Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: vExSdwrIH1kKM/bCd/x8oYR4peALjfeeATuYHmo4zks=
Subject key identifier: 98:4D:3D:5C:1C:19:E9:F8:D6:A5:CC:AB:56:E3:EE:8A:A1:27:DF:09
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019E1E6C78BD7B22D75EC725B530A3907202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0BC7
Signing time: Tue 12 May 2026 23:01:25 +0000
Manifest this update: Tue 12 May 2026 23:01:25 +0000
Manifest next update: Wed 13 May 2026 23:01:25 +0000
Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 05m/LhXZW8I07ts7jac5400L1FtVGDt8z5qIozbr9k4=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:78:bd:7b:22:d7:5e:c7:25:b5:30:a3:90:72:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: May 12 23:01:25 2026 GMT
Not After : May 13 23:01:25 2026 GMT
Subject: CN=984d3d5c1c19e9f8d6a5ccab56e3ee8aa127df09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:f2:c4:18:33:45:02:09:48:6e:5e:90:7a:
c7:5c:d1:7b:e2:0b:c3:56:47:d3:55:b4:19:80:4e:
dd:47:96:50:72:e3:44:0c:68:6d:7c:cf:12:22:dc:
0e:22:a5:4b:ee:c4:6c:b7:df:a0:4c:b6:0d:39:11:
2a:6c:eb:3b:e3:8c:cc:59:d9:31:42:a0:35:4f:bc:
d6:58:a3:30:cd:22:43:4f:f5:67:92:27:db:d5:77:
0f:37:47:26:0d:e1:f0:38:fe:7d:07:32:ab:a3:35:
44:2e:e2:cf:bb:f9:cc:cf:1f:a1:a4:77:52:ec:0e:
e6:b3:1a:72:10:de:78:3f:4f:0e:ad:00:5f:66:72:
8e:d1:10:62:f5:3d:c8:42:71:ea:4b:ce:04:df:2a:
d7:1b:49:88:bc:2e:e6:af:76:43:02:70:06:ca:b6:
b0:7f:da:c4:7f:4b:c4:56:9c:6e:9c:de:8d:4d:7b:
fd:26:8c:9e:30:b5:d6:0a:a5:5f:f3:41:25:f1:ab:
15:13:49:07:8e:4c:0f:fe:24:d0:d2:05:25:db:a8:
9a:7a:8c:4b:10:f5:92:e2:4a:7d:3a:39:6f:4e:eb:
2d:9c:56:e7:96:92:ad:2b:b8:d5:3d:0c:84:1b:9e:
4d:a5:68:13:51:02:9b:1c:95:04:94:22:58:5a:3b:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:3D:5C:1C:19:E9:F8:D6:A5:CC:AB:56:E3:EE:8A:A1:27:DF:09
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d7:fb:7a:41:7c:c3:da:a1:1e:42:fb:96:1b:ac:3f:44:3a:
23:4a:3c:6d:b2:3c:f7:53:c2:1d:b5:c2:71:1b:a6:c2:49:df:
57:6c:9f:41:95:dc:a9:fc:2f:7f:29:98:9e:3f:83:54:bd:f8:
dc:7c:ca:d7:7a:e1:f5:17:65:2e:93:50:b3:9d:f9:00:0d:e0:
11:61:dc:f2:c9:d6:b1:88:aa:54:b3:4a:0e:85:31:08:f3:29:
4e:b0:5e:08:75:74:3c:e2:0a:39:43:eb:0a:48:12:3c:08:ff:
8b:74:74:2c:fa:0a:1a:26:34:e8:4b:d1:4a:55:1b:a7:e3:59:
12:73:64:b8:8b:65:4c:a4:76:f6:d1:13:d8:8f:9b:73:c6:99:
95:60:10:3f:ef:94:89:97:25:b0:c8:b9:c1:9f:ba:a0:96:3a:
62:8e:03:0a:f6:32:eb:41:03:4e:03:10:00:a5:d0:6e:23:d3:
0b:e2:b1:ac:7e:18:42:7a:27:6b:ae:b1:ff:da:97:95:16:ea:
64:d9:17:be:fe:9e:09:1a:9d:82:19:17:81:52:1b:45:13:93:
16:9c:3b:dd:43:85:58:a7:06:d4:3e:97:e6:9d:ec:33:ff:d6:
be:5c:ff:de:3c:8d:66:4e:9f:c2:d2:ad:c5:55:b4:62:45:4e:
61:68:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:01 2026 by rpki-client