Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: Jt5yk/yNwCUTFarj/Y/yDCWA4PmKDMIP6d/pMBIRg0U=
Subject key identifier: F8:D1:A6:4C:40:D5:7B:06:89:D1:28:35:E2:3F:F2:0D:16:99:74:D5
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019D3752F82643ED7755E65A320FF804EE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 053A
Signing time: Sun 29 Mar 2026 02:01:17 +0000
Manifest this update: Sun 29 Mar 2026 02:01:17 +0000
Manifest next update: Mon 30 Mar 2026 02:01:17 +0000
Files and hashes: 1: Lm0YXMaLWclKoRURyg7-1BSKMMM.roa (hash: lcsnHzqJgV0Pr0+CJVRqQvA5eNcE3/rEZUnHTRT4+/4=)
2: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: hucvhZdlPILHayryxr/t7TTgFJRvuyzYP52e6vgJtnU=)
3: s_i-4HgM08ZomafIARg5DCNgTzI.roa (hash: wSP0h+XQV0/zt4QIiT80nzFtCCr+jVfJzFx1wPlXOiY=)
4: uXDu77cxLGO111ouG3WizVkTwpM.roa (hash: jqcMrYd4GN+J0MgnqBXSyT/iy1d2bJSyGgMM3hAUiNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f8:26:43:ed:77:55:e6:5a:32:0f:f8:04:ee:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Mar 29 02:01:17 2026 GMT
Not After : Mar 30 02:01:17 2026 GMT
Subject: CN=f8d1a64c40d57b0689d12835e23ff20d169974d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:b4:71:eb:75:2f:1d:85:a6:65:30:8f:9b:
78:e3:ec:f7:39:8c:b1:82:32:65:03:57:3f:24:cb:
49:ea:8f:0b:41:97:cd:ee:8a:9a:da:77:82:f0:5d:
96:d8:9e:f9:0c:de:85:9b:9c:86:a3:db:ca:a1:f5:
bb:39:94:f2:91:bb:24:0e:ad:fa:03:0e:f5:5a:1e:
7c:b2:92:b4:71:b2:1d:bb:57:c9:74:00:66:07:1e:
0a:c1:e4:c5:30:61:7d:c8:ac:4a:f5:fa:f3:66:ed:
93:89:d8:6e:9d:0c:e6:a1:81:f3:1e:d9:70:59:a9:
f7:9f:13:26:0e:dd:a8:f0:0b:0d:02:52:6b:16:08:
ed:e3:f6:15:56:28:ac:f5:03:40:6a:5f:3b:3b:7c:
b6:33:fc:35:e2:e2:75:08:d9:d0:47:02:e4:ed:9f:
cb:cc:b2:c7:2b:f4:7b:3f:29:00:db:ff:9e:f0:bb:
d6:e3:fb:50:1f:72:dd:25:61:c8:92:85:df:6e:e0:
e7:65:74:3c:8c:84:eb:7a:87:51:d4:ea:fd:e2:19:
ac:5a:f1:5d:1e:90:44:d8:66:75:de:6b:79:42:70:
3a:d6:e3:e1:83:80:95:19:74:03:1c:77:7e:ee:8e:
bc:0c:71:81:ad:f2:cf:40:99:8a:68:36:cc:69:f0:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:A6:4C:40:D5:7B:06:89:D1:28:35:E2:3F:F2:0D:16:99:74:D5
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ff:87:b7:ef:69:c5:7a:fc:34:df:0b:cc:fc:bb:f0:d2:0f:
28:41:53:96:e0:ee:12:9a:59:b6:33:a9:f2:2b:17:83:7b:c9:
ae:ff:4d:48:87:96:3c:3e:f0:ef:46:cb:23:6f:e4:91:c5:6f:
a9:d6:70:cc:bf:2a:9e:6a:34:4e:79:18:80:e5:e3:66:67:76:
c4:6f:31:73:7f:ed:81:fe:1b:a4:75:17:a7:04:1b:26:e0:55:
6f:66:cb:91:04:86:36:5d:07:76:72:f4:8e:d7:38:6b:15:db:
73:41:95:a9:43:a3:69:0c:c8:db:57:3c:fe:f7:34:7f:ef:04:
a9:60:df:46:c0:a2:0b:ba:dc:90:c9:bb:00:80:ea:39:6b:37:
59:25:34:f2:6d:9c:2d:1e:ec:8b:cc:69:c1:be:a2:a9:e3:42:
28:e7:c0:5e:63:7b:d9:a8:b1:54:0e:77:38:3d:a9:fa:be:07:
33:82:65:d7:f4:4b:5d:ff:d7:2a:a3:0c:27:ac:74:5b:43:ab:
87:be:b4:f9:4a:69:7f:75:7c:de:4f:4f:2c:0f:5f:f1:2d:0c:
13:cf:8c:9a:d9:6a:38:f9:cb:27:e5:a4:bc:3c:64:c4:2a:a9:
5e:11:ef:f4:ce:b9:c1:11:30:a5:aa:45:1b:c9:9b:85:1a:6d:
a9:70:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:06 2026 by rpki-client