Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: DfxJrv12QcbKsuRbMOs8pJU1Pn0r8s0lk57eT0S8OlE=
Subject key identifier: 3D:EF:17:9A:21:20:E0:0C:CB:96:3E:65:E3:40:4D:1A:A4:B3:CA:58
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 019D26CCE9B94B0B76E93DAB6895B7608849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 154C
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: _Jb5MQL-SwYsiaZAEwlAEPZaGwY.roa (hash: MIMB2XZpuhd7zAatrimOYWSebI/zGxcY2dCKE8yVj7Q=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: v88b59z3j1md65As43lZJBjeOaG4iO65uvLhck4oL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e9:b9:4b:0b:76:e9:3d:ab:68:95:b7:60:88:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=3def179a2120e00ccb963e65e3404d1aa4b3ca58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:ab:dc:de:73:0e:30:5c:e4:b3:64:e2:08:
2f:ae:ad:6d:aa:5e:ae:41:ab:43:54:ec:4f:05:3b:
e9:cd:59:68:ec:cb:ae:0d:37:30:d2:82:71:75:86:
65:5d:62:75:e6:76:ce:33:92:1d:91:c4:7c:96:e2:
92:aa:78:c0:0b:3b:ac:64:b2:39:8e:74:00:32:05:
32:8c:2b:1f:6a:b4:d3:00:1b:48:23:65:06:99:af:
7d:f6:a1:58:5a:cd:69:4f:bb:96:45:35:14:16:82:
ef:87:e1:6d:de:4f:02:8b:56:4c:c5:b5:e3:61:1b:
51:e6:62:97:04:09:97:11:c1:2d:a9:a5:ac:ec:d9:
d4:a1:20:aa:9d:d4:a8:e9:63:b0:59:3e:b1:10:0a:
a8:25:7c:24:be:8e:d4:d8:c0:bc:a1:f1:93:3b:5e:
a8:88:c5:b3:40:9a:58:10:8c:70:41:0e:ef:dd:e9:
df:7f:ec:ac:ea:53:b3:4a:47:c5:16:ea:a5:73:10:
72:27:df:60:a5:d3:9b:a9:85:2f:c2:ae:ef:ff:1c:
c0:74:81:52:99:b3:5f:a8:f6:20:4d:02:ec:66:1f:
54:d4:2f:2e:bd:96:c8:6f:97:73:f3:ef:a8:c8:1c:
ca:9a:b1:ac:c9:30:5c:cb:63:ec:54:fa:d3:53:d2:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:17:9A:21:20:E0:0C:CB:96:3E:65:E3:40:4D:1A:A4:B3:CA:58
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:53:d4:d6:53:27:09:79:da:a3:27:d1:de:e0:c6:06:79:49:
4c:06:17:0b:4f:88:bd:e0:43:0b:9d:29:97:87:04:c7:3c:61:
df:f2:42:53:fa:f4:7f:b2:b0:c9:aa:ba:49:07:57:3f:fe:d9:
61:63:5e:19:02:76:d0:7f:18:e4:da:26:cc:97:fd:6c:32:79:
d4:b7:1c:e6:be:22:50:fa:56:3e:d8:a0:b5:ec:6d:73:4f:b7:
15:8a:c1:45:5b:47:dd:e1:f6:03:80:2b:54:ea:58:36:73:60:
85:79:bf:1e:37:6a:93:d2:b0:b9:fa:be:73:8e:4c:7f:b7:86:
ae:33:cb:7e:9e:a4:d0:e7:ec:f5:b4:e4:92:64:36:5b:68:b4:
e1:c6:04:72:6d:2b:ec:6c:4b:ea:ac:a1:1a:78:c3:57:86:56:
5d:46:bb:81:9c:12:a4:49:8d:d5:9f:e0:e9:8d:30:3f:07:3f:
6e:7d:31:3a:38:7d:d8:8d:f4:8e:e6:c6:c1:e9:34:d4:53:61:
4b:69:3b:6a:d7:b6:3f:96:e7:5d:03:02:5d:c0:4a:68:ea:9d:
d6:ec:45:f1:e2:93:60:39:75:ed:8d:53:e2:e1:4c:fd:af:5c:
e4:50:77:3a:62:67:99:83:bc:ea:cb:6a:87:5a:3b:14:60:a3:
10:4a:8b:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOm5Swt26T2raJW3YIhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDg0ZjNhODBiNGExZGY0ODExNjQyYWFiOGQ3OTUxNjM5
YTJlNTgwHhcNMjYwMzI1MjEwMDU2WhcNMjYwMzI2MjEwMDU2WjAzMTEwLwYDVQQD
EygzZGVmMTc5YTIxMjBlMDBjY2I5NjNlNjVlMzQwNGQxYWE0YjNjYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnyr3N5zDjBc5LNk4ggvrq1tql6u
QatDVOxPBTvpzVlo7MuuDTcw0oJxdYZlXWJ15nbOM5IdkcR8luKSqnjACzusZLI5
jnQAMgUyjCsfarTTABtII2UGma999qFYWs1pT7uWRTUUFoLvh+Ft3k8Ci1ZMxbXj
YRtR5mKXBAmXEcEtqaWs7NnUoSCqndSo6WOwWT6xEAqoJXwkvo7U2MC8ofGTO16o
iMWzQJpYEIxwQQ7v3enff+ys6lOzSkfFFuqlcxByJ99gpdObqYUvwq7v/xzAdIFS
mbNfqPYgTQLsZh9U1C8uvZbIb5dz8++oyBzKmrGsyTBcy2PsVPrTU9Ik9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3vF5ohIOAMy5Y+ZeNATRqks8pYMB8GA1UdIwQY
MBaAFI8ITzqAtKHfSBFkKquNeVFjmi5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2Mt
YjBmNmNjZDQ2Mzg3LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2MtYjBmNmNjZDQ2Mzg3
LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVPU1lMn
CXnaoyfR3uDGBnlJTAYXC0+IveBDC50pl4cExzxh3/JCU/r0f7Kwyaq6SQdXP/7Z
YWNeGQJ20H8Y5NomzJf9bDJ51Lcc5r4iUPpWPtigtextc0+3FYrBRVtH3eH2A4Ar
VOpYNnNghXm/Hjdqk9Kwufq+c45Mf7eGrjPLfp6k0Ofs9bTkkmQ2W2i04cYEcm0r
7GxL6qyhGnjDV4ZWXUa7gZwSpEmN1Z/g6Y0wPwc/bn0xOjh92I30jubGwek01FNh
S2k7ate2P5bnXQMCXcBKaOqd1uxF8eKTYDl17Y1T4uFM/a9c5FB3OmJnmYO86stq
h1o7FGCjEEqL6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:20 2026 by rpki-client