Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: TVoAstE6xKmH0gvM+K2/H3ySXQ50HqrG4eaV7F19XgY=
Subject key identifier: 33:A8:5E:05:E8:0F:2F:75:3D:DB:55:5B:6C:E7:08:FA:F5:E2:18:0C
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 019D27A93C6D2777A8A4E12DEF6999379758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:35 +0000
Manifest this update: Thu 26 Mar 2026 01:01:35 +0000
Manifest next update: Fri 27 Mar 2026 01:01:35 +0000
Files and hashes: 1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
2: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: jwmNOnFiAKLW3w963zODbniKA6yIM9/UT4m6rNWPYus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3c:6d:27:77:a8:a4:e1:2d:ef:69:99:37:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Mar 26 01:01:35 2026 GMT
Not After : Mar 27 01:01:35 2026 GMT
Subject: CN=33a85e05e80f2f753ddb555b6ce708faf5e2180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:a9:fa:6a:33:07:bb:1b:12:7d:08:fe:13:
c0:aa:d4:a6:7b:6c:5b:0c:c8:58:f7:a0:df:e5:d3:
85:8c:38:a3:1f:3f:a4:76:92:a6:34:89:d6:b7:a1:
56:c4:2f:bc:ba:40:d1:7e:81:47:45:ee:89:8a:11:
7a:12:7b:ef:91:3e:81:5c:56:3c:db:0f:03:a6:e8:
b5:61:c6:f6:e3:21:d1:5a:df:4d:ad:5a:fa:e6:29:
f7:23:8f:13:5c:43:6e:12:ce:90:20:57:ca:9a:d9:
68:10:30:6f:74:ae:ec:37:2d:7f:f3:09:bd:0c:c3:
5e:69:c7:08:bb:60:80:87:a3:c9:61:8a:de:de:46:
38:0a:fd:0e:31:91:59:ca:7a:e7:40:9b:61:1b:d4:
dc:8b:93:6b:fc:97:49:38:3f:6d:a4:f9:b9:35:4e:
68:04:7a:72:a4:80:08:45:23:8d:7f:53:37:7a:5d:
d3:fa:aa:47:b8:c2:2a:ec:f4:e8:8c:06:c7:b4:2d:
fc:ce:d8:c2:64:e1:1e:e6:f6:dc:d5:7d:15:18:31:
c4:99:5d:35:54:7c:b6:d5:f1:1b:a1:83:17:6e:8b:
ee:4f:44:6e:4f:78:31:7d:3f:3c:eb:cf:b1:06:8f:
e5:eb:c6:8b:1b:ac:79:fa:cf:cf:5b:76:8e:30:58:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A8:5E:05:E8:0F:2F:75:3D:DB:55:5B:6C:E7:08:FA:F5:E2:18:0C
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c9:90:12:d4:83:c4:92:b8:da:c8:7a:d9:4e:89:4a:b7:39:
98:77:f8:d1:a1:1e:36:33:d4:39:b3:7d:55:4b:f1:29:39:e0:
dc:19:7e:31:06:35:f1:48:93:07:36:f8:4e:fe:d4:56:85:fb:
5c:a0:7a:c6:65:7b:d3:de:85:70:c0:8b:1d:06:e4:b8:53:f8:
6c:bc:80:52:17:e0:46:f3:63:07:83:ce:dd:75:44:55:92:39:
61:36:31:20:fe:56:8e:34:f1:86:f3:45:ad:2e:a8:2c:79:72:
3e:01:2e:93:70:9d:56:fb:71:20:f0:0f:4f:d4:10:3b:a8:3f:
d7:3c:6e:79:df:61:b0:8d:73:2f:3a:cb:31:72:93:a8:13:2e:
ea:f8:06:ca:76:ef:0b:37:21:d7:2c:65:d7:75:fe:28:c8:8e:
c2:b8:5d:02:14:6b:92:dd:eb:b6:96:84:f9:c8:bf:a9:0b:46:
42:e1:fa:60:2b:7c:97:9d:07:53:2c:78:49:7d:6c:93:ff:65:
4e:b7:d5:71:04:d6:75:4c:c9:a8:32:01:14:45:34:ff:90:3e:
7d:46:f4:96:35:ac:79:d8:2b:d9:94:02:3c:56:1d:21:41:06:
1c:53:6f:6b:d1:71:97:60:93:d5:7d:06:ec:6b:f1:29:d7:c0:
23:fd:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:26 2026 by rpki-client