Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File: JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier: IdnmmbSeBEMY0yNsLxXqWZXVizGVgBQ3SND4CvgqiXY=
Subject key identifier: 9C:A0:DB:99:D5:83:DA:2D:66:04:72:F0:A9:FE:26:14:63:FD:15:5A
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 01A0EC662BC6EF14AC7D5A501FDB72FD652E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number: 18D2
Signing time: Tue 29 Sep 2026 09:01:53 +0000
Manifest this update: Tue 29 Sep 2026 09:01:53 +0000
Manifest next update: Wed 30 Sep 2026 09:01:53 +0000
Files and hashes: 1: 4TGnLYEk2o84EXSVHZJsKs8eOYU.roa (hash: zS90q7pX+aMNCZ23RTm2yQdhsha5/tNAAscjexUhpvA=)
2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: nPb1ewWtKHhqFFejg4tr6m6/WRqLKVLTk66kSuczJpQ=)
3: Y4BXFDHCLhnrxzHHYEUdyNjKceg.roa (hash: RRzC1DJD9tEvba4nsazNebkYMpHPPZr745SZVq6hx5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:2b:c6:ef:14:ac:7d:5a:50:1f:db:72:fd:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Sep 29 09:01:53 2026 GMT
Not After : Sep 30 09:01:53 2026 GMT
Subject: CN=9ca0db99d583da2d660472f0a9fe261463fd155a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:7b:03:ed:2f:42:fa:aa:0d:1e:44:9f:67:
f7:99:6a:f6:68:cb:52:6b:fc:c5:0a:4a:15:4a:af:
63:97:4e:f6:18:7f:b3:99:9e:4f:a1:6b:1d:42:82:
03:a8:b5:5a:1c:94:ac:00:66:85:6a:81:f7:33:83:
ed:b7:5c:b6:77:91:48:ea:84:19:08:5f:56:2b:7a:
09:e5:4e:33:05:14:70:9c:eb:0d:b7:49:05:4c:b1:
dc:62:40:88:cc:5b:54:47:8e:33:ae:3d:13:40:10:
6b:bf:b9:fb:2e:e6:ae:98:64:b1:ab:c4:80:b0:24:
90:11:e5:40:a4:d7:5b:72:54:1c:8a:92:d2:50:49:
dc:62:8b:cf:8e:fc:b3:f6:ef:fa:53:48:07:e8:84:
ca:0b:9b:35:b8:68:f9:2a:a7:65:db:c0:5e:46:e0:
52:3d:e6:8a:01:e7:f9:b9:45:0c:c9:d6:d9:fc:ca:
6b:8f:76:2f:1f:e5:a0:4a:64:f6:f1:c4:a3:f6:be:
d4:2b:8b:ab:46:aa:c7:79:33:5d:a7:95:9c:07:82:
3d:0c:67:94:66:a6:c3:e3:7d:4e:e7:9b:ce:4a:f2:
01:a4:1b:d0:08:fc:de:d6:eb:37:45:5a:bd:15:97:
21:da:f1:ba:ce:c7:03:49:26:b6:2e:a9:4a:67:de:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:DB:99:D5:83:DA:2D:66:04:72:F0:A9:FE:26:14:63:FD:15:5A
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3c:ef:ec:2c:90:40:f6:1a:fa:37:ce:93:e1:64:da:1a:3f:
3e:2b:4b:3f:de:37:f5:a8:1b:4c:a8:b6:5c:00:0c:5b:18:6e:
1d:a2:d9:68:4b:38:a6:fd:b7:c8:04:94:60:af:27:9a:12:45:
c0:15:d8:42:ed:b8:4b:1c:48:ad:fd:73:3b:41:63:e4:e4:77:
be:7c:d5:95:93:82:53:76:ef:53:20:26:56:30:f9:e6:c8:2b:
af:59:50:65:9e:e8:1d:45:1e:97:ac:34:9a:80:d1:8a:60:38:
54:75:b4:fb:9e:75:58:ca:26:90:1e:4f:e5:8f:b7:ac:6f:ea:
e3:09:40:7c:30:2d:30:f7:e3:d5:01:37:c6:25:5e:87:1c:b1:
75:e0:a3:74:de:78:db:0c:58:c0:93:21:b2:ae:e7:55:86:44:
2d:fd:6c:3f:a9:bc:54:cf:c2:6c:f6:5b:4f:9a:22:e9:87:8e:
15:ba:19:2e:7e:8b:e8:5f:ab:59:7e:4e:b4:84:01:95:3d:ae:
47:d8:ab:af:c3:18:83:0e:64:52:12:97:ca:39:4e:f7:cc:a6:
b6:37:5e:dd:aa:17:d6:60:22:3e:25:d4:f3:ef:3a:00:e3:0d:
bd:4b:7d:bf:f8:0f:e3:86:47:9c:a9:e4:9e:b3:33:bd:6a:22:
84:72:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:01:37 2026 by rpki-client