Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: 1Rp4s5DKNCrZDQCfxKgQ9U/2lrdU2siMocA2OHBcKXg=
Subject key identifier: 4A:E0:FC:AB:59:C9:DF:4F:7A:2B:AD:EB:4C:3E:46:44:20:07:21:75
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019EE88E54073277345E58F206D2E3315AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1596
Signing time: Sun 21 Jun 2026 05:01:42 +0000
Manifest this update: Sun 21 Jun 2026 05:01:42 +0000
Manifest next update: Mon 22 Jun 2026 05:01:42 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: 7tPZW0r9n9DKe0hjA+BfPUBTgjEoTmIjJha3aBK9IBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:8e:54:07:32:77:34:5e:58:f2:06:d2:e3:31:5a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jun 21 05:01:42 2026 GMT
Not After : Jun 22 05:01:42 2026 GMT
Subject: CN=4ae0fcab59c9df4f7a2badeb4c3e464420072175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:f4:18:9c:43:bd:ce:94:f8:55:96:31:5b:
ba:1f:4c:02:f0:2c:1b:d2:ab:d0:6e:08:b3:80:37:
b1:f0:ef:f2:9c:06:42:00:9d:c4:a4:4b:8a:4c:3c:
27:b2:48:6a:e3:75:97:8b:b0:8f:62:20:cc:73:b6:
ca:aa:bb:5e:c5:e6:7d:64:36:f0:76:a9:51:2c:eb:
6b:0d:d9:52:49:94:bf:8c:ae:0c:dc:2b:a4:5d:b0:
02:ee:cc:44:f8:91:b0:a6:b3:a1:ab:c6:15:71:ae:
23:a8:b8:97:ba:34:a1:37:7a:f3:9f:ec:36:2d:95:
85:42:fd:41:69:4d:17:19:c4:c8:29:11:0c:09:19:
d6:ef:41:37:38:45:38:50:e0:b3:5b:27:db:8e:cc:
13:73:c7:10:92:1e:1f:0f:fe:91:97:b0:f4:a1:55:
c0:b8:14:fa:da:78:d3:87:74:6c:37:94:ab:8d:2a:
67:14:b7:ae:3c:c6:04:47:11:0c:10:33:34:7d:08:
b2:13:7e:10:ca:79:b8:8d:96:06:14:60:90:2d:f4:
44:76:11:7b:a3:c5:e7:43:22:eb:c6:8d:ce:2f:64:
9a:97:05:eb:d7:f4:a6:63:57:d8:e2:6c:d5:00:5e:
1b:86:68:4b:54:19:9e:a6:a5:36:61:b3:17:16:61:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:FC:AB:59:C9:DF:4F:7A:2B:AD:EB:4C:3E:46:44:20:07:21:75
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:68:4d:93:a2:f6:96:c4:43:32:f3:83:db:6e:b2:e8:10:
92:ff:7d:6d:3e:94:f3:db:32:2e:87:26:df:33:80:1a:56:97:
9f:1c:f8:8a:8d:63:e9:7c:1b:e3:c5:04:b2:27:fc:1c:80:14:
c2:87:b2:c2:f5:53:cf:5a:92:c3:eb:b3:cb:5b:e3:69:75:70:
c1:1b:e1:47:4a:29:72:ab:af:42:c5:4c:6b:ca:6f:7f:c0:f3:
2b:d0:fd:df:20:0b:53:2b:a1:bd:8d:e4:3a:0d:c3:ac:d1:73:
cc:8d:12:f9:65:95:ad:d1:9e:7b:ad:69:bc:46:03:82:b1:9b:
21:22:ad:7c:3c:68:3e:22:39:af:52:a4:6a:fa:c5:2e:f9:59:
5f:aa:89:5c:1a:5a:5d:01:80:39:bf:f8:03:b5:86:9a:ce:77:
a6:a6:a9:dd:f9:77:9e:99:6e:dd:78:32:4c:fc:fb:cf:84:fa:
6b:52:3e:8b:55:36:b1:e0:db:3c:87:d8:f2:27:75:15:4d:04:
06:1f:f8:6e:da:ec:82:3e:05:58:1a:e1:c9:f5:2c:cc:44:23:
cc:7e:e1:c7:bc:28:10:a8:29:02:de:ab:50:c0:c5:fd:26:10:
0e:c0:0f:12:95:57:b3:aa:31:70:7d:05:81:67:91:b5:f8:fa:
5f:55:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:17:03 2026 by rpki-client