Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: 7ioc4fP8Jf30//Uu9dBDOJ8yU6vYDuws9n9TVhrA3Tk=
Subject key identifier: FA:E8:BE:DA:3D:67:B9:B8:A4:56:B2:1E:85:A1:16:04:67:C9:42:EF
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 019D2961493A8977021A6FDCD667C400FA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:14 +0000
Manifest this update: Thu 26 Mar 2026 09:02:14 +0000
Manifest next update: Fri 27 Mar 2026 09:02:14 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: Pz/cm3/P5K1g+XJX3Wciw9yqugQC/7QiPgF3MDXKhqs=)
2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:49:3a:89:77:02:1a:6f:dc:d6:67:c4:00:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Mar 26 09:02:14 2026 GMT
Not After : Mar 27 09:02:14 2026 GMT
Subject: CN=fae8beda3d67b9b8a456b21e85a1160467c942ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:78:51:18:f6:2c:13:3e:c5:e7:ec:39:30:
05:77:b2:41:1e:3e:4d:93:ff:b7:a7:65:93:f1:94:
92:8c:9f:41:5c:ac:77:59:2a:b4:39:b9:7e:de:80:
f8:73:4a:fa:70:7d:ae:f8:37:bb:11:f9:d2:14:40:
e5:c1:af:a1:1b:59:3a:6a:63:d6:ac:9d:73:74:ed:
3a:02:20:e1:07:8d:00:da:37:4d:ca:d3:3d:4b:fb:
14:1e:20:83:5c:0b:d0:c8:1c:28:48:d2:ea:ea:f3:
9d:7f:bc:1f:04:45:e5:a5:d6:a8:41:35:94:35:56:
2e:29:e2:28:c2:8a:94:b9:e2:43:2c:60:5c:45:84:
7f:d6:ff:4f:31:e5:5c:0e:83:46:a2:51:cb:0c:68:
32:13:f0:23:cd:8c:30:0a:31:3c:1a:54:6d:48:f8:
81:3b:b4:ff:db:ef:ff:23:6e:ba:fe:f3:9d:e7:ce:
6f:d6:a0:96:14:aa:23:81:4f:87:92:40:83:96:20:
4e:fc:99:f3:b7:7e:0c:8c:0f:4c:cc:d7:2d:80:19:
d3:1b:3a:b6:2c:ce:71:c5:5f:c0:82:dc:2c:9b:72:
0a:12:58:d4:70:4d:8c:1b:a0:62:98:da:ed:f8:d3:
52:27:f1:fd:4d:29:85:51:50:41:3b:eb:56:57:39:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:BE:DA:3D:67:B9:B8:A4:56:B2:1E:85:A1:16:04:67:C9:42:EF
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d3:b3:a0:4a:54:76:b0:ab:e2:90:ea:bc:b9:7b:43:b3:17:
25:37:46:ea:0d:07:05:ec:d6:78:ae:11:14:25:8a:09:17:26:
75:cf:97:63:4a:c8:86:6f:5d:6c:8b:f0:3e:8e:6a:0f:cf:b2:
10:66:65:41:0b:4d:af:b0:61:ce:4d:1f:7f:cd:99:a0:e7:5c:
83:39:6a:ab:a4:44:6f:0a:9f:1a:00:42:eb:da:86:03:b8:75:
dc:a9:f0:2b:5c:1d:eb:9d:bd:e7:a2:53:1b:b1:12:82:df:01:
4a:38:83:52:bb:88:30:e8:ca:dc:9c:71:d2:ef:25:ec:aa:95:
7b:42:04:a4:90:f8:f9:ab:5b:2f:c1:ec:ba:b2:47:82:75:0f:
8a:ba:0b:f3:53:2d:cd:9c:e1:43:3b:6b:5a:25:50:c6:44:fa:
cb:fe:6f:ef:89:13:b7:42:94:7b:4b:09:39:e6:cd:88:e3:9c:
ad:7c:cb:73:8a:dc:51:a7:cd:f3:08:4e:2a:99:2a:c3:22:29:
67:28:98:27:99:3a:26:3a:24:c2:52:40:28:2f:04:64:a7:e3:
4e:7c:99:c5:75:e3:ca:6e:2a:cb:0c:2d:1a:4b:68:4a:16:4b:
84:c9:b5:55:98:8f:ca:c8:a2:38:a2:02:45:83:a9:74:01:97:
d6:37:2b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYUk6iXcCGm/c1mfEAPppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NmJlMTc2YjMxM2UxYThhMDUwZjY3MGFmNTc2NzcxYjY1
NWQ2MTEwHhcNMjYwMzI2MDkwMjE0WhcNMjYwMzI3MDkwMjE0WjAzMTEwLwYDVQQD
EyhmYWU4YmVkYTNkNjdiOWI4YTQ1NmIyMWU4NWExMTYwNDY3Yzk0MmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32h4URj2LBM+xefsOTAFd7JBHj5N
k/+3p2WT8ZSSjJ9BXKx3WSq0Obl+3oD4c0r6cH2u+De7EfnSFEDlwa+hG1k6amPW
rJ1zdO06AiDhB40A2jdNytM9S/sUHiCDXAvQyBwoSNLq6vOdf7wfBEXlpdaoQTWU
NVYuKeIowoqUueJDLGBcRYR/1v9PMeVcDoNGolHLDGgyE/AjzYwwCjE8GlRtSPiB
O7T/2+//I266/vOd585v1qCWFKojgU+HkkCDliBO/Jnzt34MjA9MzNctgBnTGzq2
LM5xxV/Agtwsm3IKEljUcE2MG6BimNrt+NNSJ/H9TSmFUVBBO+tWVzkHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFProvto9Z7m4pFayHoWhFgRnyULvMB8GA1UdIwQY
MBaAFCVr4XazE+GooFD2cK9XZ3G2VdYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMt
ZTBiYWM0MTYxOTUzLzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMtZTBiYWM0MTYxOTUz
LzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdOzoEpU
drCr4pDqvLl7Q7MXJTdG6g0HBezWeK4RFCWKCRcmdc+XY0rIhm9dbIvwPo5qD8+y
EGZlQQtNr7Bhzk0ff82ZoOdcgzlqq6REbwqfGgBC69qGA7h13KnwK1wd652956JT
G7ESgt8BSjiDUruIMOjK3Jxx0u8l7KqVe0IEpJD4+atbL8HsurJHgnUPiroL81Mt
zZzhQztrWiVQxkT6y/5v74kTt0KUe0sJOebNiOOcrXzLc4rcUafN8whOKpkqwyIp
ZyiYJ5k6JjokwlJAKC8EZKfjTnyZxXXjym4qywwtGktoShZLhMm1VZiPysiiOKIC
RYOpdAGX1jcr7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:35 2026 by rpki-client