Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: zV4b4ZnpBPRDYi+LJeSudNNrUIGv2untyQitqcDtsyc=
Subject key identifier: 85:53:E0:E8:C3:B1:D2:43:A0:9C:55:76:11:52:55:21:2B:D3:4A:9D
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01A0DACD7AA4F1A8879A18E2A49C57A23817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1698
Signing time: Fri 25 Sep 2026 23:01:34 +0000
Manifest this update: Fri 25 Sep 2026 23:01:34 +0000
Manifest next update: Sat 26 Sep 2026 23:01:34 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: ixOo5e5H5ofE0xcHJARsHM6Tv3JmII2y6wrqI5A9NCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:7a:a4:f1:a8:87:9a:18:e2:a4:9c:57:a2:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Sep 25 23:01:34 2026 GMT
Not After : Sep 26 23:01:34 2026 GMT
Subject: CN=8553e0e8c3b1d243a09c5576115255212bd34a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:ff:ac:5d:1e:b1:e5:ef:11:ee:04:99:6d:
f3:4f:e5:12:52:2b:fc:06:8c:ec:db:0b:eb:9a:73:
71:89:bc:6d:3c:bb:b6:0b:12:c3:ca:e4:fd:4a:5a:
f7:9b:e0:e4:83:01:12:d1:25:32:33:ba:2c:bf:aa:
8a:9d:77:5b:4c:00:f2:78:81:ce:c1:7b:82:7a:c5:
15:a4:aa:6e:4a:44:30:72:c7:ba:06:90:b0:a6:d4:
ae:f1:3a:72:0d:37:ae:b0:42:25:ab:6c:44:d8:98:
28:39:5f:f4:76:e7:52:1f:b4:f1:3e:7b:79:6a:e4:
b4:b3:d3:23:ea:6b:0d:9a:27:67:a4:a1:15:bb:22:
c4:96:14:7c:b6:0f:05:7f:bc:06:c0:45:43:bb:fe:
da:38:70:91:91:37:85:67:2f:45:e5:c1:6d:de:eb:
6a:2d:48:80:3d:d5:60:02:58:5c:5a:17:86:7d:78:
a0:94:07:f5:83:fb:78:5f:f2:ab:19:ea:8a:97:35:
8b:28:c7:e6:ce:04:6a:37:c6:75:01:c5:04:a8:29:
70:a7:c9:7f:e3:6f:6e:d0:d6:bc:81:f0:54:63:4e:
82:46:0a:a3:0f:5d:9c:d3:a9:fd:63:e3:4f:6c:4f:
f0:8e:67:2e:84:d4:43:22:a3:fc:77:70:44:7c:0a:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:E0:E8:C3:B1:D2:43:A0:9C:55:76:11:52:55:21:2B:D3:4A:9D
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:b2:66:f1:22:9a:73:62:19:5f:8a:3f:d5:ee:63:3c:e7:
27:5d:a1:0a:74:df:1d:80:ac:85:69:3f:d5:eb:17:6a:31:20:
70:19:0f:1d:31:c5:1d:eb:0a:89:b8:0d:e4:6e:3a:77:2d:ae:
d9:8e:f0:ba:25:8a:50:68:f7:4c:dc:1d:c8:65:eb:51:8c:7c:
6d:ce:e4:9d:da:77:1d:05:00:de:84:f2:31:bc:92:de:a6:42:
1d:ce:4c:52:6a:52:27:0f:7c:1f:03:31:ce:24:b3:0f:cb:cf:
b4:3a:d1:a3:fe:f6:b9:66:52:e7:9a:33:b7:04:84:8d:8c:e4:
51:64:54:31:f0:33:85:25:f3:59:ea:af:ae:ea:22:ef:ea:3b:
60:e1:1d:1f:dc:02:49:ac:41:bf:27:9b:ed:71:55:00:b4:05:
a3:7d:f4:6d:06:7e:28:60:5d:70:b3:93:95:a9:1f:f2:b9:2c:
9d:d4:78:9b:be:2e:df:ac:4e:f3:73:2d:3e:95:b5:8d:47:7a:
a6:65:02:27:2f:38:59:07:95:1f:b7:cf:9d:7f:62:3b:b2:cf:
a9:55:ca:15:33:1b:c4:6f:79:a3:a0:99:27:64:58:a1:93:e2:
71:6d:d9:55:35:8f:98:9e:2b:ca:09:31:c0:58:99:3b:12:d5:
da:cb:ac:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:02:46 2026 by rpki-client