Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: RS9oZSRbtwAnswelJfL6RymHQ/jeL2WNnaefKgATX/Y=
Subject key identifier: 43:53:B3:B3:DE:10:1C:11:48:21:B9:F8:97:C8:E4:0D:B5:78:73:54
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 01A178F1BCECA05FCC89717704CC4473E707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0D84
Signing time: Mon 26 Oct 2026 16:01:10 +0000
Manifest this update: Mon 26 Oct 2026 16:01:10 +0000
Manifest next update: Tue 27 Oct 2026 16:01:10 +0000
Files and hashes: 1: 3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa (hash: rJHtn8lGExcQ1k9wE7wx+7iji7/5AXFn9zAwDRMm85s=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 2ZfkYqS77cYi9C+eeFUFaf44PfQAZYbduGTeFUqR0Pw=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:bc:ec:a0:5f:cc:89:71:77:04:cc:44:73:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Oct 26 16:01:10 2026 GMT
Not After : Oct 27 16:01:10 2026 GMT
Subject: CN=4353b3b3de101c114821b9f897c8e40db5787354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:6a:2b:2b:67:48:be:d5:46:c9:f1:a5:d7:
cf:b3:e3:ac:1c:fa:88:2e:bb:94:a3:52:0b:98:a7:
38:8e:f6:7e:28:78:74:66:81:53:d5:eb:9d:a1:58:
f1:a0:9b:83:94:cb:76:ca:16:6d:9b:2a:fe:4a:7c:
b9:dc:76:c9:d0:53:b7:c6:86:74:be:96:a2:06:5e:
b5:17:97:44:09:96:2c:62:03:fb:ab:dc:e0:4c:1f:
72:0f:85:21:52:73:53:ef:00:b1:b3:50:bc:00:e7:
ec:44:70:76:86:17:0d:a4:a8:ec:43:aa:9e:d0:66:
8d:86:85:08:f8:27:9b:48:2e:1f:2d:2b:7c:a8:1c:
c6:fc:a9:41:96:ee:e2:6d:be:6e:bb:fd:c2:26:61:
c8:63:03:6a:2e:71:6b:3f:f4:69:af:6a:d7:06:f6:
95:b9:65:3c:f4:a9:af:52:98:e6:6d:3a:0a:33:a2:
5d:c1:5d:22:66:27:47:89:a3:8b:47:12:b7:8e:19:
85:d6:17:c8:6d:c2:81:dd:d8:ca:b2:c3:e6:97:7d:
f9:ea:ad:fa:d5:7f:80:a3:1d:d8:d6:8e:e0:1f:92:
4e:92:1b:c1:0a:4d:ce:39:b8:e5:37:ba:e4:13:a6:
70:e8:7e:c0:34:9a:91:54:64:22:f3:57:e0:95:46:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:B3:B3:DE:10:1C:11:48:21:B9:F8:97:C8:E4:0D:B5:78:73:54
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:5f:56:f2:49:fa:69:bb:b7:06:0b:be:58:c4:40:22:59:
2b:20:7d:d7:46:60:be:c7:9a:5b:87:a5:03:51:73:86:f7:92:
8b:b8:b6:59:67:2b:a1:c4:6f:c0:05:09:ae:1c:19:95:7e:e3:
d0:d5:4a:b2:fe:03:c6:84:35:b2:a3:e1:fe:7f:63:f0:a6:a1:
2c:65:3e:2e:fb:12:c3:d4:2e:47:53:f4:b5:3e:e8:74:69:52:
7d:b7:9d:09:2a:5f:50:fa:31:a4:74:fe:f9:a9:a1:d8:16:41:
95:fc:27:95:34:83:1c:1c:9a:d0:6d:80:c7:4a:f7:d9:e0:a8:
ad:bf:f5:0b:d3:9e:48:a2:64:5c:17:80:0a:9b:6a:52:1c:51:
82:62:29:7a:e2:79:47:11:55:d8:7f:c8:4e:e7:11:96:df:bf:
b2:3b:4d:20:fc:8f:ab:50:66:24:d4:bd:b0:44:17:c8:5d:81:
cd:85:21:b0:7e:d6:21:18:9c:aa:ad:e8:89:e6:a2:74:92:40:
c9:be:0a:ec:76:83:ab:f3:6f:e8:f4:7c:59:cb:62:2f:9b:8c:
bf:15:1d:54:0b:fd:d3:e9:d9:ab:3c:e3:b5:93:83:e3:ba:62:
70:2a:24:f5:92:89:bc:ef:e5:6b:25:ae:b9:3c:e6:4b:5a:bb:
47:9c:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:04 2026 by rpki-client