Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: 3WPlPx3JEKSUM4kmJznMzND/33ECVGCEOJ1S/a9I8To=
Subject key identifier: 24:72:49:AC:B7:E7:78:80:C9:70:17:16:E9:47:F8:D7:87:B4:E3:1F
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 019D371BF6EEB22F83E380162EB7DB63087C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:01:12 +0000
Manifest this update: Sun 29 Mar 2026 01:01:12 +0000
Manifest next update: Mon 30 Mar 2026 01:01:12 +0000
Files and hashes: 1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
2: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: oe6GYR9gzpdn38ySgX6F1aPnadmnME0Fa2stGb9oRFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f6:ee:b2:2f:83:e3:80:16:2e:b7:db:63:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Mar 29 01:01:12 2026 GMT
Not After : Mar 30 01:01:12 2026 GMT
Subject: CN=247249acb7e77880c9701716e947f8d787b4e31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:91:ca:ba:97:1f:cc:c4:97:9e:51:6a:d1:fc:
49:81:c9:b9:ea:32:80:45:21:9f:0c:cb:d6:69:ba:
24:73:f8:f4:d5:b7:2c:95:ea:e2:39:34:20:49:03:
0c:f2:e5:29:9f:04:54:3d:1c:06:47:b8:5a:34:56:
d7:06:4f:ae:76:23:74:2c:8f:12:77:31:62:a1:4b:
cb:71:3f:bd:2f:ad:79:fe:87:61:06:ea:53:4e:7b:
37:f0:75:fe:60:d5:1d:b3:de:c1:10:9c:46:a1:a5:
22:20:f1:dd:58:ee:b9:ec:e1:31:e8:ec:94:3a:b6:
b4:a3:9d:b4:f3:62:de:1a:47:e7:66:d1:15:94:6a:
97:31:09:fa:a0:6b:07:bb:8f:45:bf:b5:cd:91:0c:
3e:ad:a1:1a:f4:9a:d0:74:38:11:47:b3:3f:2e:1d:
35:da:31:ad:a6:17:cd:61:51:a0:2b:47:81:84:97:
3f:ae:25:18:a4:e2:fe:b3:c3:dd:c7:a6:e0:ce:63:
0a:3e:54:a7:13:1d:32:1c:98:f5:7c:8c:b9:11:ce:
bd:70:80:0b:a9:6c:87:53:68:6a:b9:ec:6a:91:f8:
23:63:c3:2c:44:0f:42:36:d4:d8:ba:df:da:b3:ca:
88:f8:7f:99:69:c2:75:e6:c1:35:3f:e9:9e:bb:23:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:49:AC:B7:E7:78:80:C9:70:17:16:E9:47:F8:D7:87:B4:E3:1F
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:b6:11:b5:a8:9c:e2:0b:07:76:b3:75:ef:1d:43:33:e9:3b:
51:dd:3b:55:d7:c9:bf:fe:14:14:d9:55:f6:ae:62:8b:83:bf:
e7:02:c5:7f:37:32:60:12:28:34:bf:d3:05:44:c3:f2:df:c0:
87:e3:e7:49:94:a9:dc:ae:ae:d6:0e:d8:92:8f:07:ea:67:f9:
0e:e4:38:84:8e:3d:a9:88:14:ec:6c:d2:92:d2:d6:f4:43:0c:
41:0d:a3:d0:5b:dd:59:2f:ce:6e:3d:cb:99:7d:13:6f:37:9b:
14:28:f7:13:10:2a:a6:d3:40:d1:23:14:f0:57:20:fe:75:70:
38:b1:09:81:b3:a1:28:ef:dc:1e:b3:2f:63:0f:a9:de:02:b6:
d0:aa:0b:ab:f4:95:5b:b1:8d:ee:6e:0c:a5:4d:12:76:21:74:
19:a5:1a:a1:9b:5c:0e:02:bf:58:3c:49:82:28:01:e7:e7:99:
88:65:40:f8:0d:ed:b3:f7:d9:11:0c:a7:64:65:ce:47:24:44:
d4:a0:e4:25:31:9a:c6:05:0f:7a:44:b4:e2:e4:97:98:68:b0:
02:27:69:57:a6:e9:69:e2:66:51:ea:87:07:58:52:26:56:74:
d2:ef:9c:87:5c:3e:e6:cd:46:6e:9b:15:e9:e0:3f:45:e0:53:
d3:a6:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:19 2026 by rpki-client