Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier: t1bt2tCXKQRRaWdoGssP+avrv8z/yXThCNpJIrEgxdc=
Subject key identifier: 6A:16:B5:61:FC:9A:63:39:A2:0C:F7:CF:C4:0A:AB:79:D3:DD:BB:13
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 019D382DEBE9D8D4FD603B3EBEEBCE89C43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number: 0F61
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: JYjW-QeIcYRWKin5Cm85fHuAnLg.roa (hash: wT0Z0IE6rXGq31xtB0HPl9NnDaewEv+R19XnkN3Ujm8=)
2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: OV4mS7n4QEw24fA0c9PAWgTYXYnIqT3u0DYg8Ru6afI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:eb:e9:d8:d4:fd:60:3b:3e:be:eb:ce:89:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=6a16b561fc9a6339a20cf7cfc40aab79d3ddbb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:02:91:f7:18:22:b5:b4:94:01:f7:a7:d4:
60:55:d5:db:65:e6:19:3c:38:bf:e5:38:3a:83:e0:
47:a1:ee:50:b8:eb:4a:84:e1:2f:77:f1:fe:9f:e8:
b8:7e:42:1d:a0:a5:5c:2a:d3:1d:57:88:31:ab:cd:
e6:c4:42:db:a2:76:06:67:ba:04:7d:e5:69:a9:25:
f4:2b:22:55:9c:8e:90:13:e8:bc:6b:31:b0:0e:c4:
0a:7d:a2:9f:a2:63:4e:c0:32:9e:85:1d:b1:e9:ce:
12:c0:a6:55:7c:e4:21:d2:98:3d:17:a1:cc:2a:30:
c3:c6:90:ad:0c:df:8a:c8:34:87:44:91:7e:4b:0b:
da:5c:bb:08:f5:c7:1e:ff:32:fe:d0:20:ee:19:a5:
8c:c8:df:99:d5:80:d4:57:f0:c2:bd:44:de:4e:3e:
da:51:dc:6e:7e:60:9d:25:7e:fe:9a:87:0f:05:f1:
26:50:f1:02:76:a4:f9:52:f5:54:22:ae:54:12:25:
0f:d5:8c:8a:f8:28:b9:22:d3:90:50:6a:c7:b8:3f:
c7:24:bc:72:4f:b5:01:99:a8:ef:df:c2:47:39:39:
71:d0:63:70:bc:da:f8:33:75:f1:34:1e:b0:2e:a0:
47:d4:be:35:f0:9b:d7:00:40:9a:60:7e:68:89:32:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:B5:61:FC:9A:63:39:A2:0C:F7:CF:C4:0A:AB:79:D3:DD:BB:13
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:4b:aa:69:5c:b3:71:80:6c:9e:7a:f0:1b:44:9b:c7:c6:
71:61:2c:82:32:e9:81:92:cb:e8:4b:6d:a6:16:ff:ba:39:d4:
17:e3:be:67:b8:7f:28:63:73:de:80:d2:b0:0d:17:8d:d5:02:
ee:71:cb:24:1d:fd:aa:1e:dc:92:62:24:88:b0:09:0a:83:de:
1c:4b:69:62:bc:19:74:51:b9:00:1f:70:5a:5b:b1:fe:a5:1f:
86:b2:fe:ed:ec:ed:8f:ee:56:06:2c:2a:bb:d2:62:67:72:5c:
70:13:b0:90:49:9b:4e:af:04:b7:0e:a4:b6:c0:1d:80:dd:fc:
74:bc:7a:ac:e9:36:f2:1e:18:64:8e:83:cd:28:f1:ae:75:ab:
92:ed:26:63:d7:3b:fe:82:9e:61:76:4c:c7:45:1b:52:97:e0:
53:78:20:11:82:85:50:a9:f3:08:3e:f0:86:fc:55:66:a8:d6:
b9:8b:92:83:da:87:06:b4:dc:fe:6a:d8:eb:50:55:ce:56:c5:
8c:4e:fc:e7:64:71:01:37:4f:62:21:5c:ad:53:a1:14:52:96:
cb:9f:23:7f:e6:34:5c:53:6b:d4:37:a7:84:85:15:56:d0:9d:
81:92:91:37:41:e2:6c:a1:d1:45:20:7e:40:13:f4:7e:b9:05:
d9:5a:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:20 2026 by rpki-client