Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: V/7AB1JAAGdMFaX9K6o1ryYuc9Ero0+AfhImDX130X0=
Subject key identifier: B5:50:55:8C:E0:DF:6E:D5:55:39:02:AC:2C:75:72:10:42:3A:2B:3E
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 019D28F32ADB5DD7A8B7B48C29D0396048EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 0444
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=)
2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: 5KlehEYf3JYuxh4jNLJlr7ptfGYiLny4EmZxgqpOlyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2a:db:5d:d7:a8:b7:b4:8c:29:d0:39:60:48:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=b550558ce0df6ed5553902ac2c757210423a2b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:d8:7c:a4:e9:56:28:69:66:2f:7e:02:70:
8e:d2:59:ce:b4:1c:8f:7d:10:c0:8a:ab:19:55:51:
96:27:b2:e0:24:cd:d2:e0:a1:8f:2c:c0:24:e5:e2:
cf:4f:e6:d8:8a:cd:81:d2:f4:d3:c6:23:30:b4:74:
c2:25:39:7b:43:73:79:6c:0e:89:25:d3:0d:83:16:
f9:9f:86:5f:00:87:d2:4c:e0:a9:ee:fb:e1:46:da:
2b:cb:83:2f:7d:f7:b9:3f:73:e7:3d:bf:d9:31:d2:
87:77:09:a7:1a:46:3c:aa:83:24:cb:30:77:c1:0b:
c4:b8:c2:84:cd:08:81:e7:cc:b1:d8:1f:49:8c:77:
20:cb:01:ee:c1:87:ec:c2:29:e3:01:a5:8a:15:16:
4e:9f:e8:cd:59:55:c0:1f:10:fb:07:45:65:18:49:
db:4f:67:c4:8d:bf:be:bd:cd:07:ae:17:58:96:d2:
f2:18:25:35:9c:6a:2d:50:cd:70:69:a6:fe:83:7d:
21:0b:22:e0:7a:e7:04:60:6a:ac:88:30:e2:42:0e:
56:07:22:29:de:3e:dd:cd:6d:fa:7f:b9:20:4d:b9:
da:fd:9f:dc:6c:b8:62:8e:92:6d:e9:cd:07:4c:ec:
6c:82:d7:a3:98:1f:99:a2:26:15:c2:9f:3b:90:ec:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:50:55:8C:E0:DF:6E:D5:55:39:02:AC:2C:75:72:10:42:3A:2B:3E
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cd:4f:d8:9e:ee:a4:77:20:03:d1:80:f2:69:af:f9:9a:85:
98:fb:47:92:bf:31:63:f7:2a:82:b5:44:af:0c:a7:28:ad:ff:
af:c4:ad:fd:74:05:4b:c4:79:14:13:8b:04:b9:0d:8e:9e:f9:
65:95:f9:7c:30:98:b9:28:11:30:85:c8:02:78:dd:00:dc:65:
bc:87:6e:f2:ed:c4:f1:b9:fb:36:56:db:6a:08:72:5d:fe:27:
c1:7b:4b:fa:4f:b9:df:9c:b6:0f:9b:70:87:1a:26:4d:be:d3:
4f:79:24:2f:f9:20:22:00:8b:93:0b:9f:f5:d6:37:bf:f7:cb:
1a:a6:07:ca:99:13:4e:5c:d3:34:27:de:90:87:13:7e:88:d4:
56:ba:23:60:55:d6:a1:cc:c4:7c:a4:02:34:7b:ff:b8:f9:ee:
eb:f2:40:13:1f:79:ec:31:e2:c1:bb:b1:cd:cb:a6:74:51:22:
f6:29:b6:50:66:09:77:6f:60:f5:04:24:65:e5:64:e4:1c:cb:
4f:36:74:13:ad:41:b7:79:83:98:e7:39:d1:91:1a:19:d1:0c:
b1:eb:fb:cb:0b:2d:0d:50:95:00:20:ff:7d:aa:5f:0d:8f:86:
5d:d9:56:77:0f:9f:2f:27:68:81:b5:92:12:71:d7:a3:52:ad:
8a:c6:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:16 2026 by rpki-client