Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: ofgclLlz8RA0m7zufgx931rJAcMdgGvCwV8xb+rbWA0=
Subject key identifier: 41:18:26:88:C3:2D:37:29:7C:8D:DB:24:74:72:71:F4:98:1D:2C:D7
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019D3977DC5594EB81AED3328255F6D639AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 17E2
Signing time: Sun 29 Mar 2026 12:00:49 +0000
Manifest this update: Sun 29 Mar 2026 12:00:49 +0000
Manifest next update: Mon 30 Mar 2026 12:00:49 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: GMUyCcHKmuVMOz0iQZUKD31kVj3rfED7aKg5O7hOJ7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:dc:55:94:eb:81:ae:d3:32:82:55:f6:d6:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Mar 29 12:00:49 2026 GMT
Not After : Mar 30 12:00:49 2026 GMT
Subject: CN=41182688c32d37297c8ddb24747271f4981d2cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:5e:d8:64:fc:a1:b7:9e:d7:06:f4:b5:19:
35:c0:8e:e9:07:0d:33:9c:ac:38:55:03:0c:ea:06:
77:31:e6:ae:17:d9:fd:8e:43:b8:2a:ee:7d:e0:74:
4a:e4:cc:60:7a:c1:9b:cf:c1:df:f1:70:3f:d7:94:
d8:10:83:36:8d:2a:8c:f8:80:31:e1:d8:60:a4:7f:
22:61:e2:9c:32:4c:eb:22:06:91:3b:ee:cc:a2:3c:
5b:22:85:6a:f6:73:41:c4:e1:06:00:c6:f9:fe:62:
d9:7e:65:7a:ee:20:e1:51:10:e4:56:2f:7d:b9:29:
72:17:96:57:bb:a5:49:eb:01:63:dc:b2:d2:c8:b5:
bb:78:bf:8a:3a:36:7b:40:5a:59:aa:b0:f9:dc:80:
15:4b:29:34:b8:09:e4:48:53:77:89:d8:57:1d:33:
9c:19:f6:1c:8a:2a:49:24:ac:52:4d:d4:bd:80:89:
36:ee:56:ab:8c:28:86:ea:7d:1d:40:45:7a:d6:e5:
9c:d8:fd:d2:20:9c:85:9a:59:ea:e2:ce:fa:f5:f0:
90:e3:6f:4f:c1:0f:fa:1e:49:a8:40:a1:1d:8c:72:
1d:49:f9:b0:b1:71:fb:23:b4:90:83:e6:28:d6:8d:
35:4c:db:42:0e:0a:63:ec:03:e2:c5:8a:88:6f:9f:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:26:88:C3:2D:37:29:7C:8D:DB:24:74:72:71:F4:98:1D:2C:D7
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:c9:76:80:4f:f5:0b:8b:68:53:44:da:5a:71:f6:24:f9:
c5:92:98:1d:15:21:ea:82:d3:f4:82:e9:a9:a9:dd:0a:37:57:
51:21:c7:97:00:06:55:1d:24:0f:ec:27:15:bd:d7:73:7d:bf:
b5:23:73:4d:c8:70:61:e3:f8:53:1a:38:6e:42:f8:67:47:54:
8f:18:7e:bf:d8:13:28:97:79:01:3d:d1:ca:72:53:6e:2c:b4:
4a:bb:43:e9:dc:3a:42:c1:14:9c:b1:89:94:40:e3:cc:b7:66:
6e:ab:cc:a2:b2:b0:e8:e3:e3:90:06:6f:97:70:bb:39:75:fa:
ae:40:04:0e:72:26:ea:98:29:c0:c4:d4:ff:2d:df:a9:fe:f9:
c7:67:39:59:3f:9f:bb:ea:6a:d7:e2:8c:fe:cb:7b:dd:ab:0e:
ad:d3:88:c6:e0:91:e2:b2:4b:35:08:e2:7d:8d:7b:b0:9e:74:
cc:5f:1c:89:38:f4:ce:2e:a8:8a:cf:85:0b:90:06:6f:74:36:
28:71:f7:d8:b5:33:e4:fd:43:62:20:f8:6e:93:70:5e:40:0a:
2e:49:e5:2c:42:8e:d1:7d:29:f1:ba:e2:5b:5a:d5:88:ab:47:
b7:4e:3d:d0:77:92:56:30:7d:13:cd:c6:4a:63:75:38:cd:63:
ec:c8:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:22 2026 by rpki-client