Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: QAMKnCCWC+ElWnUKn/q4/1Rbfx1PbAD0qnZCsejSxZQ=
Subject key identifier: 65:4B:26:5E:8F:AB:BC:FD:C8:67:E7:C7:1A:24:FB:21:CA:43:C3:1A
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 019D26CCC8F6C548668D3956A26345F1B3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 0123
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: 9GBMji4OPDhRJLd-DlLdqVfKcus.asa (hash: 6NMpenXQXi5qKq7l5TGlC240gKGHF30b3eWuVh0xgdg=)
2: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: b1Ikc+pPKUx2OMmkHtkRkkxP5JPxXQfpOkkQah29DPE=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c8:f6:c5:48:66:8d:39:56:a2:63:45:f1:b3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=654b265e8fabbcfdc867e7c71a24fb21ca43c31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:ac:52:a8:36:8f:ff:1b:5d:c2:3b:f6:8b:
2c:cf:7f:42:ff:55:d2:df:0e:c3:c1:48:74:b6:c6:
1e:f0:49:08:c5:2c:29:c9:df:28:27:c9:55:9a:7a:
25:22:49:2c:90:8a:e2:f5:17:25:94:81:a6:39:58:
99:cb:e9:4e:a5:58:0f:b1:eb:97:41:6d:79:df:fd:
a9:00:63:a4:58:3a:18:e1:80:96:e6:92:6d:e7:d6:
62:1e:4d:97:d8:cd:57:1e:0b:90:ca:05:a2:e3:31:
f8:0c:ec:97:f4:84:d2:be:b0:ff:ea:f0:d9:9d:93:
15:46:62:cb:6e:7f:aa:49:c6:63:81:ba:32:49:2d:
8f:4d:cc:3b:9e:29:20:48:8a:84:47:86:47:b4:b5:
24:68:af:40:60:d3:56:8b:fc:ad:15:b8:bd:eb:c9:
99:10:a0:44:5c:5b:55:23:ae:6a:d2:49:e7:0e:0e:
7b:45:c8:5c:b9:b2:16:28:93:14:c7:b5:ac:21:80:
f3:88:2e:75:72:d8:87:12:cf:19:7c:d9:0d:fb:6b:
70:92:9b:49:bb:fc:46:69:0b:1e:31:d4:68:37:63:
7c:84:0f:c9:98:4d:33:8d:07:6e:16:b3:5f:12:51:
83:83:a4:24:42:3d:83:f9:08:42:74:b1:c4:92:33:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4B:26:5E:8F:AB:BC:FD:C8:67:E7:C7:1A:24:FB:21:CA:43:C3:1A
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cb:7c:f0:d6:bf:f3:81:df:ef:64:a9:ae:ca:09:e1:15:d2:
02:3e:13:55:33:fd:71:1f:10:19:13:e4:dc:1c:91:93:a8:22:
74:ec:57:ef:18:17:0e:13:11:69:7b:59:f8:4d:7c:78:31:39:
96:56:71:c7:00:e3:35:3c:00:ec:0d:41:48:cf:2d:3d:0f:f6:
36:1a:ce:47:9a:44:67:18:6f:40:fe:c3:8f:a6:60:5b:88:3f:
40:58:a1:a2:58:f7:02:66:d6:f3:3d:a1:71:4d:d0:2b:2e:1e:
12:d2:de:78:f8:53:cc:24:a9:dc:b3:e8:b4:20:5d:ce:56:d7:
8a:cb:7d:27:b9:c7:e3:9c:38:2b:34:29:ee:07:4c:3f:19:48:
95:fb:ed:6d:95:9b:a8:dc:71:3f:ae:44:32:f5:75:56:2f:ff:
2e:a1:ca:fe:3c:1b:9f:fa:2d:15:89:96:df:5a:c1:cb:b0:7c:
33:17:74:a6:45:7c:d1:ff:82:0d:8b:5d:fe:29:3f:a0:3e:38:
7e:c7:a0:d0:5f:95:50:9d:d5:99:aa:fc:92:c7:94:ae:c2:58:
e3:90:c9:72:24:63:aa:35:2d:30:52:57:8a:b5:c8:44:b2:4a:
35:25:49:f6:c1:b7:f4:77:f3:ce:2b:c3:bf:a0:26:13:b9:01:
5c:64:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:14 2026 by rpki-client