Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: dKsCFZ0EQxHBcaG4Puegpr7qir+47V/vuS4425YHJxE=
Subject key identifier: 84:42:F6:21:91:30:92:AB:DF:77:F0:4E:C9:B5:81:E2:F7:85:99:89
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019D281645A4706C678BE559C6EC6A225F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:00:41 +0000
Manifest this update: Thu 26 Mar 2026 03:00:41 +0000
Manifest next update: Fri 27 Mar 2026 03:00:41 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: B/1qg+L2wXB9HC7pCDinH37Ufra1Ybtloi76dXQLTWw=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:45:a4:70:6c:67:8b:e5:59:c6:ec:6a:22:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Mar 26 03:00:41 2026 GMT
Not After : Mar 27 03:00:41 2026 GMT
Subject: CN=8442f621913092abdf77f04ec9b581e2f7859989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:87:9c:d0:21:9e:59:00:6e:34:18:97:99:
b9:d8:93:e3:bd:58:8e:c7:4c:15:09:31:45:17:27:
96:41:bb:ce:d6:8f:f0:e9:30:29:99:2d:4f:38:47:
58:db:09:23:10:9b:6a:48:ee:05:0d:00:9f:6d:bd:
98:94:d7:43:17:0b:5b:72:90:0b:7e:59:18:30:9a:
b5:f3:f9:46:b6:ee:47:a1:01:a1:26:6f:8e:16:9a:
cb:1f:3a:e0:c4:64:eb:b0:61:f7:09:f7:26:30:76:
b0:83:90:4a:14:8d:a8:f3:52:18:9c:e2:69:e7:6e:
33:3d:c7:f4:f6:ea:cf:d0:89:e6:73:75:22:b3:d6:
c2:39:c3:83:99:1e:ed:ad:75:9e:f4:49:f7:93:b5:
89:48:9b:87:0a:4f:29:64:75:43:5b:b8:bf:4b:da:
98:41:68:28:31:f8:2b:f7:d3:cd:49:1d:8f:1b:5d:
6c:65:79:44:05:cf:77:0a:0b:b0:91:7c:e2:99:b2:
81:b0:ee:83:5d:40:9b:14:c3:5f:87:37:9e:3f:96:
47:04:7c:e3:d1:cd:04:69:d2:09:79:d6:d0:63:d6:
94:fd:d5:15:96:f1:80:0b:3a:33:d5:38:13:4e:39:
96:89:7a:ca:ba:79:4e:62:d0:75:26:10:b4:5b:7a:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:F6:21:91:30:92:AB:DF:77:F0:4E:C9:B5:81:E2:F7:85:99:89
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9d:12:58:31:70:ea:ce:57:56:c7:d3:87:b4:27:ae:01:7c:
e1:08:35:5a:8e:89:79:b1:a1:ec:45:52:bb:80:72:9d:2e:d0:
30:c4:a5:68:18:dd:ed:da:df:3a:6d:82:01:c2:54:77:78:37:
f8:7e:e7:19:ea:53:e6:43:fd:62:77:fd:eb:dc:6f:14:41:4f:
4c:e6:f2:67:2f:cc:e5:00:3e:a0:0f:7c:74:61:e0:b1:8d:29:
16:5c:35:be:c9:74:f6:d2:ad:7e:31:5d:99:9b:43:8e:b5:d8:
70:4c:f9:f9:20:81:28:17:6b:bf:ca:91:81:76:c9:22:70:b4:
fb:20:05:30:6f:89:3c:e4:bd:8e:60:9b:e4:36:7e:fc:b0:a2:
5c:ec:ea:a4:e9:75:a1:bd:b0:e2:39:61:71:a4:71:e3:3e:6e:
34:aa:d5:34:fa:eb:cc:06:e4:9a:d4:1e:df:84:e3:b9:70:7a:
1b:88:95:9f:42:45:27:53:e4:15:18:6e:85:6b:e5:64:24:03:
4c:4e:eb:f9:47:ae:8e:c1:0d:9d:f9:08:bd:51:44:53:7f:3f:
39:d5:b4:5d:18:3d:c0:79:98:8f:9a:9d:23:ff:c7:88:c4:08:
ec:40:11:a4:3f:37:7a:c8:53:95:3a:c8:91:03:00:00:bb:59:
0c:6c:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:25 2026 by rpki-client