
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: k478SJvlmT2dCeflYWA1+H+E5paq6ygxpdCqKD4mvlA=
Subject key identifier: AB:07:64:F5:1C:75:23:1B:F8:B5:34:18:F0:8C:C1:FC:AE:01:46:0D
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 019D27DFB67380883E13F2EA77EAE413AFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:05 +0000
Manifest this update: Thu 26 Mar 2026 02:01:05 +0000
Manifest next update: Fri 27 Mar 2026 02:01:05 +0000
Files and hashes: 1: 436Hd-S_BVnAB9wLmGOzp-XnSjg.roa (hash: llw/o1VUWMw1Xmtw7UPct5EjQN+vJpnFvT25Me1d82w=)
2: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: mq7wHBWfZwd7Sjocpr4CrnwIySgcMoJ/mKWX+3hhQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b6:73:80:88:3e:13:f2:ea:77:ea:e4:13:af:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Mar 26 02:01:05 2026 GMT
Not After : Mar 27 02:01:05 2026 GMT
Subject: CN=ab0764f51c75231bf8b53418f08cc1fcae01460d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:69:3b:d6:bf:a1:52:3e:5d:a8:04:f4:8d:
a6:b6:c8:fd:d1:ee:d8:8b:16:05:e1:1a:5b:af:f6:
80:2c:05:0d:24:34:ae:8c:80:1a:c6:b1:99:c3:48:
82:6e:8f:c1:c0:e1:c8:95:40:08:51:cb:01:b4:24:
c5:8a:fa:4b:96:7b:37:18:68:3d:45:4e:f8:c7:4b:
7c:1f:c8:31:5e:e4:e0:e8:6e:72:91:d2:04:ff:f4:
84:c6:b3:d7:ea:bd:a6:7b:a1:33:fd:9e:9b:3c:38:
6e:57:d9:be:1d:0e:46:db:e9:4b:1b:30:04:c5:cd:
26:48:3d:7a:47:39:54:c6:bd:a3:4e:26:d2:26:a2:
49:8a:0b:0b:ac:e2:38:56:6b:e9:8b:ef:b8:d2:52:
cd:02:93:01:54:72:30:78:61:4e:a7:06:94:61:50:
5b:27:6c:aa:3d:26:3a:6d:68:6a:93:e0:ba:e0:ce:
62:63:e1:c5:7e:5c:09:45:8b:7f:89:cc:64:b4:d5:
09:a6:e7:80:f9:d8:07:fb:a4:f6:97:33:ee:70:8b:
4d:43:5b:02:73:37:aa:d1:01:87:98:78:d2:5a:00:
de:74:0e:59:2f:84:38:3f:ba:d4:6c:06:1c:db:73:
14:68:ef:86:85:b4:7f:d6:0e:e4:25:71:f6:21:ee:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:64:F5:1C:75:23:1B:F8:B5:34:18:F0:8C:C1:FC:AE:01:46:0D
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f6:38:90:a4:85:07:52:ae:c2:ef:56:00:54:e6:40:58:c1:
64:f8:e9:73:2c:88:87:7c:36:da:83:ab:11:37:57:92:06:9e:
6f:25:8c:00:80:25:fa:21:84:8a:86:0f:5f:05:b6:b6:5b:ed:
dc:32:83:1c:f5:ee:1c:69:f2:3a:12:d2:7e:69:64:29:71:34:
44:14:d6:53:19:be:77:3e:0a:65:c9:39:57:be:3a:f5:0f:f0:
cf:60:77:04:57:a4:ab:ee:61:e3:17:26:b0:2d:cb:a8:c3:7b:
33:96:2f:a2:69:e2:df:57:f2:a2:e2:38:85:50:91:4e:7d:b6:
4a:f9:96:90:39:98:f1:8c:ce:fb:25:2a:c2:06:73:28:93:11:
17:fd:d7:bd:3c:e3:67:23:44:56:6b:9b:57:1c:a6:5c:5c:45:
6b:f3:6c:6d:f1:f8:ac:05:06:d9:37:af:a6:3d:8f:25:7b:9b:
22:38:4f:5b:e0:1f:fb:2a:7d:fa:77:7d:3e:9f:06:8b:b9:1a:
3b:55:83:9e:4b:f3:0a:e0:72:4f:10:66:9d:3c:f1:53:87:68:
ce:5d:4a:02:ab:54:ea:92:37:4c:02:06:f1:a5:90:c7:58:93:
6b:18:21:0c:88:4c:81:5d:29:1a:01:19:59:a9:37:b2:2a:39:
9d:48:eb:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n37ZzgIg+E/Lqd+rkE6/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDlkNjFmODNlMGQ3ZTgzMDhhNmNkZTRkZDMxNWRkNzU3
NTZjMDMwHhcNMjYwMzI2MDIwMTA1WhcNMjYwMzI3MDIwMTA1WjAzMTEwLwYDVQQD
EyhhYjA3NjRmNTFjNzUyMzFiZjhiNTM0MThmMDhjYzFmY2FlMDE0NjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwhpO9a/oVI+XagE9I2mtsj90e7Y
ixYF4Rpbr/aALAUNJDSujIAaxrGZw0iCbo/BwOHIlUAIUcsBtCTFivpLlns3GGg9
RU74x0t8H8gxXuTg6G5ykdIE//SExrPX6r2me6Ez/Z6bPDhuV9m+HQ5G2+lLGzAE
xc0mSD16RzlUxr2jTibSJqJJigsLrOI4Vmvpi++40lLNApMBVHIweGFOpwaUYVBb
J2yqPSY6bWhqk+C64M5iY+HFflwJRYt/icxktNUJpueA+dgH+6T2lzPucItNQ1sC
czeq0QGHmHjSWgDedA5ZL4Q4P7rUbAYc23MUaO+GhbR/1g7kJXH2Ie536QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsHZPUcdSMb+LU0GPCMwfyuAUYNMB8GA1UdIwQY
MBaAFIzZ1h+D4NfoMIps3k3TFd11dWwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMt
ZDJkNTc4NDNhMjdkLzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMtZDJkNTc4NDNhMjdk
LzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/Y4kKSF
B1Kuwu9WAFTmQFjBZPjpcyyIh3w22oOrETdXkgaebyWMAIAl+iGEioYPXwW2tlvt
3DKDHPXuHGnyOhLSfmlkKXE0RBTWUxm+dz4KZck5V7469Q/wz2B3BFekq+5h4xcm
sC3LqMN7M5Yvomni31fyouI4hVCRTn22SvmWkDmY8YzO+yUqwgZzKJMRF/3XvTzj
ZyNEVmubVxymXFxFa/NsbfH4rAUG2Tevpj2PJXubIjhPW+Af+yp9+nd9Pp8Gi7ka
O1WDnkvzCuByTxBmnTzxU4dozl1KAqtU6pI3TAIG8aWQx1iTaxghDIhMgV0pGgEZ
Wak3sio5nUjrlg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:03 2026 by rpki-client