Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: NUxmg8PhaZIQHurucT7MqGKyj7/99OrtY3pthSIcYxM=
Subject key identifier: C1:39:8B:1A:95:1A:EC:A8:29:E4:A6:8F:C4:89:C4:5E:65:D5:B2:BD
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019CE5910EF19BF80E979C05A1413C0744C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0B25
Signing time: Fri 13 Mar 2026 05:00:14 +0000
Manifest this update: Fri 13 Mar 2026 05:00:14 +0000
Manifest next update: Sat 14 Mar 2026 05:00:14 +0000
Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: haZqeraXjUCLWR1KKejbZ7JCPjnhF0jn/c/bROEDrpI=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:0e:f1:9b:f8:0e:97:9c:05:a1:41:3c:07:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Mar 13 05:00:14 2026 GMT
Not After : Mar 14 05:00:14 2026 GMT
Subject: CN=c1398b1a951aeca829e4a68fc489c45e65d5b2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5c:c2:54:10:c7:3b:3c:c7:11:30:d2:31:4e:
92:28:c6:bf:6d:9e:b7:ea:f0:8f:18:9f:c8:6c:13:
64:10:e6:57:7c:6f:07:3f:6b:1e:7b:46:23:ab:d5:
4a:d8:e2:07:53:20:be:e1:6d:4e:42:88:24:1a:8f:
9c:38:1a:15:89:a9:d1:14:0d:c4:f3:19:0a:dd:15:
5b:0e:a0:ba:38:59:50:16:e7:e8:c1:81:24:0a:be:
a2:85:9c:f6:b0:fe:80:3a:04:21:6e:a1:53:4f:16:
b5:51:51:8c:7e:0c:91:cf:f6:36:7a:51:5f:f1:ae:
19:95:ec:d0:9c:24:0f:12:33:3c:26:e3:80:01:5b:
d7:30:c0:89:13:65:9a:be:e8:47:1f:be:95:e8:54:
ac:88:21:66:80:8d:0b:90:37:7e:3d:88:db:a7:df:
21:35:78:db:df:ed:64:5f:3a:84:b7:47:7a:80:5e:
44:76:78:5f:9b:b4:c5:e4:77:8b:96:31:59:19:f4:
e6:64:5b:5b:f6:c4:98:22:25:29:28:3e:78:a6:a6:
12:c3:3a:10:b2:99:5e:91:81:c3:f5:a5:c7:ad:06:
19:85:39:16:d0:9a:4a:ff:fe:39:e2:bf:d7:16:fa:
3f:19:3d:28:9f:f0:b0:0c:5c:2a:2d:59:2c:af:3b:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:8B:1A:95:1A:EC:A8:29:E4:A6:8F:C4:89:C4:5E:65:D5:B2:BD
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:05:c7:41:04:bb:06:50:7e:37:9f:e8:4c:ea:c0:d4:89:c7:
fd:5d:c3:a0:5c:73:12:55:0f:d0:16:9e:2c:80:ab:0e:96:7d:
e1:a3:f5:8a:cc:e0:08:1d:3f:e2:57:09:14:e2:a6:09:29:7d:
36:db:14:b0:80:c2:d7:cb:c2:3f:ed:e3:c3:e7:63:12:8b:85:
78:e4:dc:1c:8c:be:15:b3:80:48:9f:67:ab:df:e0:6b:92:76:
5b:54:c2:b9:f7:bb:e3:e4:62:25:16:22:22:fc:70:59:97:b1:
22:4b:66:56:11:da:7b:76:ff:67:38:9c:b8:8d:a8:57:11:f4:
fe:54:59:e2:e6:73:1e:89:fe:2f:4b:b1:a4:d8:90:6b:11:2b:
e3:b5:6e:e2:0a:82:2d:6a:8a:63:b1:22:ec:51:02:bc:6a:59:
17:42:a4:a8:a5:50:24:b8:92:61:2a:66:3e:9f:4c:a6:4e:d4:
99:ee:de:cf:67:8e:2e:be:35:4e:a9:de:9b:e7:ae:a2:35:b7:
05:9a:7b:5d:8f:4f:a9:7e:30:51:7a:00:07:1b:71:83:5c:41:
19:8b:7f:36:26:63:20:21:4b:e2:9f:81:d8:a7:16:5b:7f:fd:
19:6c:0d:0d:9b:3d:3a:09:f8:6d:b4:5b:ab:b7:2b:2b:00:30:
fc:38:9c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkQ7xm/gOl5wFoUE8B0TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2
NzQ5NDQwHhcNMjYwMzEzMDUwMDE0WhcNMjYwMzE0MDUwMDE0WjAzMTEwLwYDVQQD
EyhjMTM5OGIxYTk1MWFlY2E4MjllNGE2OGZjNDg5YzQ1ZTY1ZDViMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lzCVBDHOzzHETDSMU6SKMa/bZ63
6vCPGJ/IbBNkEOZXfG8HP2see0Yjq9VK2OIHUyC+4W1OQogkGo+cOBoVianRFA3E
8xkK3RVbDqC6OFlQFufowYEkCr6ihZz2sP6AOgQhbqFTTxa1UVGMfgyRz/Y2elFf
8a4ZlezQnCQPEjM8JuOAAVvXMMCJE2WavuhHH76V6FSsiCFmgI0LkDd+PYjbp98h
NXjb3+1kXzqEt0d6gF5Ednhfm7TF5HeLljFZGfTmZFtb9sSYIiUpKD54pqYSwzoQ
splekYHD9aXHrQYZhTkW0JpK//454r/XFvo/GT0on/CwDFwqLVksrzvZhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME5ixqVGuyoKeSmj8SJxF5l1bK9MB8GA1UdIwQY
MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct
YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz
LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAXHQQS7
BlB+N5/oTOrA1InH/V3DoFxzElUP0BaeLICrDpZ94aP1iszgCB0/4lcJFOKmCSl9
NtsUsIDC18vCP+3jw+djEouFeOTcHIy+FbOASJ9nq9/ga5J2W1TCufe74+RiJRYi
IvxwWZexIktmVhHae3b/ZzicuI2oVxH0/lRZ4uZzHon+L0uxpNiQaxEr47Vu4gqC
LWqKY7Ei7FECvGpZF0KkqKVQJLiSYSpmPp9Mpk7Ume7ez2eOLr41Tqnem+euojW3
BZp7XY9PqX4wUXoABxtxg1xBGYt/NiZjICFL4p+B2KcWW3/9GWwNDZs9Ogn4bbRb
q7crKwAw/Dicbg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:27 2026 by rpki-client