Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: WHed2JKA9I03oFW64DnaGrW2fcbjRsGq2DKTGceynoY=
Subject key identifier: 5E:2A:54:85:83:93:C1:AC:91:DA:F2:08:BF:FE:F0:98:51:B6:38:49
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019D273AACD7C15C050DD83967A5EA90536B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0B47
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: BC0itd/LptxmbP7rtqOO80H+LqG1s9UCGW78mIiU+qE=)
3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ac:d7:c1:5c:05:0d:d8:39:67:a5:ea:90:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=5e2a54858393c1ac91daf208bffef09851b63849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:6a:f0:e3:43:ff:d6:e2:4c:50:60:34:00:
5b:8b:37:bd:38:51:0f:91:6e:52:df:e9:1b:e4:9b:
95:cc:f1:22:14:d6:61:0a:f4:14:38:c8:18:66:c2:
9b:03:0f:a3:d5:a7:7f:6e:e2:c0:aa:ec:27:3b:88:
8d:23:2d:eb:ea:6b:92:cc:86:49:35:f6:9f:fd:e6:
e1:14:ce:77:f2:c5:80:2b:dd:de:ad:0b:f1:0d:fe:
bc:a5:f2:2f:0c:70:0d:40:6d:8c:50:69:81:cc:36:
1e:53:56:c7:7c:d9:e2:a9:53:de:af:90:d2:c3:e9:
1f:4b:3b:74:6a:06:ee:19:95:50:59:52:a9:30:72:
d8:4c:eb:29:31:fd:c6:c0:72:be:16:62:4e:cc:c7:
d7:27:99:65:83:da:46:1a:70:e3:fb:56:b5:1a:c5:
36:4d:8e:06:b1:dd:2b:89:44:01:b6:40:01:30:e2:
21:90:9a:18:12:bf:54:1e:d1:62:c0:ff:30:2f:07:
2d:8e:2f:6f:99:0f:66:ab:39:18:c9:09:a5:30:f3:
71:0f:ae:4c:b3:70:80:44:1b:1a:95:e0:09:91:84:
64:34:25:02:05:fd:58:6f:d0:7d:ae:30:00:20:35:
d4:7d:63:ad:8f:9a:5d:92:1d:96:db:e8:6f:d1:40:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2A:54:85:83:93:C1:AC:91:DA:F2:08:BF:FE:F0:98:51:B6:38:49
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1a:5c:58:00:ba:ef:f0:0a:8b:ff:1f:06:83:b1:6f:4f:8d:
20:c8:96:15:5e:27:d3:5d:62:f4:fe:65:1b:ec:52:c7:1b:be:
55:e5:c6:a5:e6:4b:14:07:50:7f:ef:81:c8:6d:7c:a8:21:61:
01:56:5b:12:40:07:7e:92:5c:51:d6:17:05:0e:69:a9:a1:6f:
cc:7f:24:43:72:1f:0a:b2:27:27:28:a6:64:b2:db:4e:04:36:
a9:58:87:01:e7:49:0e:a1:ba:fb:ec:cc:30:01:cb:08:40:df:
46:bc:d5:35:d7:ab:56:d4:2b:2e:db:6b:33:c2:93:51:4c:7d:
9f:46:52:19:3f:82:11:1e:80:6f:50:e7:db:b5:d5:54:0c:84:
f1:e7:ac:f8:a7:74:b6:74:54:c1:0f:20:bc:29:76:1e:28:64:
3f:bf:8e:57:29:4c:05:10:6f:c0:e1:35:a9:42:89:b7:31:24:
59:85:90:f9:9c:ce:bf:8b:a2:ad:8c:19:5f:80:f8:79:55:bc:
ec:2a:66:47:df:04:f2:6f:c2:c8:47:2d:3f:8e:39:e8:82:f4:
66:38:73:83:73:17:3e:7d:3d:19:24:f4:ae:e8:9a:5e:a2:cf:
ef:15:14:11:19:28:6e:e8:3a:6d:49:07:1c:ba:88:a9:d0:4b:
51:98:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:47 2026 by rpki-client