Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File: JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier: fb0DdaBj6v4vlG8cMnng1lNPWnoK8sWPDkAOdR+jhbM=
Subject key identifier: 12:A3:3A:62:8D:A3:36:AD:1E:33:CD:0C:A6:FE:A4:B5:13:0C:C7:5E
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 019D28BB77CB16EB5B5E69CF0B01D2D3FD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number: 16DF
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: 4TGnLYEk2o84EXSVHZJsKs8eOYU.roa (hash: zS90q7pX+aMNCZ23RTm2yQdhsha5/tNAAscjexUhpvA=)
2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: ZGHfXcQje9KYroZ1mSRhci9q0dt1Sk9/kpgDgNlMh38=)
3: Y4BXFDHCLhnrxzHHYEUdyNjKceg.roa (hash: RRzC1DJD9tEvba4nsazNebkYMpHPPZr745SZVq6hx5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:77:cb:16:eb:5b:5e:69:cf:0b:01:d2:d3:fd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=12a33a628da336ad1e33cd0ca6fea4b5130cc75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:d4:e4:3b:22:a8:fd:b6:26:aa:bc:47:f5:
12:f5:82:6a:b2:41:66:bd:6c:7f:aa:1f:99:9d:25:
8e:da:a9:74:90:e3:05:33:43:ce:8a:79:ea:40:4a:
aa:19:87:89:6d:54:d7:bf:d0:46:03:56:b3:6f:e5:
ae:4a:f4:5b:bb:36:e9:9a:fa:37:23:a9:dc:59:fb:
99:94:3a:d0:72:68:db:b8:e8:c8:b6:18:f3:58:7b:
5e:98:59:26:92:6a:5a:8a:ae:83:f2:70:93:7c:7e:
5f:1a:34:52:5d:c8:ca:d5:42:e9:c2:d2:e3:a5:d9:
59:02:36:3d:d9:c7:2b:58:68:06:de:a5:30:f6:53:
80:7e:99:01:f4:8f:6a:ed:49:f4:8b:b9:ca:eb:da:
4a:86:02:29:09:05:bb:8e:29:3c:ba:5c:46:61:71:
4e:52:b1:bc:83:c5:91:bf:0f:ba:a7:64:3e:81:8b:
4a:78:05:9a:9e:bd:29:f1:01:00:f4:c4:86:df:f4:
02:21:9d:47:86:c1:29:09:b3:67:55:01:60:86:24:
ff:b7:ad:05:aa:81:67:0a:e7:03:7b:13:0d:52:9a:
d4:08:99:c4:e5:e3:92:10:6c:a6:bf:d0:f9:6c:03:
e0:0e:83:14:22:25:bc:62:fe:7f:b0:13:4d:e1:ce:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:3A:62:8D:A3:36:AD:1E:33:CD:0C:A6:FE:A4:B5:13:0C:C7:5E
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:db:3f:c9:81:d2:b9:a3:e5:b0:19:e4:6d:b8:37:e4:ca:ab:
fe:2d:8b:da:4c:99:61:29:24:d6:5c:f4:41:7c:0c:09:43:a4:
31:d1:21:8d:42:65:87:99:58:54:45:08:89:9e:c3:0d:49:60:
c1:7d:f9:d2:5d:dc:f0:75:b0:28:9b:3a:db:84:bd:c7:67:d2:
da:2c:68:2d:96:ff:dd:c9:3d:e8:16:a9:b7:d9:54:5e:c9:0f:
e5:96:75:01:6a:f7:f4:9c:20:a0:7e:81:7b:22:33:63:82:91:
17:bd:58:ea:04:56:0a:8e:b4:50:55:4e:b8:1d:35:fe:76:d6:
10:25:a5:1c:e2:38:03:f3:e5:eb:e1:aa:ef:73:55:ca:94:52:
de:4c:2f:aa:b5:fd:63:01:21:6c:79:d0:d2:12:bd:85:c8:78:
19:b9:bd:5c:a4:6c:5c:f4:1a:3a:3c:f9:74:d4:2d:fd:a0:6a:
72:97:a9:43:b6:54:6d:24:e1:5b:3d:05:14:fb:08:57:29:49:
ed:26:79:a4:c7:01:37:50:b2:8e:4e:f6:ab:06:55:b4:9f:d6:
3d:7f:b8:38:0a:7e:2b:1f:f9:3c:a1:03:f4:d0:52:7a:18:05:
68:b6:34:55:d4:2b:d3:72:3b:1f:8b:d7:62:80:01:39:4a:ff:
57:4c:e9:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3fLFutbXmnPCwHS0/1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjQ1MmEzNDIwZjRmMThkZmEzYTE0ZDI2YjMzNDhmZGZj
ZjNkM2IwHhcNMjYwMzI2MDYwMTA3WhcNMjYwMzI3MDYwMTA3WjAzMTEwLwYDVQQD
EygxMmEzM2E2MjhkYTMzNmFkMWUzM2NkMGNhNmZlYTRiNTEzMGNjNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VjU5DsiqP22Jqq8R/US9YJqskFm
vWx/qh+ZnSWO2ql0kOMFM0POinnqQEqqGYeJbVTXv9BGA1azb+WuSvRbuzbpmvo3
I6ncWfuZlDrQcmjbuOjIthjzWHtemFkmkmpaiq6D8nCTfH5fGjRSXcjK1ULpwtLj
pdlZAjY92ccrWGgG3qUw9lOAfpkB9I9q7Un0i7nK69pKhgIpCQW7jik8ulxGYXFO
UrG8g8WRvw+6p2Q+gYtKeAWanr0p8QEA9MSG3/QCIZ1HhsEpCbNnVQFghiT/t60F
qoFnCucDexMNUprUCJnE5eOSEGymv9D5bAPgDoMUIiW8Yv5/sBNN4c5WxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKjOmKNozatHjPNDKb+pLUTDMdeMB8GA1UdIwQY
MBaAFCVkUqNCD08Y36OhTSazNI/fzz07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTct
ZjM4YjI4OWZmOTY5LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTctZjM4YjI4OWZmOTY5
LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNs/yYHS
uaPlsBnkbbg35Mqr/i2L2kyZYSkk1lz0QXwMCUOkMdEhjUJlh5lYVEUIiZ7DDUlg
wX350l3c8HWwKJs624S9x2fS2ixoLZb/3ck96Bapt9lUXskP5ZZ1AWr39JwgoH6B
eyIzY4KRF71Y6gRWCo60UFVOuB01/nbWECWlHOI4A/Pl6+Gq73NVypRS3kwvqrX9
YwEhbHnQ0hK9hch4Gbm9XKRsXPQaOjz5dNQt/aBqcpepQ7ZUbSThWz0FFPsIVylJ
7SZ5pMcBN1Cyjk72qwZVtJ/WPX+4OAp+Kx/5PKED9NBSehgFaLY0VdQr03I7H4vX
YoABOUr/V0zp4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:55 2026 by rpki-client