Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: J26z7X7bExMyfEjWGp8xYT9rvhyi0xVSvaEBhwj736o=
Subject key identifier: C4:40:46:E4:0E:ED:5A:B6:68:10:73:AF:2F:1D:EF:BE:27:E9:CB:F6
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019D26964A3DFC4B2681F874178B2E13C44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 14AD
Signing time: Wed 25 Mar 2026 20:01:16 +0000
Manifest this update: Wed 25 Mar 2026 20:01:16 +0000
Manifest next update: Thu 26 Mar 2026 20:01:16 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: HU3fnVemi/05ZS/jVDVOazYudGBci1Fnet/b8Tu5pYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4a:3d:fc:4b:26:81:f8:74:17:8b:2e:13:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Mar 25 20:01:16 2026 GMT
Not After : Mar 26 20:01:16 2026 GMT
Subject: CN=c44046e40eed5ab6681073af2f1defbe27e9cbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:b6:2d:69:89:55:c1:0e:ad:c9:71:26:ac:
18:e4:22:80:59:1c:6d:d9:0e:85:50:39:c3:6a:93:
f1:16:27:57:10:d1:8e:15:b6:27:2e:df:b3:f3:a0:
5e:63:43:f6:a1:b3:55:91:92:23:52:24:de:4c:bd:
45:8f:ee:ed:dd:20:1a:c8:9b:f3:29:21:e2:ee:c0:
fa:00:7d:dc:ca:25:ca:73:50:51:51:31:7f:49:17:
b3:4f:01:97:a0:73:85:a7:4b:63:87:69:4f:12:63:
5f:ff:45:46:08:32:bf:47:1e:c2:c6:c0:0e:51:ec:
13:10:3a:8b:76:0c:98:3c:97:f2:b8:b8:bb:56:da:
50:03:89:76:9c:70:19:7d:ef:b2:8d:f9:4c:ef:45:
90:08:89:f5:b5:b9:5a:61:0d:45:5b:84:2c:df:2f:
e7:29:e0:71:99:77:f4:58:21:0e:85:04:f3:4a:89:
cc:f0:01:ec:dd:72:b0:59:d5:07:18:8c:0e:d3:9c:
be:54:73:a6:27:ce:1b:cc:5a:64:6c:74:c9:e7:fe:
b5:97:db:23:2a:86:2c:14:31:8d:d1:c4:44:ac:24:
d2:9b:60:26:2d:e4:29:a9:3d:9f:8d:ec:43:f8:7d:
ac:c9:51:f2:2a:51:66:5e:a0:e1:8b:f5:76:77:16:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:46:E4:0E:ED:5A:B6:68:10:73:AF:2F:1D:EF:BE:27:E9:CB:F6
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:74:02:be:52:c9:96:c3:76:d9:e9:a2:08:85:4b:58:e5:8d:
77:ac:58:59:b2:f7:b8:e8:dd:d8:ec:c8:57:e8:a2:92:d4:5f:
c1:8f:d7:81:e4:03:43:8c:24:31:36:e3:6b:24:b3:0b:99:af:
e2:c0:b3:eb:03:58:54:58:90:44:27:39:36:e2:42:15:bf:0d:
1c:ed:fe:c2:db:1b:f3:54:51:2c:42:13:f8:02:78:03:12:8a:
7d:e7:7d:d4:56:7a:14:3c:de:3a:27:dc:45:4d:41:f0:2f:71:
e2:fd:06:63:54:1e:1f:c8:e8:ab:fe:90:be:23:87:1a:2d:dd:
74:1b:bd:e5:5a:40:fd:dd:af:78:92:33:f9:5c:39:53:f5:17:
2d:2e:65:fd:3f:30:7f:53:66:19:37:9c:b8:4f:53:59:a1:aa:
ed:37:4d:3a:80:b8:21:2e:e5:ce:ca:4d:45:05:1e:72:b8:50:
12:f7:3b:5e:83:8d:ae:44:ca:51:b9:10:95:8f:a7:10:39:95:
29:ed:8a:b0:f5:b7:f4:11:58:9c:59:42:8b:fc:71:d1:17:d8:
6c:33:b4:99:39:2b:28:b3:ee:93:6f:5d:06:67:a5:95:19:69:
bb:64:06:30:82:f6:37:a6:5b:25:57:0c:56:bf:a2:73:44:37:
8e:8b:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:07 2026 by rpki-client