Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: 6gi+p/mvAoLfbeqcugQkrCroLHII1Re8rFp0/O8wNgM=
Subject key identifier: 68:C1:25:A2:BE:68:8A:C1:A9:B7:9F:CC:1F:A3:FA:DA:B6:C3:CD:69
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019CE4B5BF04E69EB2703B638B2EC5533D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 17F7
Signing time: Fri 13 Mar 2026 01:00:41 +0000
Manifest this update: Fri 13 Mar 2026 01:00:41 +0000
Manifest next update: Sat 14 Mar 2026 01:00:41 +0000
Files and hashes: 1: gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa (hash: XbNVPIMyzYNGS/m6xHDz4/G85Dxs4nrc/Ehwb2bG/rs=)
2: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: yQYTgkQTJ03JQ2gGiELvBgLx6yT8sH/BCZYNSyZgnm0=)
3: kNR-gUHIBkAVG5LDVgVJxvEY3q8.roa (hash: d0VW7tyS0/KepNZdJ2Fz8K2kUTPgtIVFBZK37jfxU0M=)
4: kUXgXHjZh6Dhv7swtP0uScwOUOU.roa (hash: quIM8+yqzd47fNHZBFQKX0gUs534hYfsNXJItcjTlM4=)
5: v9YovKS0rkxgh-imaNT6dS4t8wE.roa (hash: +gjCRrqjahMp/Uxvqf8OR5Yjihz0o/VceeWEOtR4+ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:bf:04:e6:9e:b2:70:3b:63:8b:2e:c5:53:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Mar 13 01:00:41 2026 GMT
Not After : Mar 14 01:00:41 2026 GMT
Subject: CN=68c125a2be688ac1a9b79fcc1fa3fadab6c3cd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:6b:16:97:03:a2:39:43:c6:47:f7:13:bf:
a7:6a:6c:c4:02:6f:b3:41:3d:73:6e:be:07:be:31:
39:84:b5:89:0a:48:1d:1f:c1:6f:a0:ba:6e:b2:16:
c1:e6:38:41:11:bd:b2:44:4e:79:84:1f:6e:3d:f6:
b0:26:96:cd:79:87:46:76:08:78:e6:0e:d2:81:81:
3a:20:49:a3:77:7d:ad:85:47:75:33:9c:7a:d7:a1:
e9:30:57:ad:77:95:f6:da:ad:54:8f:ae:36:49:72:
b9:e7:70:8b:ad:90:23:0e:4d:a3:33:13:ee:55:18:
a7:9b:f7:50:30:8f:b4:33:d4:ad:2e:ad:1c:68:0a:
28:5d:38:76:7a:35:73:72:24:30:25:91:a0:4e:85:
ab:54:0a:03:11:f4:92:13:55:da:0c:73:6c:4d:54:
b2:1b:9b:d5:09:bc:26:a1:58:f5:54:7a:2a:78:3b:
25:65:38:a6:7c:23:c9:c5:08:e1:eb:e7:0d:d3:a9:
e1:58:2e:ca:b1:45:4a:2a:65:4e:c2:f9:f0:d5:95:
3e:52:1a:15:f3:0c:6f:60:46:a4:65:76:2b:5b:10:
e6:5a:50:51:cf:5d:f7:ae:b9:8a:92:35:1b:4e:e2:
3f:88:99:2d:50:33:1e:9d:67:17:ba:25:e6:18:bf:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:25:A2:BE:68:8A:C1:A9:B7:9F:CC:1F:A3:FA:DA:B6:C3:CD:69
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:51:27:aa:89:f6:81:9c:46:dd:4c:50:48:ea:42:6a:62:
fb:d5:69:f8:1f:fc:03:92:97:91:a5:e9:0a:86:43:d8:58:48:
18:d8:02:2d:bf:e8:88:a0:e5:21:50:bf:09:56:53:5b:bc:5f:
4b:2f:cc:dc:d9:ff:c2:d1:e7:45:9e:35:ea:84:89:9b:e5:00:
43:a2:00:80:da:25:bc:78:e4:1f:f1:56:b4:20:b3:cc:0b:f5:
bf:ca:7f:a2:86:13:c8:b4:85:18:3d:52:b7:ed:51:45:76:16:
cc:0e:42:7e:41:d6:3b:67:89:b2:e4:ba:c2:c7:39:30:cb:89:
99:ff:13:a6:32:33:c1:8a:b1:c4:91:d1:45:1b:7f:c3:31:90:
61:73:a8:df:24:95:21:0a:8f:8a:d9:f9:7f:2b:dd:33:1f:29:
25:50:76:12:b5:c6:12:8f:32:57:e9:c4:c2:12:10:2d:77:4c:
83:3f:93:f4:44:91:db:e6:3e:10:2b:aa:bb:ae:8f:c4:43:c0:
bb:ce:94:f1:61:c6:9c:2c:ae:74:11:1a:07:df:2b:5a:11:e2:
42:ed:9b:4e:b0:8a:a1:21:0c:de:2a:6c:7e:74:ea:2a:a5:ea:
d6:6a:e5:0f:56:c9:fb:a7:68:92:98:c7:bf:cb:11:f4:a6:94:
d9:cd:8a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:07 2026 by rpki-client