Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: dcTRGCULWvvfJPA93VaWW9G8P2F256Aov+KHxeBVYwo=
Subject key identifier: 3A:22:90:AC:08:3C:5E:5C:03:D2:FD:B2:A5:F5:9E:BC:01:C7:88:C4
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 019E1DFE9624573DF81E48054F7AA3A670A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 01A3
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: 9GBMji4OPDhRJLd-DlLdqVfKcus.asa (hash: 6NMpenXQXi5qKq7l5TGlC240gKGHF30b3eWuVh0xgdg=)
2: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: mBJiISbJ+XEqkpysqTKUooYaFDpueOjEbPfyLoyaS+I=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:96:24:57:3d:f8:1e:48:05:4f:7a:a3:a6:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=3a2290ac083c5e5c03d2fdb2a5f59ebc01c788c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:0d:8d:db:87:37:f0:8c:c3:dc:32:61:bb:
85:70:ac:7c:17:4c:ef:bf:87:41:08:46:86:4c:5e:
f0:30:49:98:57:c6:62:fa:a5:31:73:85:77:b2:80:
5e:4d:f8:96:63:ad:3e:04:9e:2d:c7:7c:53:f8:a0:
6d:91:58:f0:8b:03:7d:33:78:8d:7c:80:f4:3c:dd:
02:50:58:96:be:94:4b:43:5b:98:d9:78:92:e3:d2:
a1:13:e7:6e:b4:ea:10:aa:9f:4d:6d:f7:41:65:a3:
53:46:72:ac:82:d9:f9:9c:21:db:91:11:ed:74:c0:
80:82:8e:b2:d3:f1:32:c6:82:85:33:fb:20:8d:a9:
b5:6b:17:e1:82:7d:f0:89:6d:63:9f:95:23:b0:07:
8b:9e:c6:94:ad:38:45:b0:4a:4d:ac:8b:25:d5:d8:
f0:42:79:34:95:f0:c8:01:9a:c0:fe:75:3a:19:6a:
95:9a:3f:a2:5b:55:f3:89:b7:7b:01:b7:fb:9e:16:
d8:e8:83:29:05:a7:da:ec:ff:74:73:7a:4c:6a:3b:
2b:d0:8f:08:27:5f:d0:ee:ec:11:78:10:8e:f1:58:
20:99:e9:b9:04:dd:be:e3:38:91:76:02:53:0e:3f:
73:1d:6c:61:d6:76:7c:95:e8:1a:20:85:c6:b4:0a:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:90:AC:08:3C:5E:5C:03:D2:FD:B2:A5:F5:9E:BC:01:C7:88:C4
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:af:d5:30:d8:57:9e:fe:f7:c1:92:df:3f:68:9c:f5:9d:06:
49:d6:65:a8:d3:f0:8a:cc:97:97:08:10:ee:72:aa:9b:cf:2d:
24:42:6f:33:66:32:c4:cf:75:86:a6:46:d5:e9:33:db:5f:c6:
2f:ec:27:c3:99:08:6e:c5:fe:c8:d9:f7:2a:c9:58:86:85:be:
04:3e:e6:66:b0:b8:5e:42:1f:89:65:01:4f:3e:8e:01:59:dc:
2a:34:a6:fd:ef:33:cf:15:0d:d4:50:47:67:41:0a:c4:dc:c7:
02:08:49:9f:ea:ea:17:de:d6:02:ca:72:4b:25:af:b4:fc:4c:
41:6d:84:16:f8:d5:42:32:d6:31:a7:9e:b1:6b:ad:9f:02:30:
fe:5c:ad:e8:1f:7a:93:c2:c8:89:0e:dd:e8:f5:d9:25:64:9c:
88:d5:8b:63:d0:6f:48:23:e1:88:0b:eb:25:1f:2d:3c:d3:6e:
0c:a5:9c:ed:a9:b8:f8:69:0c:71:5a:52:d6:53:4b:f4:cf:b3:
ff:01:1f:78:27:70:5e:95:84:f1:42:45:fb:19:d3:91:f5:1a:
99:62:03:45:bd:61:13:99:da:5c:b0:95:b8:8f:c0:b3:c3:34:
c6:3e:f4:2a:1a:9c:0f:19:70:fe:56:45:34:d0:fa:d9:49:b4:
12:03:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:19 2026 by rpki-client