Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: RSbhgzP1vdR3tTQICYOGevkC+ZaeeqEkudw/QC5v0Mo=
Subject key identifier: 27:63:47:6F:1D:B5:7C:E9:14:8D:96:90:43:46:20:56:42:54:01:E4
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 01A1DD5DA58C76FC8A48D44F1D4A556F43E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0DB8
Signing time: Sun 15 Nov 2026 04:01:04 +0000
Manifest this update: Sun 15 Nov 2026 04:01:04 +0000
Manifest next update: Mon 16 Nov 2026 04:01:04 +0000
Files and hashes: 1: 3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa (hash: rJHtn8lGExcQ1k9wE7wx+7iji7/5AXFn9zAwDRMm85s=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: DogqEApeOPndbuiZHa0vCt/WQwfd4R8KSmhOECeQ1YE=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:a5:8c:76:fc:8a:48:d4:4f:1d:4a:55:6f:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Nov 15 04:01:04 2026 GMT
Not After : Nov 16 04:01:04 2026 GMT
Subject: CN=2763476f1db57ce9148d969043462056425401e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:9d:1b:eb:54:0e:47:b6:b9:0e:11:bc:bb:
44:b2:24:48:da:ab:8f:f6:f4:b3:f0:c0:e2:45:88:
57:0f:91:43:92:5f:8a:5f:d6:71:e1:ce:7c:ea:8c:
50:94:b2:57:eb:a4:d0:f1:fc:de:97:45:06:e0:1d:
22:ee:65:62:67:a6:34:5f:da:16:9a:3f:87:01:97:
2f:fb:8a:54:67:f6:2a:16:93:64:50:08:84:9f:25:
9c:cb:cb:ae:15:6c:94:06:bf:12:99:87:9e:44:d7:
44:60:d2:37:6d:10:1a:bf:39:d9:56:a7:8b:29:84:
b7:33:1e:3d:d7:44:c6:4d:9d:ec:3c:65:88:85:47:
32:d3:62:a7:ec:dd:1f:7c:65:25:a6:72:fe:44:29:
77:34:2d:a6:a8:91:a0:5f:a0:89:a5:e9:f9:5d:2e:
7e:44:59:d4:7f:0a:7c:60:11:df:f3:30:04:8f:84:
d0:d0:f7:42:27:af:b7:21:b3:37:4e:73:e5:0a:da:
42:7e:a3:58:a7:8e:49:5d:09:7a:38:62:ae:c0:aa:
20:da:c6:84:0e:e2:22:8d:78:2b:b6:2f:a9:0d:5a:
a0:41:58:27:f4:73:27:53:05:b3:28:1f:fe:c9:b5:
23:4c:7d:70:45:6f:8a:b7:3d:6a:c0:58:70:0e:f3:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:47:6F:1D:B5:7C:E9:14:8D:96:90:43:46:20:56:42:54:01:E4
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:64:b9:5f:21:af:e1:6d:0b:eb:b4:9f:f1:34:0c:c3:c0:eb:
bf:66:b2:c2:1d:3a:76:98:ab:89:2e:87:f8:3c:38:89:e1:c9:
9d:94:09:71:14:ca:95:67:0d:28:34:10:2e:8f:85:10:93:fc:
2c:c5:29:8b:0a:b7:9d:11:e0:5c:61:e3:29:7e:b5:1f:5f:48:
90:59:7a:cf:2b:8b:32:14:0f:0c:72:2d:21:65:5d:1f:85:9a:
fc:3d:d5:92:60:4e:52:03:91:7b:7d:7f:5f:69:c0:5a:21:5b:
16:2f:68:d3:1b:70:8e:d7:93:98:c2:49:67:4d:36:5a:b6:4a:
33:7d:41:e5:20:da:e9:45:fe:ed:ad:0e:eb:43:63:be:7b:49:
d7:df:9e:5d:59:58:d8:c2:bf:6e:25:0c:db:ae:81:87:1e:f5:
e9:88:e4:36:1e:71:18:ba:5b:c2:f8:ef:35:d5:cf:d0:d2:70:
4f:6d:3f:98:0c:76:c0:f0:1e:46:aa:9b:63:29:54:5b:26:b4:
45:c1:59:bf:51:95:64:cf:c6:ff:83:b9:3a:f4:a6:ac:02:67:
e8:9a:0c:7b:87:20:ac:bf:0c:4d:67:0e:81:7e:c7:7a:28:a8:
5a:9f:c2:ea:c5:ca:92:90:6d:fc:57:5a:32:fb:fa:00:9e:4d:
14:57:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:59 2026 by rpki-client