Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: /rp5YM+0R3UyWTL0fmRAIWJVGZrlx9UbSiRqOEbVQlI=
Subject key identifier: C7:6C:75:A2:D3:BC:77:14:7C:7D:BB:CF:B0:E4:31:18:64:66:99:FC
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 01A17C974408E14126EAE5593644B86390CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1A17
Signing time: Tue 27 Oct 2026 09:00:50 +0000
Manifest this update: Tue 27 Oct 2026 09:00:50 +0000
Manifest next update: Wed 28 Oct 2026 09:00:50 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: hSyR4GIHdBCtd5RYw5Jp76qUNUMu3H3V0FE6RVfKiyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:44:08:e1:41:26:ea:e5:59:36:44:b8:63:90:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Oct 27 09:00:50 2026 GMT
Not After : Oct 28 09:00:50 2026 GMT
Subject: CN=c76c75a2d3bc77147c7dbbcfb0e43118646699fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:23:bb:66:96:70:a2:df:c5:80:d7:aa:5a:
28:bb:88:fc:a4:29:e4:1b:ec:7b:70:c1:16:b5:ec:
9e:9f:18:39:9c:5b:f7:ed:09:a9:8a:66:74:da:80:
e2:b1:a0:fc:5f:2e:63:92:e2:0c:c3:8a:a6:79:22:
80:34:14:ed:28:7c:5b:ff:97:e2:25:b3:fd:72:7e:
fc:53:19:43:6a:92:6a:46:3a:3f:43:82:31:f9:6a:
ed:b8:62:66:5f:41:56:95:a8:96:8a:9b:79:82:a5:
83:a9:ea:53:92:8b:1c:88:20:d1:4d:56:17:14:cb:
9b:61:6b:83:e8:f4:07:04:ad:32:a6:7b:2e:91:21:
96:a4:a8:3c:8c:54:8b:3d:4a:5a:ca:da:87:16:41:
e3:63:b7:ac:39:40:a0:a4:44:cc:a4:ef:e7:14:e0:
ac:a0:c0:44:5d:7c:ad:43:00:62:8a:75:e4:e8:53:
b9:dc:e9:92:61:c2:e8:86:0b:23:cd:6a:96:4c:52:
17:1e:31:66:03:32:ae:00:76:8e:f4:9f:e8:62:f0:
70:a1:86:29:ac:d8:37:d7:d8:e6:f0:62:9f:e0:df:
5c:ef:b7:58:a9:03:89:ae:69:5a:51:fa:25:fa:58:
86:ad:ef:24:f1:6b:23:56:ea:ab:03:a0:9d:cc:1b:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6C:75:A2:D3:BC:77:14:7C:7D:BB:CF:B0:E4:31:18:64:66:99:FC
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:33:bc:7f:41:44:7a:bf:4c:5d:0f:e1:8f:a9:d9:ca:17:42:
d2:33:f3:1e:2d:e2:69:c6:75:d4:ed:2e:56:ca:4e:6d:5c:dc:
fc:45:de:ca:aa:31:df:d9:db:af:2a:8a:f5:65:14:96:af:f1:
a2:03:5f:c5:4b:ef:19:df:e2:72:c5:7b:e7:db:28:05:bd:63:
f9:fe:ed:1d:ae:bf:97:34:8a:27:5e:74:de:10:79:40:ce:0b:
d9:0c:b3:04:99:86:42:d2:2b:41:d4:a1:b3:1b:02:77:eb:50:
44:25:07:7a:90:a9:16:47:1f:d8:6b:b9:36:77:06:48:61:4d:
02:8c:61:4e:67:ad:f2:50:cd:77:2e:cd:69:8f:2b:a2:d8:6d:
df:c5:29:c0:b7:a5:26:a0:48:00:7f:7a:b2:c3:53:87:91:48:
8f:3f:00:22:fa:98:4b:24:ba:1b:de:c6:c7:75:93:6d:90:55:
d8:76:e8:b2:67:96:71:44:8c:21:b0:86:7c:c0:c7:27:e9:6a:
05:99:4d:2f:17:5d:9d:a9:29:5d:e8:70:bf:79:88:07:38:c1:
7a:d4:c5:de:2a:27:55:00:55:34:1b:df:d6:6c:3e:01:bb:ad:
4e:c0:82:52:5f:fc:da:28:0a:7c:85:4f:b7:94:cd:ff:d9:16:
cc:a1:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:22:43 2026 by rpki-client