Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: /gyBJiUfGraPnG2A6W3D5yEd/UvvAZql8l5b/xDqgxA=
Subject key identifier: 4E:52:3B:6F:6D:89:F0:1E:90:BD:9C:20:49:A9:90:C0:24:ED:7D:42
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 019D382E7CBB5E14CED0F4377D9D8A32336B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 012C
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: 9GBMji4OPDhRJLd-DlLdqVfKcus.asa (hash: 6NMpenXQXi5qKq7l5TGlC240gKGHF30b3eWuVh0xgdg=)
2: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: vPrQbB1XsH0/5JU4GX7vYD+XGz809QMqNokd+KRcYN0=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7c:bb:5e:14:ce:d0:f4:37:7d:9d:8a:32:33:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=4e523b6f6d89f01e90bd9c2049a990c024ed7d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:14:be:3a:3d:74:1c:73:b9:63:08:39:ba:
f3:cd:cf:13:c4:63:97:ae:1e:da:c2:57:64:4a:e6:
bb:35:e9:c7:53:44:f1:a6:bf:74:cc:28:49:6b:04:
91:24:a9:bb:cc:93:6b:0e:f4:61:2d:33:02:a5:5f:
d0:15:f9:0e:c9:4a:2e:20:6d:03:7f:45:a7:0f:ed:
46:38:c7:67:e0:a3:1f:c2:c1:ef:45:5f:60:84:eb:
4b:ed:fc:8e:b3:04:28:1f:ef:27:00:ce:2a:6e:f7:
9b:40:6d:c8:2b:60:21:f1:9b:58:70:f2:1c:14:78:
cf:21:87:a4:05:a0:6b:5e:b7:5f:20:66:b6:ab:5e:
03:74:0b:c4:d5:7a:41:a3:4e:e8:c8:58:9e:47:11:
79:0f:0c:8c:f1:01:c6:d9:ee:5a:b9:d6:62:f8:cb:
18:7d:5f:7b:9d:d0:0d:75:3c:9b:65:af:aa:7f:10:
6c:e1:56:ec:eb:6d:d0:62:73:f7:aa:48:23:65:01:
d3:94:5e:d5:1d:02:69:ec:e0:27:4e:9f:5a:76:56:
d1:1e:26:30:d9:10:ca:3f:9d:e0:1f:80:ee:8e:86:
58:71:c3:b2:c6:88:11:e6:b9:ed:80:46:de:9d:77:
a7:c3:90:aa:5c:09:64:eb:09:64:ba:9c:40:0c:87:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:3B:6F:6D:89:F0:1E:90:BD:9C:20:49:A9:90:C0:24:ED:7D:42
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2b:e5:ad:2a:6e:85:e4:24:68:de:cd:64:3c:a0:5b:05:af:
59:f9:f6:a9:e3:1c:6f:ea:21:71:77:9a:70:2a:c4:38:bc:b4:
d2:a2:86:bd:8f:de:f7:92:93:e9:fd:5b:4b:5f:90:3e:71:1d:
2f:45:ee:a0:7a:54:0f:0a:a8:74:c1:42:4e:09:f6:43:ac:27:
4e:35:71:52:38:9f:f7:81:27:48:0f:24:b2:b2:0e:38:72:c5:
2f:df:8e:29:d3:4d:45:b3:88:bf:b4:a1:7f:60:a4:0a:ee:15:
81:ef:f7:4f:4b:31:4e:d3:83:77:28:86:fd:d5:91:17:62:f1:
31:92:81:d7:ad:20:da:d8:a5:47:68:b0:52:f0:42:26:86:71:
2b:64:56:86:32:b4:5e:b9:3e:4d:f8:af:0f:88:41:e2:0d:af:
d5:f0:f2:6c:c2:a1:7e:ce:56:fb:f5:9c:92:c3:13:ae:89:38:
2d:ac:24:fd:20:70:62:0c:0d:7e:fd:93:ac:93:1a:67:95:c8:
c5:8c:5a:f2:46:76:61:f7:1f:1d:1f:2c:a2:ee:c3:f1:89:87:
63:85:f3:c0:92:04:87:f0:58:78:1b:1f:0f:83:49:04:9e:0b:
3a:3a:0e:4f:09:fc:fa:87:3a:a2:f4:a5:98:76:62:7c:95:d2:
96:1a:f1:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lny7XhTO0PQ3fZ2KMjNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzE1ZDhlYzQ3YTJiMGUyMDQzYTc4MjJkYjY3YWMyMzEx
N2NjODcwHhcNMjYwMzI5MDYwMTAzWhcNMjYwMzMwMDYwMTAzWjAzMTEwLwYDVQQD
Eyg0ZTUyM2I2ZjZkODlmMDFlOTBiZDljMjA0OWE5OTBjMDI0ZWQ3ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttoUvjo9dBxzuWMIObrzzc8TxGOX
rh7awldkSua7NenHU0Txpr90zChJawSRJKm7zJNrDvRhLTMCpV/QFfkOyUouIG0D
f0WnD+1GOMdn4KMfwsHvRV9ghOtL7fyOswQoH+8nAM4qbvebQG3IK2Ah8ZtYcPIc
FHjPIYekBaBrXrdfIGa2q14DdAvE1XpBo07oyFieRxF5DwyM8QHG2e5audZi+MsY
fV97ndANdTybZa+qfxBs4Vbs623QYnP3qkgjZQHTlF7VHQJp7OAnTp9adlbRHiYw
2RDKP53gH4DujoZYccOyxogR5rntgEbenXenw5CqXAlk6wlkupxADIfEuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5SO29tifAekL2cIEmpkMAk7X1CMB8GA1UdIwQY
MBaAFCXBXY7EeisOIEOngi22esIxF8yHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYt
NDNlMmIxNTk2NTdkLzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYtNDNlMmIxNTk2NTdk
LzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCvlrSpu
heQkaN7NZDygWwWvWfn2qeMcb+ohcXeacCrEOLy00qKGvY/e95KT6f1bS1+QPnEd
L0XuoHpUDwqodMFCTgn2Q6wnTjVxUjif94EnSA8ksrIOOHLFL9+OKdNNRbOIv7Sh
f2CkCu4Vge/3T0sxTtODdyiG/dWRF2LxMZKB160g2tilR2iwUvBCJoZxK2RWhjK0
Xrk+TfivD4hB4g2v1fDybMKhfs5W+/WcksMTrok4Lawk/SBwYgwNfv2TrJMaZ5XI
xYxa8kZ2YfcfHR8sou7D8YmHY4XzwJIEh/BYeBsfD4NJBJ4LOjoOTwn8+oc6ovSl
mHZifJXSlhrxOg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:03 2026 by rpki-client