Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: DFSaCc0EKRIfE3lop9dBLwBKWAJh0qqLHoilP2CzYjM=
Subject key identifier: 54:9E:DA:D0:DE:9C:A0:33:AB:3F:F0:10:A9:47:F0:8A:91:FB:E3:1E
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 01A0D0ED869B860615C26EBB95F69E1B5901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0D2D
Signing time: Thu 24 Sep 2026 01:00:22 +0000
Manifest this update: Thu 24 Sep 2026 01:00:22 +0000
Manifest next update: Fri 25 Sep 2026 01:00:22 +0000
Files and hashes: 1: 3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa (hash: rJHtn8lGExcQ1k9wE7wx+7iji7/5AXFn9zAwDRMm85s=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: msAwvK0AQVu1huO0m/YDyWWiSob1tjAQoIP29fKV2Rk=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:86:9b:86:06:15:c2:6e:bb:95:f6:9e:1b:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Sep 24 01:00:22 2026 GMT
Not After : Sep 25 01:00:22 2026 GMT
Subject: CN=549edad0de9ca033ab3ff010a947f08a91fbe31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:05:46:63:62:4a:6c:e0:f2:3d:ba:de:03:
76:20:d1:27:ce:13:54:8e:43:ff:ba:1c:6c:80:71:
ab:2d:0d:2c:3d:e3:fb:38:9e:b9:e2:20:78:2a:bf:
c2:dc:2d:e0:a5:7e:31:b2:77:b8:b0:f1:76:39:e7:
22:3a:25:f3:29:15:8b:a1:91:5e:ea:67:6c:9e:2f:
80:ef:be:29:37:03:7b:39:ce:06:0c:35:e2:f9:66:
7b:5d:aa:1e:89:30:3b:45:35:68:5c:6a:53:4c:fc:
45:5f:67:bd:64:e2:28:7b:b5:fa:a4:d9:d7:98:e3:
89:e4:a3:67:43:37:ac:f0:c4:83:f2:85:d6:02:26:
50:ee:d3:1e:42:c1:97:c8:40:b3:9f:cd:13:97:20:
04:d8:3d:72:be:2a:b5:1b:3e:25:10:e1:0e:74:01:
26:82:7e:dd:41:5e:49:a1:9d:0e:23:51:6f:ed:e1:
1d:06:47:b0:62:e3:34:30:61:93:99:10:16:4c:14:
cf:20:e0:00:27:f9:cb:af:ef:cc:85:40:26:1d:00:
97:ad:c1:fa:2a:f1:18:67:d6:ac:1a:ea:49:ec:bd:
42:db:8a:0d:6f:28:10:5f:f8:24:9d:30:70:28:2f:
f0:d6:55:64:c2:56:75:aa:8a:95:2a:96:6f:f8:fb:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:DA:D0:DE:9C:A0:33:AB:3F:F0:10:A9:47:F0:8A:91:FB:E3:1E
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:6a:44:4b:f1:6a:0a:d2:55:96:14:44:30:85:34:08:cd:
0e:46:1e:d5:0d:71:13:ac:93:87:a8:ef:c9:93:d5:0c:36:f8:
26:a3:74:7d:05:34:c1:96:c8:28:f2:77:a8:45:58:f8:df:9b:
c6:50:0d:53:dd:a5:ef:32:10:11:aa:a1:82:53:e7:bd:31:6d:
6b:89:60:30:b5:8c:e9:a7:32:7e:db:0b:de:b1:9b:35:7c:44:
e7:3a:73:63:41:e5:f4:6c:62:8a:56:e1:6c:38:0a:d3:d2:19:
ad:59:be:e0:95:bf:19:1e:3a:48:2e:80:b6:51:bc:03:08:cf:
9d:3f:a4:ee:55:e0:bc:27:af:9e:db:64:76:82:cb:6c:10:96:
f5:c2:57:ba:90:52:5d:23:49:1e:45:e9:ee:74:6f:a5:c5:d6:
e3:4a:67:00:c7:a7:9a:de:1c:85:6b:58:ff:0a:18:bd:5d:f7:
1d:68:d7:2f:01:e6:e2:f3:72:6c:a4:5e:98:8f:06:58:d5:8c:
32:13:a1:b5:11:3c:99:16:a0:bd:07:fa:9d:a9:26:88:72:66:
21:4e:04:28:13:74:9a:54:fe:c8:32:e0:81:6a:73:65:6c:ca:
53:f7:10:68:04:ef:8e:b9:57:c0:43:75:09:4d:88:58:68:a1:
73:6f:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:26:23 2026 by rpki-client