
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: keRP62xV5f78Vq8jtPMKhWVDHhrRCgDiMGE893XfudA=
Subject key identifier: 85:DC:A4:C8:4E:AF:1F:E8:70:DA:0E:81:3C:77:40:1D:7F:93:FC:F6
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 019E307277C20C871C95A757E6A7ADAE59D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 09FA
Signing time: Sat 16 May 2026 11:01:08 +0000
Manifest this update: Sat 16 May 2026 11:01:08 +0000
Manifest next update: Sun 17 May 2026 11:01:08 +0000
Files and hashes: 1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
2: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (hash: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00=)
3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: b1F8LnF026eo3vaxjLJ2Uv9gHaigbcIYoQeA2g+pCDo=)
4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:77:c2:0c:87:1c:95:a7:57:e6:a7:ad:ae:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: May 16 11:01:08 2026 GMT
Not After : May 17 11:01:08 2026 GMT
Subject: CN=85dca4c84eaf1fe870da0e813c77401d7f93fcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:17:16:4c:c7:40:3b:52:26:d6:54:29:3b:
0a:03:3a:6d:67:5a:21:fa:02:2a:ec:1e:dc:01:61:
6a:5d:e0:10:b7:29:1b:56:d8:77:95:91:23:ef:a6:
d2:44:f9:91:54:f4:a0:ff:03:04:e4:06:af:93:f4:
ea:19:03:ab:ca:f4:5f:14:b1:cd:d7:6a:a7:cd:6b:
d6:cc:5a:54:7e:b6:54:4b:fe:df:c5:95:42:23:3a:
79:1d:cc:27:7c:44:cf:4e:cd:60:c8:8a:6e:b9:98:
15:c0:d4:c0:90:05:fa:94:f4:e3:5f:88:76:88:33:
b5:f0:6e:bb:a6:07:ef:b0:95:94:d5:1e:35:6a:fb:
e1:f3:46:0a:f6:b4:c3:28:de:78:2f:bc:cb:39:95:
38:18:9c:29:8e:dd:82:3c:10:f2:90:3c:1d:ce:d5:
be:70:1c:ce:1b:b1:fe:15:c3:df:6c:13:62:bf:b1:
0e:a0:cc:f3:9c:73:91:95:a3:b7:3f:4f:c3:90:96:
2f:6f:e8:ac:1a:45:28:de:ef:8f:a1:2d:eb:8e:3b:
71:36:41:ad:36:1b:05:c2:a0:58:a7:04:bd:f8:8a:
4e:6c:d1:a7:82:a6:1d:72:81:92:79:3d:c2:90:02:
8c:6d:59:85:54:08:29:b5:7a:b0:54:ee:09:5c:d2:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:A4:C8:4E:AF:1F:E8:70:DA:0E:81:3C:77:40:1D:7F:93:FC:F6
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c3:8c:f7:32:6d:40:64:dd:d1:30:0c:fd:90:e5:3f:7f:76:
23:4f:06:81:1b:4e:09:aa:c2:a5:89:8d:fb:09:a6:eb:cc:68:
22:01:b7:a1:35:f9:56:e3:33:6e:74:3d:38:f4:86:cc:ca:fc:
79:bd:03:41:34:af:8c:5d:df:bb:2f:43:f5:46:ec:f9:66:d5:
aa:55:0f:c8:5f:52:b5:e7:5b:1f:ef:3f:d2:81:c5:74:b4:52:
7f:a6:a9:6b:37:8c:2c:fd:f0:14:06:ce:e1:84:0e:63:1f:ff:
e5:72:23:2a:8f:b0:65:53:b0:f5:17:5a:73:58:b5:29:b8:92:
d9:99:54:cc:cb:c6:e8:e0:f7:a8:bf:5f:69:46:1a:96:23:37:
97:1d:b3:09:83:c5:cc:a3:31:96:aa:14:dd:d3:61:a9:cd:50:
30:f4:fe:03:d9:72:29:7e:95:dc:f0:7b:8b:a7:ef:41:5a:61:
8c:50:27:8e:57:53:74:98:cb:6f:0b:ec:53:98:77:ba:a3:71:
6e:82:3d:5a:ba:11:58:cb:76:41:4a:74:27:18:6f:4e:b2:d1:
5f:ad:29:ae:81:12:90:95:63:a2:1b:f6:fc:a8:75:6b:e9:7d:
1f:1b:e1:cd:d2:64:99:9b:0b:a6:78:91:26:34:c3:ad:3e:fa:
d0:7a:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:32 2026 by rpki-client