Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: tr//ggOmDax+mRrXJVnWfTb3eA05F8PC/uIYpq9qL5s=
Subject key identifier: 0D:87:DD:C7:86:AD:EF:58:F9:03:FE:38:AE:ED:0F:A4:9E:1B:CB:3D
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 019D265EE3DB9EFA6CD8DA947B0332CE0CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:46 +0000
Manifest this update: Wed 25 Mar 2026 19:00:46 +0000
Manifest next update: Thu 26 Mar 2026 19:00:46 +0000
Files and hashes: 1: T-A-44juLtTcwFnkF5SXhOQIQ9I.roa (hash: 5FV/i01IPIqBUOBQNZQFuPYhK8LFfHjFfgoQlpXFS0o=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: qXQIx5H4e3sftCcRqfORUzftix/f9iHzeuJO3xgCFv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e3:db:9e:fa:6c:d8:da:94:7b:03:32:ce:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Mar 25 19:00:46 2026 GMT
Not After : Mar 26 19:00:46 2026 GMT
Subject: CN=0d87ddc786adef58f903fe38aeed0fa49e1bcb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:2d:a4:d4:9f:f3:f8:45:22:58:e6:84:b5:
73:92:80:8c:29:ac:98:ef:ac:3c:ea:30:92:cb:a3:
eb:3e:66:e3:2d:84:2a:6f:57:ba:87:57:bd:ef:07:
99:b8:e1:de:bd:11:f7:4e:1e:52:c0:79:c4:ea:a9:
d3:c2:37:6a:67:6d:0f:f1:02:56:7c:25:57:a2:ab:
ff:45:96:5f:20:09:e1:bc:9c:58:ce:b1:8c:27:7b:
18:17:ef:54:ff:c9:89:83:59:04:af:51:2d:99:eb:
cf:b1:87:b1:38:4d:57:8e:57:90:68:c7:95:88:58:
48:6c:0d:e5:78:2c:b2:66:1f:75:62:61:ad:ca:c3:
be:f0:e0:c4:44:66:d5:48:a0:77:19:3f:5c:b5:ce:
9f:a2:2d:c4:58:1f:07:34:3a:c3:57:e7:76:f4:8b:
a7:ca:10:b4:4f:ca:06:92:4b:eb:ed:4b:69:ff:47:
2b:7e:96:4c:a4:09:dd:b2:ce:c5:5f:4c:6f:f9:0e:
85:ff:bf:2e:8a:1a:43:6a:c5:f5:22:62:fd:4e:0b:
52:3e:00:72:03:16:ce:15:ec:e1:a5:97:90:02:33:
85:bc:eb:e6:61:89:6e:b5:09:c2:f1:6d:bf:4a:84:
d6:c3:ee:90:7b:50:a2:54:ad:57:32:e7:af:b0:78:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:DD:C7:86:AD:EF:58:F9:03:FE:38:AE:ED:0F:A4:9E:1B:CB:3D
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:59:0c:a7:0d:07:0f:a3:a8:1c:79:b9:d1:82:40:a3:46:de:
62:e2:9b:27:a0:3c:d9:aa:bf:37:ff:99:42:6d:c2:51:16:b5:
71:e0:ff:ba:44:ac:69:22:68:9c:68:10:64:37:3a:65:ca:ca:
02:b7:28:c2:7c:9f:b5:7f:91:7e:b8:0c:69:71:db:59:38:e0:
62:b3:8c:fe:e5:4f:7b:e8:82:6d:3e:bb:5b:f0:42:0c:5d:c5:
6e:2c:3e:17:16:94:a9:74:c9:b5:16:76:2b:84:a1:07:da:8e:
d0:03:53:6e:e8:e1:58:ab:82:71:45:12:c2:a4:de:12:ec:19:
23:3a:d1:0e:c0:27:83:06:b4:9b:e4:d2:98:fa:5c:9f:30:f8:
50:d2:99:ed:7e:67:e4:69:ee:c0:ac:46:af:51:68:e1:84:b9:
83:75:d0:b5:bc:67:2f:1d:18:4c:41:52:b1:89:1e:7a:43:89:
d6:5d:aa:5f:69:bc:c3:8b:76:a3:06:d5:c5:2a:7d:25:bb:fb:
fa:0a:e8:4f:e6:3b:f7:51:ee:4b:46:b8:79:35:25:90:ed:c6:
a2:1b:cb:6e:d0:70:50:b5:9b:4b:59:12:ec:51:ab:c1:12:39:
fc:14:53:31:fe:94:9f:f9:f7:a1:c9:db:da:af:ff:d8:84:b6:
7c:3c:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:01 2026 by rpki-client