Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: DbPOFtkqMTNu2algwg9/jAQJOI8RlLc0mr7f/VvqGO0=
Subject key identifier: 5C:21:9E:BC:D8:9D:D8:CB:9B:73:BE:53:DC:31:84:E3:5B:F5:19:6F
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 019D25BA2561CFEECE2A8C6A44EC86AF12F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 13E2
Signing time: Wed 25 Mar 2026 16:00:49 +0000
Manifest this update: Wed 25 Mar 2026 16:00:49 +0000
Manifest next update: Thu 26 Mar 2026 16:00:49 +0000
Files and hashes: 1: OEpwskwsLrz2yf1kQY123zPLnE4.roa (hash: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: QJJkfz8WxzaD3GWf45zfmtSrq9KvXfWvpcjGZTVebjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:25:61:cf:ee:ce:2a:8c:6a:44:ec:86:af:12:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Mar 25 16:00:49 2026 GMT
Not After : Mar 26 16:00:49 2026 GMT
Subject: CN=5c219ebcd89dd8cb9b73be53dc3184e35bf5196f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:b5:10:43:54:b7:49:ae:f4:bf:3e:8b:47:
8a:be:1d:f4:96:e1:ab:90:cb:18:50:e0:25:9f:85:
4b:cd:c2:e9:ea:09:41:ca:ef:e0:9b:8c:42:02:b2:
a3:45:89:b4:7b:eb:e4:b5:99:9d:f6:a8:2c:27:0c:
16:16:85:09:dd:aa:b0:b9:90:6b:5d:2c:15:a3:57:
85:6e:75:3d:35:f2:52:e7:1f:74:e8:fd:87:4f:60:
65:0e:ba:48:e8:1b:58:c7:34:43:9a:b3:aa:81:81:
1d:52:4b:a8:d4:47:46:84:57:f9:5f:ba:dd:47:67:
f6:f5:37:ef:8b:86:01:1c:0c:cf:ea:23:5d:60:36:
0e:56:3e:ba:d0:c1:9a:4d:db:5c:02:44:94:60:b4:
09:48:f3:ee:82:ad:dd:b2:09:89:68:2d:3f:5e:a8:
f0:b3:4d:4a:76:fe:77:85:3c:78:35:02:60:94:fa:
73:93:98:1d:97:5d:46:98:66:04:8c:8b:69:71:3f:
ae:d8:fe:dc:03:b7:4a:ae:fa:e7:e4:44:27:ec:ca:
5c:8a:07:e4:65:ee:09:94:ad:cc:30:bf:64:7e:07:
37:47:fd:19:3a:bf:2b:59:b1:17:6e:eb:7b:03:4d:
2e:7f:69:ec:68:8f:0d:09:39:b0:85:66:ff:9a:3d:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:21:9E:BC:D8:9D:D8:CB:9B:73:BE:53:DC:31:84:E3:5B:F5:19:6F
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0f:d4:ac:b3:ca:7e:50:32:cf:00:2f:37:46:f5:9c:91:f2:
e7:fc:d1:60:83:c5:c4:3f:20:f6:aa:c7:91:5b:27:d2:39:93:
a8:f5:85:65:9c:c0:04:db:cc:45:bf:f2:94:92:f9:a0:5f:eb:
53:a6:ae:6f:c9:c4:13:73:47:e7:ac:3d:60:8f:47:45:e0:4f:
5a:af:a3:c7:5c:cf:54:83:6c:3f:dd:de:a7:85:23:dd:9a:b6:
e0:1e:c4:e7:f0:fc:fe:95:20:fe:23:cf:26:cf:c4:bf:b9:38:
5e:4e:02:49:30:8e:9e:2e:18:13:bf:ed:e3:0b:e3:28:51:30:
7b:e4:ad:67:e9:b3:27:b4:ea:64:46:87:a4:22:23:af:d0:c5:
70:84:50:16:a3:3d:44:26:ea:68:4c:23:c8:cc:1e:62:e2:57:
79:ff:69:d8:10:9a:56:97:c2:df:33:09:e2:6c:a1:69:d9:b6:
a9:8f:5c:51:b4:1e:93:d0:df:fe:57:33:aa:0f:d7:25:4a:82:
d3:db:de:5d:82:7e:5c:3e:94:e5:43:60:82:bb:05:b5:41:8b:
52:46:2c:96:ec:c8:cb:0b:09:e1:f3:0b:84:94:b1:aa:ba:9e:
44:a5:04:f1:d7:79:9a:de:c7:58:44:c1:95:35:d2:62:ad:a2:
c9:0c:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:29 2026 by rpki-client