Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: Q0UYO4iSiw1qGjGDdW4k5a7691rEYx8/bKkPBpkLGGc=
Subject key identifier: 6C:6B:ED:20:4B:89:1C:88:FA:8A:04:80:93:61:7E:B6:9E:4D:EA:85
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01A0E286F951F4BB8A704051190AAAD76363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 169C
Signing time: Sun 27 Sep 2026 11:01:31 +0000
Manifest this update: Sun 27 Sep 2026 11:01:31 +0000
Manifest next update: Mon 28 Sep 2026 11:01:31 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: IzhaPFBDo8S7KhizW/aXTRFx7Ob8KSQXWK3dG1SiNFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:f9:51:f4:bb:8a:70:40:51:19:0a:aa:d7:63:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Sep 27 11:01:31 2026 GMT
Not After : Sep 28 11:01:31 2026 GMT
Subject: CN=6c6bed204b891c88fa8a048093617eb69e4dea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2e:2c:b5:fe:c7:d3:3a:f7:7c:fd:63:cd:e6:
ec:bf:38:73:94:0b:32:8d:13:af:1c:f8:b2:da:b8:
c2:21:74:04:64:53:5e:aa:2f:24:9d:46:69:3c:9b:
99:b1:c7:59:a6:94:e8:b4:9f:d9:e3:2c:9a:89:05:
68:b3:7d:a4:d1:74:97:a0:f3:3a:62:48:f5:b4:83:
9f:3d:00:04:3c:5a:03:2a:81:54:84:a6:9d:18:66:
ad:79:5c:b8:ce:6a:f3:e7:dc:3b:32:1b:90:91:9d:
3a:4c:db:fe:3d:0f:83:c5:42:2a:e1:60:b9:9d:9f:
b7:62:60:f8:a8:0c:06:e1:3e:bc:87:30:27:2a:e5:
4a:c3:d2:c7:fc:8b:9b:9d:80:53:a8:41:ab:e1:c2:
13:37:ae:bd:94:9a:20:e0:fb:da:a6:82:07:a4:49:
88:1e:52:ee:91:10:77:82:61:d4:f3:8e:b1:94:d7:
dd:a6:1f:55:97:a7:63:87:f6:15:33:89:81:ab:65:
a9:34:3e:80:64:60:c2:ef:c0:48:34:47:81:41:ce:
6d:b1:b1:a7:15:47:57:be:e8:49:80:3b:b1:22:b4:
8a:11:73:d4:cf:fb:6c:10:6f:5d:93:29:3c:1a:d6:
86:f1:e2:1b:0e:e0:d2:dc:dc:d2:a7:44:94:f3:bb:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:ED:20:4B:89:1C:88:FA:8A:04:80:93:61:7E:B6:9E:4D:EA:85
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:31:8c:82:7b:b4:ba:c5:d1:62:57:a8:b8:b9:61:e0:4c:8e:
0b:c3:01:87:39:15:78:ed:29:21:2c:07:f3:c2:06:18:96:6d:
7a:92:ba:cc:a2:37:8c:a3:e3:84:b1:eb:90:60:7a:e7:29:cf:
ab:93:bc:fb:f3:ce:8d:13:7a:6c:a7:9c:96:2e:a9:17:1d:36:
bc:fc:ed:80:00:87:2b:b8:4b:b5:1b:f6:ad:88:96:e4:a8:60:
cb:0b:5b:00:e1:cb:29:83:30:27:b7:b8:43:65:7b:43:db:4b:
8f:66:c5:7d:5f:e7:4f:fd:94:52:b8:bb:73:86:ad:34:e1:da:
87:86:81:31:3f:db:9d:15:7d:69:24:42:84:97:76:06:f7:3a:
f6:39:fb:a1:74:09:72:77:d2:f1:31:f0:60:0d:5f:c7:45:4a:
54:f9:95:51:22:01:09:72:5a:b7:03:9f:23:18:a5:9d:5b:0f:
d8:3e:e8:ec:9d:af:4d:e2:b0:85:3d:6f:bb:c2:19:50:98:65:
70:d7:f2:e5:1a:78:2d:33:ca:84:7c:57:4e:23:51:dd:cc:91:
80:d7:8f:af:79:e6:5e:ea:28:6a:3a:f9:5d:05:a4:d7:22:4f:
57:c0:88:02:9e:b2:d6:51:1d:be:c0:4b:46:8d:7c:3b:8b:6b:
7e:70:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:21:10 2026 by rpki-client