Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: k6BCWpWNz/LRVETdUlQBj9psYd1RCO03oRn/TtVScUY=
Subject key identifier: FA:FD:1B:32:23:6A:74:53:B8:D7:07:DE:C0:6B:FE:09:1F:01:FA:17
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 019E1F10E848CE3F3413469597A815C2B0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 0DAF
Signing time: Wed 13 May 2026 02:01:02 +0000
Manifest this update: Wed 13 May 2026 02:01:02 +0000
Manifest next update: Thu 14 May 2026 02:01:02 +0000
Files and hashes: 1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: 4uKB13Qp4gf8nJVriSU0GqAuO6GqLHIVy5LWSx2ktBw=)
2: ybGK7D59nhsrV5zcx9pDpZj5zRw.roa (hash: lUVMObnC7ci77KqYjQKC6vaADGXMIPOZVK0KWxLUoCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:e8:48:ce:3f:34:13:46:95:97:a8:15:c2:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: May 13 02:01:02 2026 GMT
Not After : May 14 02:01:02 2026 GMT
Subject: CN=fafd1b32236a7453b8d707dec06bfe091f01fa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:65:d0:da:de:1e:46:57:97:d6:d2:ed:cd:
e4:d7:1c:e2:55:6b:8d:17:39:31:98:19:b1:60:44:
75:15:9a:35:2a:21:9e:6b:b8:16:b9:a3:12:e5:0f:
dd:7f:ac:fe:cf:aa:e8:9e:46:5f:3d:8f:be:09:89:
ab:90:77:1a:29:26:ad:e7:0f:24:cf:4c:9a:7e:4e:
dd:3f:83:46:a0:fb:ef:7f:24:84:e3:e1:db:73:f6:
2d:eb:3a:02:0d:0e:ed:54:8c:09:a4:70:4e:23:c7:
78:17:d9:cb:b0:a4:0c:20:1f:92:df:9d:c6:8c:b6:
87:b1:50:48:4a:58:68:b8:f8:6f:a6:e6:42:5b:d4:
84:ba:12:01:7f:8a:35:38:e6:15:0c:76:c5:e0:f6:
7c:60:c5:d2:8a:8e:1d:17:e0:d0:02:f0:8d:b3:6a:
1f:6d:17:a3:89:c3:7b:aa:d3:07:af:24:7b:9d:3c:
55:e0:90:93:db:4b:d0:99:8b:15:c7:d1:72:4a:29:
30:5b:60:bd:49:ce:5c:51:eb:5d:fc:33:5d:d7:1c:
b7:72:7e:2f:40:e4:48:4f:f1:0e:e7:71:13:87:f1:
a2:4b:bb:3d:5c:37:d3:c5:31:c0:66:6e:8b:35:31:
16:d8:5e:56:78:6a:a5:e7:4c:30:5d:9d:c5:91:b7:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:1B:32:23:6A:74:53:B8:D7:07:DE:C0:6B:FE:09:1F:01:FA:17
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:96:b2:44:f6:42:b0:ca:63:63:b0:6c:b0:26:f3:5b:c8:c8:
88:73:1f:7c:95:3f:ce:a9:3c:6f:0d:7b:27:58:62:e9:cc:4a:
bb:c1:50:c6:0c:fa:78:c5:54:a9:f6:10:1b:67:ed:21:39:d0:
b0:4a:f3:71:b5:6c:b4:b1:f6:f1:10:38:db:e5:2e:bd:fc:e5:
7a:e9:47:8e:10:14:ad:a0:35:67:30:bd:03:dc:91:a8:49:45:
b0:a5:e1:ef:96:1e:80:c8:0c:6f:aa:db:e4:36:42:74:b0:86:
02:fc:85:cb:24:c2:9c:4a:3f:43:6b:cd:1d:bf:7a:2a:2a:b1:
e2:bf:fc:12:3a:74:53:74:b7:ee:ac:f2:53:19:a4:92:fc:a3:
d3:bc:f7:8d:17:be:a6:d7:de:4d:39:96:d6:9b:f0:64:51:c0:
84:da:20:09:f9:7d:e0:9c:24:53:94:11:c5:fd:2d:9d:63:54:
9b:23:a6:69:d2:3b:53:c2:ac:8a:22:dd:55:e8:57:44:c7:92:
ec:fa:c7:72:9c:70:87:51:cf:2b:2f:ed:24:eb:b0:ea:b7:7f:
6c:5b:3d:93:06:1f:31:4d:f4:77:cb:8d:05:e6:9c:fa:28:1d:
46:0c:9e:4f:ee:63:5b:22:da:04:83:ed:f7:b8:20:df:d6:38:
3d:a6:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:35 2026 by rpki-client