7f:83:a3:04:d6:3e:f5:e2:
d4:04:ee:ca:ec:b2:00:a9:66:8d:3e:23:74:40:fc:69:1c:06:
ef:43:1e:23:f7:1f:4f:8f:eb:02:d0:6f:75:15:12:79:3c:73:
67:b3:7f:a4:7f:39:82:8a:84:6f:cc:ea:59:b7:bd:74:fb:fd:
f1:9f:39:43:13:22:6d:49:5a:74:f5:95:38:3c:b2:2f:52:00:
ba:43:09:e5:db:6c:0c:3c:4d:74:72:78:00:f2:a8:91:f1:60:
be:d5:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:45 2026 by rpki-client