Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
File: jWMLidCyLy69noTeg1EclOOHTws.mft (raw, json)
Hash identifier: 7Jm//qt4HlRBWbSMdlKGL/rbn06Rlffr2PS3AomSQ0Y=
Subject key identifier: 5F:91:BC:89:E3:46:1A:78:22:68:63:E0:9D:94:DA:B5:E8:AE:3C:43
Authority key identifier: 8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B
Certificate issuer: /CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
Certificate serial: 019D333E95EE2D620DF5C52F9379568EDBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
Manifest number: 0342
Signing time: Sat 28 Mar 2026 07:00:32 +0000
Manifest this update: Sat 28 Mar 2026 07:00:32 +0000
Manifest next update: Sun 29 Mar 2026 07:00:32 +0000
Files and hashes: 1: 9yp_xXi4AD9vAWt-qovSVVUqem4.roa (hash: SDA1gIC6xxx6D4XZwQHFf5cE1Jsmp5JZRGUqmhH05I0=)
2: jWMLidCyLy69noTeg1EclOOHTws.crl (hash: hHRByN4bjOwCNYmiZp+6tEgeXa4juMgVOY4TS+catdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:95:ee:2d:62:0d:f5:c5:2f:93:79:56:8e:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
Validity
Not Before: Mar 28 07:00:32 2026 GMT
Not After : Mar 29 07:00:32 2026 GMT
Subject: CN=5f91bc89e3461a78226863e09d94dab5e8ae3c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:a0:71:e0:d0:89:26:b9:5b:d5:03:eb:2c:
a9:ba:0b:19:55:5f:1b:fb:4f:52:63:ca:1d:77:6b:
8f:5e:78:1a:e3:cc:83:c0:f9:a4:bf:da:9a:56:bd:
60:b0:f8:c7:84:d2:3e:85:06:1d:98:0a:a0:da:26:
42:91:8e:27:ea:db:8b:39:f1:e5:05:5b:a4:38:ac:
56:48:e2:af:69:b4:7d:58:11:ed:29:6b:24:10:24:
d8:76:ab:82:87:98:1e:53:fb:d5:d0:67:f6:6e:90:
15:8a:2e:61:b2:3c:b8:b4:de:30:30:8c:ff:50:80:
a5:f6:53:46:48:cc:91:f0:bc:ec:28:e4:01:b2:d0:
03:4c:da:54:01:4e:30:e3:a8:9c:c9:65:a3:03:2a:
3a:80:79:65:4d:25:b0:20:08:f3:35:f1:be:fc:77:
0e:82:60:f6:58:87:3f:6f:90:8e:b8:54:dc:8d:96:
3f:11:36:ea:32:e6:40:4c:ca:23:fe:71:c1:ac:29:
16:55:79:62:77:05:53:28:ab:be:1b:f8:3a:12:e6:
d5:cf:ba:39:2e:0f:2b:3a:a3:69:cf:f8:57:e0:d5:
9d:ba:1f:97:33:c0:e4:53:2f:30:72:63:48:78:ed:
28:b8:35:c6:bd:17:2f:c2:a7:9d:c4:4b:9c:5e:69:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:BC:89:E3:46:1A:78:22:68:63:E0:9D:94:DA:B5:E8:AE:3C:43
X509v3 Authority Key Identifier:
keyid:8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:f3:71:9f:e7:1e:6b:4c:d7:0b:44:fa:4e:d5:ff:03:53:
f9:88:7f:b0:cd:af:e5:c6:63:4a:33:c9:1b:8f:49:00:22:3e:
28:10:3e:95:9a:61:e1:9a:4a:39:0f:9f:95:49:87:f8:7a:32:
a6:08:24:f8:74:81:9d:38:55:e5:a4:90:85:1d:c6:9e:d7:cf:
50:59:3f:b4:65:9c:e8:fd:67:b4:18:49:3d:6d:f1:ac:13:0e:
e8:55:39:b7:de:d6:81:2c:ec:00:5e:79:8c:d7:52:aa:0b:69:
42:d3:2b:f6:3d:c1:2e:e1:7c:7d:51:ec:5f:dc:c8:81:85:f8:
84:c2:1c:70:61:d3:2a:d1:45:9c:9f:3d:b4:6e:e9:10:6c:a9:
c1:b0:bf:87:54:dd:25:99:79:06:00:bf:8b:17:49:0b:be:7b:
4e:4c:59:74:bf:45:b3:70:e1:fb:9b:20:ec:14:cb:75:1f:18:
1e:bd:d1:29:6c:b0:16:d1:33:09:22:ed:f4:d0:23:ce:e5:3c:
f4:93:f2:bd:a4:c5:4b:13:ee:dc:a7:bc:86:95:0d:2c:b6:06:
95:c3:57:08:d0:cc:70:3e:30:4b:96:ee:36:c2:3e:87:e9:a5:
1e:3f:3d:65:7b:e2:4a:36:7d:05:34:69:ab:a4:68:83:dc:13:
94:2b:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:44 2026 by rpki-client