Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: 5z2UOIboBO1hXIPF+IuiN35TW3pu2ICt05aHRz58FhE=
Subject key identifier: 91:EF:07:35:5A:67:BF:70:D9:D3:18:D4:DC:6F:9C:40:BF:77:3A:AF
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019F940026AFCA947A551D0225FE1EFD34C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 191A
Signing time: Fri 24 Jul 2026 12:01:05 +0000
Manifest this update: Fri 24 Jul 2026 12:01:05 +0000
Manifest next update: Sat 25 Jul 2026 12:01:05 +0000
Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=)
2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: sghRZXslNtIc8RbCw8m+QlL4ZK0K7qMgKhFciZrpD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:26:af:ca:94:7a:55:1d:02:25:fe:1e:fd:34:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Jul 24 12:01:05 2026 GMT
Not After : Jul 25 12:01:05 2026 GMT
Subject: CN=91ef07355a67bf70d9d318d4dc6f9c40bf773aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:54:83:5d:97:d7:3f:da:f6:2f:d9:ec:60:
09:92:3b:98:13:6b:29:63:83:ab:ef:f3:2e:24:ad:
2c:94:38:64:fe:03:02:b7:c8:d9:d4:77:8e:d8:5c:
a3:1b:f5:bd:cf:ed:ef:c2:b4:e5:1e:55:62:9e:30:
db:db:b9:f8:fb:14:5a:d1:43:d8:09:33:f5:70:4f:
60:8a:8f:1e:4c:0a:12:ff:06:96:f4:99:56:d3:22:
05:15:ec:05:5a:0b:63:fa:2e:05:5c:7f:c8:0a:67:
99:d0:1d:38:54:04:eb:bc:32:48:01:97:5f:b8:db:
cd:74:a4:25:e1:df:3a:bf:a2:a5:c6:fb:ef:eb:07:
27:a8:6a:74:ae:2e:a9:b5:30:ba:95:66:bc:41:04:
23:f7:0f:98:ea:0b:a4:c7:ce:3e:01:50:5f:d1:12:
a6:b6:f7:09:49:5d:1f:64:36:89:6a:00:f9:39:45:
ef:4a:27:d4:e2:17:0f:38:9b:9d:cd:be:2b:e0:f3:
bd:64:4b:fc:9b:cf:fa:06:7b:da:26:66:39:ef:3b:
09:07:af:e0:4b:1c:23:15:6b:5a:f3:a2:87:b3:bd:
60:ff:9c:c3:fe:d3:d9:9f:b4:4d:a5:ab:a5:0f:44:
80:fe:2f:1d:ca:39:b4:48:a1:0d:70:93:d5:84:db:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:07:35:5A:67:BF:70:D9:D3:18:D4:DC:6F:9C:40:BF:77:3A:AF
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:67:0d:7d:6e:73:95:33:b6:d0:77:29:f0:06:36:b8:1d:04:
39:f1:59:89:d1:aa:0b:50:4f:1e:0b:89:8e:52:33:b8:16:bb:
d8:89:e1:2f:0e:b2:d5:e9:66:a2:12:2d:ed:ee:4f:6a:5e:48:
fe:3e:66:b5:c5:d7:33:dd:05:24:2b:a4:d6:93:fb:95:1b:d6:
f8:d8:71:eb:18:31:6c:3c:7f:2a:23:e9:61:2d:2e:c4:c3:a0:
6c:7b:75:d9:ca:46:0a:8b:33:8a:b8:23:54:ba:0b:fa:8c:9d:
fb:e9:d9:47:a8:de:29:30:22:1f:5c:ed:f4:e8:e8:f8:7b:57:
ee:83:e4:4a:0d:80:78:4d:a8:b3:f4:0b:a7:ef:99:ea:7c:3a:
0a:38:df:95:82:6a:49:e0:f7:e4:3a:db:73:12:db:dc:ff:3a:
ef:5f:63:56:e5:97:66:61:12:f2:70:5e:9e:05:4a:82:28:fc:
9b:dc:49:e3:d5:3b:e3:53:c9:d7:0f:40:2e:b7:2b:cb:af:33:
ce:f4:0f:30:71:d5:8a:a8:8b:d8:55:94:53:9e:0b:64:eb:e2:
4f:bb:69:16:cd:6d:0f:0f:db:70:91:81:e2:97:65:33:3c:36:
ca:7b:c6:3a:b6:fd:59:fc:17:6e:fe:42:86:e4:58:d3:c5:36:
1f:61:d8:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UACavypR6VR0CJf4e/TTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2
MzBiYmEwHhcNMjYwNzI0MTIwMTA1WhcNMjYwNzI1MTIwMTA1WjAzMTEwLwYDVQQD
Eyg5MWVmMDczNTVhNjdiZjcwZDlkMzE4ZDRkYzZmOWM0MGJmNzczYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WxUg12X1z/a9i/Z7GAJkjuYE2sp
Y4Or7/MuJK0slDhk/gMCt8jZ1HeO2FyjG/W9z+3vwrTlHlVinjDb27n4+xRa0UPY
CTP1cE9gio8eTAoS/waW9JlW0yIFFewFWgtj+i4FXH/ICmeZ0B04VATrvDJIAZdf
uNvNdKQl4d86v6Klxvvv6wcnqGp0ri6ptTC6lWa8QQQj9w+Y6gukx84+AVBf0RKm
tvcJSV0fZDaJagD5OUXvSifU4hcPOJudzb4r4PO9ZEv8m8/6BnvaJmY57zsJB6/g
SxwjFWta86KHs71g/5zD/tPZn7RNpaulD0SA/i8dyjm0SKENcJPVhNvVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHvBzVaZ79w2dMY1NxvnEC/dzqvMB8GA1UdIwQY
MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt
NTczMDlkZjY5NjQyLzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy
LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGcNfW5z
lTO20Hcp8AY2uB0EOfFZidGqC1BPHguJjlIzuBa72InhLw6y1elmohIt7e5Pal5I
/j5mtcXXM90FJCuk1pP7lRvW+Nhx6xgxbDx/KiPpYS0uxMOgbHt12cpGCoszirgj
VLoL+oyd++nZR6jeKTAiH1zt9Ojo+HtX7oPkSg2AeE2os/QLp++Z6nw6CjjflYJq
SeD35DrbcxLb3P86719jVuWXZmES8nBengVKgij8m9xJ49U741PJ1w9ALrcry68z
zvQPMHHViqiL2FWUU54LZOviT7tpFs1tDw/bcJGB4pdlMzw2ynvGOrb9WfwXbv5C
huRY08U2H2HYDQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:20 2026 by rpki-client