Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: 6q7KB5EEpDQApydA0rViyekjF/5Hzyo/eXKcXjQDdG0=
Subject key identifier: 0F:49:E9:67:36:F7:E5:4C:C2:50:AE:40:0D:FC:E6:B5:7D:52:0C:EB
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019DD12C6AC3084797F6611FE792DF62B302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0B9F
Signing time: Mon 27 Apr 2026 23:00:42 +0000
Manifest this update: Mon 27 Apr 2026 23:00:42 +0000
Manifest next update: Tue 28 Apr 2026 23:00:42 +0000
Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: puO3XN31I5R2KdWPuEYDtMT26S5dXN/PeVh7lVlr8Ao=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:6a:c3:08:47:97:f6:61:1f:e7:92:df:62:b3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Apr 27 23:00:42 2026 GMT
Not After : Apr 28 23:00:42 2026 GMT
Subject: CN=0f49e96736f7e54cc250ae400dfce6b57d520ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:24:bd:ca:ea:0a:42:94:b0:10:ba:ae:59:
9f:5a:66:17:18:d5:6a:d3:90:83:d4:15:56:9d:20:
16:7b:64:5e:e9:c1:05:08:56:9d:d2:4d:7c:20:fa:
44:47:f9:c1:b6:93:06:4e:21:d3:23:78:06:ea:d5:
a6:91:13:24:2f:1c:ec:fa:84:a0:a9:7c:1e:aa:14:
d8:07:98:ca:b7:06:60:c6:09:45:44:46:27:33:62:
46:95:90:59:ce:59:13:29:f7:4a:ab:8f:11:66:6d:
3f:9b:41:18:7b:9a:bd:ff:9c:a3:b3:84:7c:69:df:
5f:db:41:4d:da:a1:d6:f0:3f:79:5e:bb:ac:aa:5d:
40:ce:bc:a5:f5:07:95:79:f1:0b:8b:a4:54:2b:2c:
db:fb:47:b4:45:a7:c7:3d:85:cd:3a:5e:71:b9:fc:
72:e4:53:ef:6d:f5:b3:85:18:1a:fd:f8:5a:c0:e4:
c4:31:df:8a:8b:ca:f2:5c:53:65:b2:92:b2:cc:70:
68:2c:d0:9e:a0:ef:8c:e6:6c:e0:15:9c:e9:d9:7c:
f6:75:3f:f9:80:d8:c6:9a:11:b6:23:b4:0b:98:71:
98:f8:f4:b3:45:3c:43:f4:dd:ac:d6:2b:26:05:88:
ed:ff:1c:be:82:20:c1:f2:d0:19:5e:64:83:4a:a5:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:E9:67:36:F7:E5:4C:C2:50:AE:40:0D:FC:E6:B5:7D:52:0C:EB
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bf:38:47:c6:f3:ea:cd:15:70:dc:a4:d5:6e:c7:fb:d0:26:
78:b9:a5:ff:bc:51:20:71:ca:cd:d4:0f:3a:10:e6:81:47:76:
0c:19:32:52:0d:69:27:df:a3:9c:b7:4b:49:6f:9a:40:30:b9:
20:f7:d6:85:1b:7e:21:ca:4f:aa:92:26:f2:9b:9c:74:5e:0f:
dc:23:0b:5f:c9:b0:af:40:a3:30:84:0f:8c:a1:be:96:2e:45:
c7:59:75:ad:79:4d:18:5b:2a:e3:56:b6:7f:88:bf:ab:f8:07:
e7:af:47:a4:83:37:ac:0f:9c:77:61:b9:9b:92:a3:d0:d3:10:
5c:5e:b7:19:0d:f4:b2:ee:31:b2:37:c0:cc:2f:f4:99:d4:c0:
58:38:39:88:d0:be:51:74:ca:ef:31:90:36:ec:40:f4:ae:33:
51:be:a8:d6:6f:1e:1a:51:92:95:d5:86:60:8a:e6:be:79:59:
9a:b8:1e:ef:98:b1:0d:da:15:8c:53:fe:5e:f0:eb:48:86:12:
2c:32:10:a4:3f:1f:b8:ef:22:34:1c:38:c5:a5:51:e0:90:9f:
2b:2f:af:c2:68:87:ea:bf:39:2f:60:36:0f:c5:0e:a0:32:e4:
62:af:b6:a4:6c:0e:dd:3c:7f:1c:63:60:ab:45:26:13:ee:cf:
11:de:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:21:58 2026 by rpki-client