Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: ieD3WZzhZgaobXD+Gj69OuzrnSQutgTtDVlEQT3TMDk=
Subject key identifier: 75:C9:2F:56:47:C2:DE:41:9D:F1:ED:0B:93:A4:B9:D8:27:64:D1:DD
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 01A0F945A475183229C648DD31893EEFF5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 19D3
Signing time: Thu 01 Oct 2026 21:01:25 +0000
Manifest this update: Thu 01 Oct 2026 21:01:25 +0000
Manifest next update: Fri 02 Oct 2026 21:01:25 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: ohFAiw8BW/aMmjgYlstHsScIyNmEuSDTqoAQFbnaVHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:45:a4:75:18:32:29:c6:48:dd:31:89:3e:ef:f5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Oct 1 21:01:25 2026 GMT
Not After : Oct 2 21:01:25 2026 GMT
Subject: CN=75c92f5647c2de419df1ed0b93a4b9d82764d1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:9e:12:65:a4:1a:8e:b1:17:c5:e1:7b:21:
aa:c4:7c:9d:94:63:b6:36:7f:0b:6f:4c:6c:1e:d5:
92:ad:e3:7a:0f:73:bd:2a:31:b4:6b:6e:96:47:ad:
68:9f:90:48:42:d3:fe:54:42:53:5b:1e:97:87:1e:
3c:d6:ff:27:29:da:64:e9:cc:a2:52:be:5f:80:18:
3d:5c:ec:02:24:e5:5f:b9:d3:9b:ff:cd:f8:c9:9c:
e2:96:1b:e6:b6:99:85:6d:9f:ad:fb:b2:11:ba:50:
21:17:f2:86:4e:02:2c:17:fb:cb:d0:d0:86:01:7b:
30:57:88:03:dc:09:c4:a5:48:8a:13:97:80:6b:35:
ec:a8:b4:9e:a3:f4:f4:6a:c3:a3:cf:0a:0f:b7:fe:
a2:2f:90:03:87:65:5f:69:17:f4:07:88:c5:7e:95:
b1:3e:2a:51:37:ce:3e:45:e8:e5:e5:ef:e7:1b:0f:
06:2f:60:99:ab:af:53:6c:79:cd:ac:43:aa:16:d5:
d1:93:bc:dd:aa:ad:6e:30:8c:47:89:2f:4a:6a:41:
5c:92:43:82:e8:08:7d:54:b5:37:56:5c:37:33:09:
74:61:fa:53:53:be:d9:21:65:bc:0a:42:db:65:07:
0b:6d:8a:9d:d8:d0:b0:f9:13:84:73:3d:b0:20:72:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:2F:56:47:C2:DE:41:9D:F1:ED:0B:93:A4:B9:D8:27:64:D1:DD
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:b7:b5:0b:aa:ef:75:90:19:02:f0:59:34:0c:78:d0:7c:
fe:5c:c1:5b:42:e9:12:47:bc:e9:c2:9c:9c:a9:84:d4:d0:35:
48:4c:8c:4b:1f:f0:fb:57:9c:34:d3:ac:4b:c9:02:a2:68:66:
3c:ca:ea:de:d7:af:64:a4:75:3a:50:e3:27:fb:cf:89:db:62:
47:e9:94:53:91:4e:12:4c:df:ed:15:6f:c7:74:23:ed:a3:17:
96:aa:25:12:cd:24:36:20:7d:d0:c6:e2:8e:67:7b:a5:a8:b0:
96:3d:a8:f6:e9:3b:c6:86:fe:76:bc:88:75:93:1f:a3:73:a7:
08:f4:cd:cf:1f:5b:2f:9b:8a:fa:15:b1:c8:4a:b7:8d:c8:b9:
9a:d8:2a:53:ef:73:7f:c7:8f:62:97:65:a2:d1:62:32:4b:df:
88:9e:32:f3:13:05:a2:ca:4e:80:c9:fc:38:31:7b:a3:2d:19:
14:e0:85:17:79:06:e7:42:92:3a:1a:a9:71:50:14:d3:ee:6c:
97:1b:5b:f3:01:fc:56:c4:2f:69:2c:0e:e6:9d:a7:dd:d0:a1:
7f:84:cc:63:ea:ab:d2:53:7e:11:8f:88:6a:af:78:cf:b9:75:
1b:4a:c9:f9:8f:22:3a:82:ee:0b:54:68:3d:85:8d:45:a5:85:
39:ce:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:39:16 2026 by rpki-client