Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: bDKSI/dLg2aDA8Ls+99XV9/iLagcwY3TXEDsqpckR9M=
Subject key identifier: 2D:29:84:31:9D:DE:75:CF:08:04:27:69:AB:C3:3B:5F:87:15:D5:A6
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019D265ECF19E89642F1C405F2E911F44773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 065A
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: IPJI1namStkxISFVbtrxtVBHGwPcqJXHACeMUkXPoKo=)
2: Ti99byxMxEultByMj_ZtpNccqro.roa (hash: FyYPPJ+YgErTDDfONgmR0NO8SDJKFzr8LmNtsMbfpr8=)
3: kc-jaUVimyh7h7ZPoNuGNT6F-Uw.roa (hash: ntudmzWpvPZIJiKJAFzm/9dUZxLPcjchhqmnjmjWXog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cf:19:e8:96:42:f1:c4:05:f2:e9:11:f4:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=2d2984319dde75cf08042769abc33b5f8715d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:6d:a5:f3:a1:64:b9:7f:31:d6:f0:bb:45:
79:03:94:d9:d2:6b:8f:ef:0d:4d:cf:64:a6:1c:c9:
8e:a8:55:d2:b6:ec:a9:08:b5:f9:07:8d:ba:e3:14:
3c:e6:01:84:71:4f:fa:0f:42:96:a6:be:a7:b1:93:
2d:fd:4e:07:25:fa:26:dd:f0:80:40:ad:54:e8:35:
31:74:da:91:cf:de:0b:c4:e9:df:96:22:b6:f0:3b:
cc:a2:65:44:72:10:98:8d:23:10:a6:cc:44:19:97:
83:cf:3a:f0:7d:be:ab:de:60:4d:93:5c:08:9a:ab:
46:e0:15:c5:69:d9:ef:32:cb:84:5c:39:da:84:fd:
b5:89:e0:b0:bb:5a:44:4e:4f:ea:66:a1:4e:65:57:
b0:3e:62:90:73:a3:ab:bb:b1:65:a7:3a:7e:17:69:
cd:24:31:b3:24:6a:ec:48:38:0c:6a:92:fa:c7:80:
b6:28:a6:6e:d4:0e:3c:e3:c0:ca:9a:77:1a:94:ad:
1e:98:9e:18:dd:9f:0d:6d:0f:5f:9b:4d:74:6d:7d:
d9:5b:c6:d6:e9:2a:1e:68:1f:0b:7d:c7:11:1c:a7:
5b:50:10:25:97:60:c3:e7:3c:49:9c:17:b6:da:be:
15:39:66:f0:c1:02:d4:51:3f:cf:97:52:38:7d:37:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:29:84:31:9D:DE:75:CF:08:04:27:69:AB:C3:3B:5F:87:15:D5:A6
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ae:13:d3:a0:ce:8b:a4:94:74:eb:d2:66:49:76:14:e8:49:
e6:a3:f6:20:ca:1d:d8:95:eb:bb:d2:6f:d2:7c:7b:c0:71:c5:
2d:e5:4d:c3:1b:37:69:93:52:17:da:d3:91:48:f9:7a:cc:77:
75:56:f9:07:09:0d:66:81:2f:b5:38:ab:29:99:9a:e4:85:cc:
b4:66:f0:8f:5d:45:e2:a9:47:ae:73:ec:0b:ad:9c:11:94:e6:
55:74:da:02:00:b3:26:64:f6:71:fd:fb:4f:24:d9:d7:ca:4c:
5b:dd:2f:9b:c9:81:8b:24:e0:86:3e:94:81:87:7f:8e:4d:1b:
64:10:04:28:2a:ab:20:19:a4:7f:a1:3a:5e:bd:23:60:8b:70:
7c:c1:f7:86:d7:ff:58:f0:d6:ec:34:68:ef:b0:bb:30:4f:73:
b4:25:f6:61:9c:68:08:99:8b:33:16:59:d3:8c:03:c2:04:28:
20:fc:32:df:13:33:78:e2:63:db:c8:8c:0c:7b:44:3d:b5:71:
20:86:41:be:6c:42:f5:89:eb:9b:80:07:b0:a6:b3:98:7d:7c:
17:97:16:7f:14:24:90:6e:95:ab:bc:07:6d:f2:03:2d:ec:1c:
e2:ff:13:e0:23:67:2a:86:45:e8:7e:08:22:28:c9:6e:58:1d:
1c:3d:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:13 2026 by rpki-client