Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: 5Os4PrGJF99zhCX6dy2pNc/7gcrngOXrDtDpbZzOpOw=
Subject key identifier: BB:C8:9E:53:DF:88:7A:BA:24:A6:3E:19:0B:83:B6:BC:4F:A1:4C:FE
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 019E1E352CC1520F78B6D5C15ED2260FC973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 04C3
Signing time: Tue 12 May 2026 22:01:01 +0000
Manifest this update: Tue 12 May 2026 22:01:01 +0000
Manifest next update: Wed 13 May 2026 22:01:01 +0000
Files and hashes: 1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=)
2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: 6PoyWQelny+/2PekDxPmUXygf1Vd9sox+1vKQtCwsuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:2c:c1:52:0f:78:b6:d5:c1:5e:d2:26:0f:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: May 12 22:01:01 2026 GMT
Not After : May 13 22:01:01 2026 GMT
Subject: CN=bbc89e53df887aba24a63e190b83b6bc4fa14cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:52:0b:e1:7a:9f:d8:ec:9b:d5:fa:53:23:
4c:85:78:6e:ae:37:8f:87:4c:ae:1b:fe:92:33:5b:
d7:73:f8:a7:cb:d2:1d:ff:71:7c:d5:42:2f:e7:6a:
22:81:69:1d:dd:64:24:6f:4f:d0:de:2e:cf:4a:18:
5a:15:7c:93:1d:ba:b9:64:58:69:1b:d3:97:69:c7:
5c:d8:ec:e8:45:e3:e2:c1:53:17:4a:17:7f:91:60:
7f:43:d1:0c:67:27:aa:af:fe:98:29:e4:38:10:29:
43:39:fd:a8:cc:90:72:33:76:d0:31:2c:61:5f:52:
40:70:f1:5a:67:0b:5f:14:5e:75:b5:c5:a3:7b:ef:
85:9d:16:5f:f6:5e:76:c7:92:64:99:e0:31:3d:fa:
f9:98:24:6c:dc:d1:ab:1c:de:36:4e:b6:1e:db:2e:
c4:1e:86:4f:48:cb:f6:85:8b:7c:26:b1:6d:3e:95:
c9:3f:d4:9c:a9:07:15:cb:13:c2:18:99:bf:94:8b:
9b:da:c2:c7:f8:7e:3e:29:ce:fb:89:07:80:3a:71:
dd:60:83:fe:8f:2a:75:8a:34:dd:12:6d:1a:93:0f:
90:b8:19:27:fe:59:91:16:66:7d:cd:24:d5:2c:28:
2f:1f:b1:d0:42:9c:71:31:93:c6:c9:65:b6:fe:74:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:9E:53:DF:88:7A:BA:24:A6:3E:19:0B:83:B6:BC:4F:A1:4C:FE
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:a7:83:9e:51:08:f4:52:67:e5:dd:eb:7a:b1:71:84:36:
4a:7e:1d:bf:4a:6f:7b:9a:b0:7c:50:7a:18:1e:0a:5b:36:ee:
2e:e3:cc:b4:a7:bc:5b:9c:13:d7:17:50:ab:c6:91:d0:4f:81:
9a:73:b9:15:7c:43:24:1c:ba:2d:60:78:b0:14:19:a0:84:a8:
08:f8:1e:ea:23:42:d9:57:c7:e5:bc:ab:c6:08:ca:3b:3b:b3:
f2:69:71:2f:19:86:a7:7d:f8:55:c7:0e:f0:61:61:a5:0f:39:
14:2a:49:47:33:0d:93:ab:f2:f3:fa:1e:4b:40:88:68:4a:9c:
58:8a:f8:57:9f:ef:1d:fc:38:0f:61:bf:1d:64:18:b1:f3:1c:
91:4d:07:30:e6:16:d1:ae:c9:8a:20:a0:38:18:e3:e9:d3:a2:
75:a1:e4:13:a4:c4:22:07:48:d6:bb:b2:7c:b9:5f:f2:b1:ce:
45:8e:e7:55:a0:88:e8:ad:26:68:d4:e6:c5:19:1f:2f:8e:90:
0f:b3:5a:96:c5:28:5f:77:9b:4c:f2:ee:3a:c0:0e:fa:5f:55:
9b:75:e5:eb:7d:e6:9d:3e:3b:93:32:ad:4a:77:6b:6b:64:ba:
d3:62:b1:11:a1:5b:6d:db:3a:cf:e5:dd:e3:01:bc:7a:2c:0b:
8b:24:45:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:20 2026 by rpki-client