Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: R8AtT0BkiD3yoVKBCAtu2rqVJ0aaSig9VDWsX7W2RA4=
Subject key identifier: 3D:BF:28:FA:42:62:FF:39:42:28:77:BD:9F:8C:68:8A:1C:BE:FC:C6
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 019D273A99637254557E6ED19D3DF84D000F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: zIYmturKCcTGjoTRtKQ3XiBQxBOZBdyqdHg+M3joi0s=)
2: yu7FGYZBG0qZPxFlCSBNuH6vubo.roa (hash: TJHmQ5jIZkK8Ij/mX9PCFzWqzWwlwt2c2mMEyeNiyPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:99:63:72:54:55:7e:6e:d1:9d:3d:f8:4d:00:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=3dbf28fa4262ff39422877bd9f8c688a1cbefcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:7e:0a:c6:a8:43:60:1b:a1:32:e2:8e:9d:
b1:d8:1d:25:d3:25:ed:9d:5d:88:85:2d:ce:1e:46:
ff:20:5b:c2:77:a4:78:30:8e:aa:2b:30:b7:49:d0:
f8:d4:45:96:a9:52:f6:e4:cd:f8:be:c6:94:d3:c2:
20:71:d0:69:93:8b:5c:98:11:e5:ca:74:28:e9:de:
5c:20:2e:d4:e7:66:88:9c:86:ef:5b:49:ca:97:aa:
5e:00:02:22:69:54:38:eb:cc:0c:68:6e:86:93:b8:
ea:3b:52:ba:13:d6:89:aa:90:7d:8f:2f:fb:31:c7:
3b:a6:12:b9:11:30:4a:fe:46:1c:d4:2e:c7:4a:b4:
3d:d8:50:14:2b:1f:db:4c:dd:5d:a2:bd:0c:81:4f:
22:d5:e2:d1:26:36:77:80:ac:19:ae:4b:03:00:6f:
5a:2b:46:02:76:ac:6d:b8:82:42:9b:f3:ac:36:aa:
53:26:db:c2:1e:bd:4f:29:c7:00:6a:16:85:20:65:
67:73:75:2f:2b:8f:d4:41:e5:cb:51:d4:fc:c8:1a:
c6:43:8f:1d:5a:05:1a:f3:07:09:41:46:2b:43:df:
f8:18:bb:9a:d6:06:1e:49:8e:c8:ea:7a:e7:e3:af:
2e:7c:6e:22:7d:a5:34:b5:8f:8b:81:04:84:3a:ea:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BF:28:FA:42:62:FF:39:42:28:77:BD:9F:8C:68:8A:1C:BE:FC:C6
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:54:8b:ad:f1:08:df:81:df:fb:ed:c7:19:c5:cc:b6:9b:
f7:7a:2a:a3:cb:b5:ae:7f:ca:fa:e7:cd:9f:92:69:85:3b:76:
63:e4:9a:43:33:54:aa:f9:fa:ae:49:4b:63:b1:26:9e:f0:ca:
dc:61:78:ef:1c:ee:86:e6:ba:b2:b8:84:13:aa:f1:9a:08:c5:
6f:b1:00:bd:18:31:57:36:56:ea:2f:75:06:32:ae:19:23:9b:
ac:86:db:1c:12:57:73:79:05:81:b8:d5:18:f8:25:08:de:f1:
6f:98:9f:dc:f0:9f:71:97:79:d6:39:a7:ba:2b:7b:58:1c:4c:
84:54:2f:51:0c:55:3c:54:44:64:f8:0a:34:93:86:61:16:99:
a3:51:a6:9b:b2:9c:88:4a:42:47:e5:f6:27:ac:67:64:d2:0e:
7a:05:f0:03:25:4a:a2:87:63:3f:3b:0b:c1:ee:3c:9b:e8:d1:
7e:31:5d:07:54:b7:48:07:17:2c:ac:97:b0:58:4f:18:5f:3a:
b8:96:2a:e6:c4:ff:b1:bf:63:b8:6a:27:d2:11:1b:56:f2:38:
8f:b8:ec:a0:f0:fc:27:76:1a:97:66:a2:a8:5c:36:f9:98:4d:
3d:3d:d1:0f:cb:9e:ef:f0:1c:af:be:51:b0:62:81:20:ae:04:
ce:d1:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:06 2026 by rpki-client