Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: NNtY/plI3f6mUqhfRJeZFGYP79GxR0LG5KdfwsGbrGQ=
Subject key identifier: 76:89:1E:24:41:AB:24:89:C9:34:D9:97:2A:2E:73:47:7B:5C:EA:EE
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019D2A04CB8AF6B7EF949A488EB725B363B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 12:00:50 +0000
Manifest this update: Thu 26 Mar 2026 12:00:50 +0000
Manifest next update: Fri 27 Mar 2026 12:00:50 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: /ikU+4ycU+CNYK6fkwLaF+17a57CXAmdSYmdiJmngM4=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:cb:8a:f6:b7:ef:94:9a:48:8e:b7:25:b3:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Mar 26 12:00:50 2026 GMT
Not After : Mar 27 12:00:50 2026 GMT
Subject: CN=76891e2441ab2489c934d9972a2e73477b5ceaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5c:85:25:a3:a3:78:74:1a:99:64:06:cb:8a:
4a:28:8f:f4:15:34:f4:a9:b3:10:87:a2:33:4b:3f:
79:4c:53:3b:56:e2:b6:85:31:8f:aa:19:bc:27:95:
7c:0f:c2:19:75:67:6e:f6:46:95:c4:83:b5:06:c5:
71:7e:f5:7c:ed:91:ee:62:2f:fc:9f:4b:06:7b:cd:
07:57:77:6d:66:ef:57:4a:30:36:e2:9d:00:77:26:
4b:0f:8b:ef:b4:ce:a7:6b:44:30:c5:21:b2:4f:6c:
c5:14:fe:2a:51:5f:25:28:20:8e:8b:2d:65:a6:48:
21:57:c5:a0:c7:8a:07:8d:63:81:98:de:1c:c1:7c:
5b:0e:e1:95:92:30:80:61:78:89:a9:d8:b5:76:da:
bf:84:d2:33:27:c9:e8:fb:49:c3:81:7f:bf:9f:03:
24:f0:6f:57:c4:e5:6f:9c:9f:5d:39:d0:1b:f2:0e:
6e:9a:ef:c0:46:14:38:e9:37:ec:1b:38:47:35:90:
c1:f5:0d:ba:4c:f4:34:da:82:08:fc:9a:f8:ad:e2:
6a:23:4d:c5:57:7d:81:f8:64:ad:2e:bf:d6:66:b7:
92:0d:cc:2a:f6:c9:3b:11:f4:8c:00:b5:a9:3d:42:
69:cc:9a:33:e2:c2:24:fc:d6:60:cd:4a:f1:cc:76:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:1E:24:41:AB:24:89:C9:34:D9:97:2A:2E:73:47:7B:5C:EA:EE
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:95:3f:54:a9:c8:66:b1:94:8f:e1:eb:7c:c1:bc:b2:97:
99:c5:fa:86:a5:b9:ce:6e:17:f6:e3:db:d1:e4:b9:9e:fe:86:
42:ae:49:0d:45:2f:7b:7d:1d:ae:68:0c:6d:06:7e:cc:d1:f7:
50:92:68:d7:b4:50:c6:04:94:4b:94:01:ad:33:7e:2c:6f:aa:
c4:1e:07:a5:78:53:08:ac:ae:b2:3e:44:b5:1c:ee:4d:d6:d8:
ac:71:00:6d:21:d6:de:70:40:17:2b:db:08:37:2d:24:88:9a:
8d:55:d6:e2:7a:e6:c4:60:53:d4:34:f3:4e:3f:62:d7:48:b2:
f0:e2:df:8c:a3:ad:7a:bb:fe:84:e8:72:1c:55:88:99:7a:dd:
53:98:f2:40:65:70:c9:41:a5:24:f2:41:37:a8:ef:ff:09:01:
56:e5:b4:cb:dc:7d:91:97:56:1b:9b:f2:86:29:04:92:7b:d8:
7d:42:f6:26:23:ed:c7:24:e8:5a:d4:94:eb:12:ab:c9:d3:f8:
84:63:de:c9:2a:91:24:69:fa:23:54:cf:2a:87:0d:ae:43:2f:
49:03:73:c5:4a:bb:00:59:8c:74:22:90:7b:1b:12:32:f9:c7:
12:48:fd:21:21:50:db:97:07:bd:92:5a:a4:9c:06:13:b4:aa:
5b:f2:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:42 2026 by rpki-client