Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: IXw36tMvuTSrobfvToFRb7afBS+IXJFFjJNnQQjFjyc=
Subject key identifier: 56:B7:CB:C5:B5:05:58:2B:B1:CE:A4:87:7B:13:26:B1:50:ED:B6:C7
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 019D39415E6968B6A409FBD5011E115BCC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 097A
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
2: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (hash: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00=)
3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: cLjYHQMpWbQjrmkQ1k4G2niZU3HEmeJfCmxrUMOXHXM=)
4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5e:69:68:b6:a4:09:fb:d5:01:1e:11:5b:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=56b7cbc5b505582bb1cea4877b1326b150edb6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:f8:d3:e3:fd:56:27:3e:02:fc:dd:e7:e2:
87:f6:74:db:30:7c:89:46:b8:57:63:97:0b:9f:86:
54:e4:48:84:ff:8a:f2:97:88:c7:09:1d:9e:f1:29:
74:16:ee:ab:e9:06:0f:a9:6c:91:fb:7d:e9:61:28:
ef:5c:8d:2e:d4:e1:84:84:e7:d7:a7:08:d6:13:51:
d8:68:34:ff:9e:5c:4c:04:63:af:44:98:3a:98:1c:
29:08:e7:74:a0:ac:13:5e:45:8e:f8:23:ec:04:6c:
3b:2f:de:f5:b7:87:61:34:6f:97:54:8c:0e:7e:0c:
d8:d2:5b:0f:df:26:7e:88:e8:9d:c0:75:c8:ba:58:
8f:0f:31:ad:25:f3:9b:1a:58:3a:05:76:ea:0f:1d:
64:bc:94:80:54:80:85:e6:83:01:42:62:26:0f:3f:
1a:40:01:98:67:a1:62:d4:3a:70:a8:23:db:f6:18:
02:81:49:b2:7e:f8:22:33:05:fb:85:05:f5:34:00:
40:0e:a9:65:c5:1f:01:c7:71:c9:27:75:90:3e:91:
67:b2:bc:8a:fa:72:e9:40:a8:68:a4:f6:79:d0:36:
ca:d9:25:93:b3:c5:d7:72:7e:c1:8b:41:dc:c3:a9:
53:44:c0:5a:ad:09:bb:68:84:0f:c4:b6:83:da:9f:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:CB:C5:B5:05:58:2B:B1:CE:A4:87:7B:13:26:B1:50:ED:B6:C7
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:74:8c:bb:44:a4:dc:cd:27:13:c2:6c:96:ee:a5:01:ff:
47:4c:fc:b2:ca:06:72:4f:fa:a2:47:40:80:37:3b:82:77:fd:
af:71:07:f2:63:e5:04:77:3b:e1:fd:4f:e3:17:89:a3:8b:fd:
0d:3d:1b:a0:c9:52:69:0c:be:ae:31:fd:8f:26:98:85:28:ca:
40:1e:fa:da:8a:6a:c7:5f:29:b8:06:40:85:8e:ec:95:66:a5:
8b:bf:32:9a:4c:44:66:21:bd:a3:c1:19:18:f1:66:0e:3c:4a:
7b:97:b7:c9:6a:be:47:85:28:14:e9:49:7f:59:21:9f:66:21:
37:02:55:df:6a:98:91:49:e6:ee:a8:3b:0f:02:bb:9f:c2:fc:
5e:29:42:13:1d:6b:ec:9c:5f:3f:49:79:54:10:27:17:11:9f:
35:ac:eb:93:1a:83:a1:50:4f:54:13:f2:8f:fc:d7:6b:87:f0:
9e:15:f0:78:f3:bc:1e:24:fa:40:f3:0e:8c:aa:1d:11:c3:c8:
47:1a:28:09:d9:4c:51:34:33:3c:61:d6:4d:c0:c0:46:d5:55:
ea:75:2b:fe:c1:c5:dd:0a:b7:a3:38:41:af:cd:91:42:06:d0:
c2:0c:2e:2d:41:8b:08:6d:8d:29:60:4c:c6:f4:4d:0c:34:b8:
66:b4:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:26 2026 by rpki-client