Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: /uyz7pSdd8bzC2e7Nv1FNeejRrZut1/F/78MFB0PRdU=
Subject key identifier: 68:8F:0B:EC:73:D8:1A:93:68:C0:7A:96:4C:48:C4:00:ED:49:DF:52
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 01A08B67C55F01C12182B26EC6F5235F71D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0D09
Signing time: Thu 10 Sep 2026 13:00:28 +0000
Manifest this update: Thu 10 Sep 2026 13:00:28 +0000
Manifest next update: Fri 11 Sep 2026 13:00:28 +0000
Files and hashes: 1: 3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa (hash: rJHtn8lGExcQ1k9wE7wx+7iji7/5AXFn9zAwDRMm85s=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: X4m8PSmylZvTcu7ah31W0qIaXZhwgSV51LLj7RABJy8=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:c5:5f:01:c1:21:82:b2:6e:c6:f5:23:5f:71:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Sep 10 13:00:28 2026 GMT
Not After : Sep 11 13:00:28 2026 GMT
Subject: CN=688f0bec73d81a9368c07a964c48c400ed49df52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:68:a9:b2:a2:2e:17:15:c8:bc:3e:e0:89:
91:4e:12:a5:fd:53:6b:4d:0e:70:b6:34:6f:e5:b8:
af:d7:fd:d3:fa:82:8e:08:69:54:13:27:53:ff:a6:
74:6d:e0:83:9c:2d:31:39:9a:1c:c5:41:a4:68:08:
d6:bb:48:af:17:20:50:f3:bb:0a:3f:67:c7:85:56:
e7:7b:ca:d5:a2:98:26:08:3e:1a:2c:d7:0d:2f:40:
bf:dd:ff:e6:fa:89:2f:d8:dc:60:ba:f8:f4:a9:f3:
c1:3a:5e:50:08:fe:3a:96:ba:e2:ad:38:0c:f4:d5:
fd:08:27:17:6f:53:0e:c1:c1:0d:0b:0a:10:d9:84:
1c:33:b2:8b:44:24:bb:17:60:11:7f:db:fe:c2:bd:
1b:3d:1f:85:b3:80:9f:5e:d4:ea:74:a2:7d:3b:e5:
0a:9f:39:75:1d:c9:8c:38:c5:ff:08:90:64:cc:0c:
e5:64:22:5e:d3:9d:a5:eb:22:02:e6:db:f9:f3:cf:
30:97:f7:c5:49:cf:80:61:ef:03:1c:a8:e2:a7:53:
56:65:51:63:e0:64:07:33:e4:6b:7c:3b:2d:4b:d5:
69:c2:65:3b:cf:4a:e4:1f:84:ee:8f:34:b7:da:9d:
0b:8a:8c:b1:0e:56:fd:d8:50:8b:d1:f6:89:d9:43:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:0B:EC:73:D8:1A:93:68:C0:7A:96:4C:48:C4:00:ED:49:DF:52
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:12:0d:92:20:e3:a2:fa:f4:20:1f:4f:cb:7b:4b:ad:70:08:
60:5c:ad:e7:c7:a8:47:76:b3:78:5c:b4:16:1b:19:c2:41:1f:
6f:a5:57:f7:8d:1f:b8:7d:49:07:41:56:ba:51:03:0d:6e:2d:
12:61:1c:8e:90:bb:e4:b9:72:91:74:9c:46:4d:dd:de:86:de:
d4:3c:3b:c3:be:c3:f6:41:c2:76:d6:43:c7:ef:48:55:69:d5:
db:d8:ab:ec:d9:c1:a7:a5:d8:6f:cd:5d:da:c4:02:50:27:28:
2d:d2:5d:81:07:62:5e:53:b3:e4:ce:8d:7e:91:c8:18:50:57:
25:33:b4:9a:ca:91:13:aa:dd:e9:1c:8b:fb:4d:4d:c1:63:5d:
52:8b:25:6b:c2:56:89:cc:d7:13:fc:55:0d:20:6d:b5:e7:c3:
a9:1e:50:0a:ec:9a:7a:ec:67:dc:29:f2:a5:2f:1c:dd:da:11:
17:42:48:2b:c4:ba:a4:34:5e:c9:07:05:92:56:4a:4a:85:29:
99:2d:ee:f4:ba:63:e2:f9:7d:92:16:7c:bb:c7:9c:ca:ab:c6:
d2:c4:47:b7:37:3a:d8:7b:94:67:50:68:3b:83:62:b5:4e:5d:
a6:de:2d:8e:77:c5:bd:b6:4d:eb:58:58:53:95:35:3c:50:f4:
cd:f0:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:00 2026 by rpki-client