Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: VqLcji67wcRKd54kg8OY09MjA79P/8xvRLlSUXQMTHA=
Subject key identifier: A0:90:86:B4:52:40:33:19:F7:32:D0:54:31:BC:A2:CD:5E:FA:2F:65
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 01A17E85BEBE82EA9B537C07B8B552CC6694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1A18
Signing time: Tue 27 Oct 2026 18:00:56 +0000
Manifest this update: Tue 27 Oct 2026 18:00:56 +0000
Manifest next update: Wed 28 Oct 2026 18:00:56 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: dFFta8DVOByohblBQpuc8OR1HodfusDvsBA2yXhj2Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:be:be:82:ea:9b:53:7c:07:b8:b5:52:cc:66:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Oct 27 18:00:56 2026 GMT
Not After : Oct 28 18:00:56 2026 GMT
Subject: CN=a09086b452403319f732d05431bca2cd5efa2f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:04:52:0a:5d:0c:4c:4e:3c:2b:0c:44:89:
cb:0f:bf:d7:6b:0e:1c:84:bc:38:0c:9e:7a:95:de:
6c:bc:7c:70:59:26:93:41:1f:ad:a3:d2:6a:42:46:
d9:ae:d7:8b:07:fe:69:f5:d5:c0:8b:04:e2:5a:1e:
bc:0b:ff:1d:41:73:03:b9:78:41:0b:80:16:8a:7b:
1b:ca:7d:8d:0a:fa:e7:2c:bf:33:15:70:84:c9:a5:
b4:d5:0b:4f:b9:8e:ab:93:32:6e:fb:6b:2d:21:26:
a4:e6:12:2d:f8:02:e3:eb:d1:4b:d2:2f:9a:d4:18:
03:75:c5:49:1e:6f:8b:60:28:15:7e:cc:1f:00:35:
0d:e0:53:3b:88:ec:1d:98:4c:62:41:b2:fb:b1:f6:
5c:5c:9c:63:a7:be:37:b4:04:c4:17:ff:fb:e6:9c:
c0:ca:e8:0d:b5:e1:8e:18:a3:50:4b:98:3b:5c:68:
a3:42:78:42:ce:18:ef:12:a0:d4:22:82:58:1b:2f:
66:10:4d:9a:14:53:32:f2:8d:2e:7d:b7:2c:8c:24:
7e:94:b7:2d:a5:d5:4d:41:b5:5e:42:35:42:f4:c0:
1f:65:32:44:94:9c:6f:fa:ea:6f:44:93:3e:39:7f:
84:dd:39:d2:25:e3:e0:58:f7:7e:64:7e:d4:b5:4f:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:86:B4:52:40:33:19:F7:32:D0:54:31:BC:A2:CD:5E:FA:2F:65
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:08:d6:6f:d9:2f:83:e6:ac:14:b4:a4:ba:52:ce:56:37:05:
0b:a9:07:8d:1a:b9:de:7b:5e:63:24:e9:91:92:6e:d1:a8:39:
d6:28:98:53:e9:16:d0:f6:ab:17:73:30:e3:43:e0:96:63:39:
e4:ee:9c:81:f4:7f:43:24:b2:21:51:f4:13:cb:f8:df:24:a0:
0a:f3:be:57:61:3c:38:1b:a9:90:bc:df:e6:fc:b1:17:43:ba:
31:91:7c:a3:97:4e:a0:ad:c1:0b:02:f1:89:eb:d4:1b:bd:c8:
6b:b2:52:99:c1:9f:ef:c5:bc:f8:59:3f:ea:5b:43:c4:93:65:
56:b0:63:39:8b:a9:df:98:cb:32:ac:52:e9:58:dd:10:0b:d1:
2d:1a:60:3c:76:b5:06:51:8b:fa:28:e1:0e:86:07:f6:b1:fa:
12:86:a2:cc:4a:38:9c:fe:3a:d5:a7:3b:01:61:bf:e4:8c:e3:
a9:a4:58:58:06:42:07:ab:68:1a:d5:c0:68:d5:15:75:93:64:
e1:2f:6e:20:19:c0:37:a9:b2:39:f4:8d:ce:0f:b5:c4:b6:49:
b3:5a:8e:89:4f:54:7b:26:77:a6:ba:e4:19:e3:d9:56:c0:d9:
f2:fe:dc:da:c5:dc:5f:1c:51:c0:a7:8c:c9:5d:46:2a:65:56:
b5:5c:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:05 2026 by rpki-client