Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: 25GJDr2nztJUGECbMQ9Hfy39W1Dpj5zEB4emPVRBehA=
Subject key identifier: EA:BA:03:F4:2C:63:BE:FC:93:09:EB:34:AC:F3:26:11:19:3F:57:FE
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019E1DC723D2AC627128D2EEB79BC742B850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 152D
Signing time: Tue 12 May 2026 20:00:50 +0000
Manifest this update: Tue 12 May 2026 20:00:50 +0000
Manifest next update: Wed 13 May 2026 20:00:50 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: fwMiUnBWiyyTACGXUf5JE/j7iOMTLbmLBfPUJXHppFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:23:d2:ac:62:71:28:d2:ee:b7:9b:c7:42:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: May 12 20:00:50 2026 GMT
Not After : May 13 20:00:50 2026 GMT
Subject: CN=eaba03f42c63befc9309eb34acf32611193f57fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:10:3e:e2:6f:b3:1b:21:b9:12:04:57:40:
10:16:7a:17:14:cc:07:c9:10:a8:ed:eb:9f:f8:84:
07:42:60:b1:04:90:21:d9:f8:56:82:59:d8:6d:77:
2a:6e:f7:78:f6:9d:ce:78:41:5f:c6:f3:42:f1:33:
fa:c5:84:a3:45:98:eb:e3:66:ae:a6:91:dc:3c:55:
64:58:95:0d:f1:57:bb:cd:aa:c5:b1:c2:d5:02:8a:
1b:43:88:05:cd:3d:03:a2:94:9e:c6:b8:fc:30:22:
28:30:84:17:36:91:55:7c:e8:7e:3e:08:87:50:7b:
7f:aa:d8:2b:f3:bd:0d:51:45:b4:15:43:a7:28:96:
57:91:63:3a:af:0d:0c:8e:08:c8:4e:d6:91:9a:5e:
f4:05:f8:be:66:98:49:e9:1d:20:71:b0:9d:a1:62:
99:e8:fc:6f:7d:c5:e4:1c:96:c3:f2:4c:c2:51:17:
0a:e5:80:67:c5:77:09:f7:dc:ca:35:b4:5f:d2:3d:
2f:cd:12:a0:f6:7c:f3:0d:10:5b:9b:23:db:5d:d4:
12:62:2b:db:95:76:b6:a4:6e:3d:ab:59:47:3e:38:
68:46:0d:36:58:c5:d8:08:da:17:94:07:45:97:95:
e9:17:81:0e:0f:81:73:58:f7:e1:59:16:d3:22:13:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:03:F4:2C:63:BE:FC:93:09:EB:34:AC:F3:26:11:19:3F:57:FE
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:b5:d9:f8:cb:3d:6f:3b:92:68:ab:45:22:f8:ec:e0:7f:
44:34:2d:ac:a1:d5:6a:65:f7:26:1a:2e:f1:f8:2b:51:17:31:
51:0a:73:40:4d:b3:57:06:2e:cf:6e:38:5a:4d:e4:14:1b:e0:
17:a1:83:80:01:f3:1d:dd:1a:b0:2c:15:bc:ee:f2:5d:a5:d2:
64:5e:48:c3:a1:f7:61:5f:45:55:5f:1d:20:14:c0:6c:6e:82:
80:24:60:3e:83:e8:f9:cf:4b:4c:f9:82:d1:90:bb:40:28:cf:
2e:f6:7e:bc:2c:5f:43:3e:70:d8:64:bf:5d:34:18:6d:45:ac:
1a:1c:a8:99:28:da:d7:b8:70:73:e5:95:91:90:c7:e9:1b:ac:
13:e4:4f:dc:e3:db:68:c1:e4:a9:69:bb:79:2c:a8:6e:14:a4:
c2:33:2b:b7:c4:98:ff:4e:77:b9:6b:b3:7b:1f:99:1d:4c:da:
1e:94:ca:b8:87:17:df:ac:50:12:58:b3:5c:1f:4d:b5:b2:7c:
99:f4:c7:00:c0:f3:47:cd:43:ed:18:6e:8c:3c:08:1c:31:37:
55:26:ea:d6:d3:b0:07:3f:af:73:eb:d8:5b:2b:cf:bf:df:55:
98:67:a0:8f:5e:61:f4:df:dd:af:94:94:14:04:b7:06:0b:cf:
77:5f:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:32 2026 by rpki-client