Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: VVUUXQe0fVcVK72YBXAAqCO8EaSSVp6Mto9biTR4Ac0=
Subject key identifier: 7C:1D:8F:17:E2:CB:12:24:7F:A7:9A:32:10:87:A5:B4:F2:21:1E:0B
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 019D394104FABA144651A4D32425D7CC5D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: 436Hd-S_BVnAB9wLmGOzp-XnSjg.roa (hash: llw/o1VUWMw1Xmtw7UPct5EjQN+vJpnFvT25Me1d82w=)
2: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: LFSdV7ARUk+XtRaH2ffe8topAlDupVdXMLYC7KHOYGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:04:fa:ba:14:46:51:a4:d3:24:25:d7:cc:5d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=7c1d8f17e2cb12247fa79a321087a5b4f2211e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:e1:14:96:0e:be:c6:b3:41:3e:c0:f0:89:
0f:0b:3b:d6:e5:74:38:45:65:44:0f:26:11:e9:6e:
27:2f:1d:7a:b3:7c:94:e8:69:2a:0c:32:d3:dc:d0:
42:28:6e:65:89:f0:cb:df:23:cd:77:5d:39:d1:ca:
0d:2a:55:c6:bd:ba:0d:ee:b1:a0:57:b4:d8:83:bf:
0e:91:7b:71:96:86:75:e4:a2:f6:6a:b0:d6:c8:5c:
cc:08:1d:f2:27:ec:d4:75:bc:41:e7:71:2e:6e:c6:
ea:11:74:84:7f:3e:43:14:d7:55:ba:ec:bd:6f:0a:
e2:e2:f2:d9:4b:3d:a3:0d:2b:10:97:21:d0:53:f0:
69:72:15:ca:1f:51:da:91:2b:51:a1:21:2d:04:f6:
79:f9:e6:f0:c6:57:84:51:eb:4b:59:68:da:4b:a0:
ad:67:f6:e7:43:a0:27:19:d9:f5:df:b4:5a:59:7f:
2e:2d:43:27:a5:9c:99:f4:5b:27:ee:0a:6e:58:71:
51:4f:8c:01:28:e8:f6:64:6a:5b:4e:d7:ff:50:d4:
c6:07:58:73:00:27:98:cb:09:af:6a:11:fb:7f:c9:
24:1e:7d:fa:d9:6d:97:02:aa:5d:91:12:40:e2:37:
42:75:19:05:a7:4e:bf:58:ae:2c:b6:40:a7:07:bc:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:8F:17:E2:CB:12:24:7F:A7:9A:32:10:87:A5:B4:F2:21:1E:0B
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bc:8a:4a:16:db:9a:a7:86:46:cd:48:8e:62:87:b1:d7:fe:
24:e5:14:b2:08:eb:8e:86:87:72:13:54:f5:f7:cf:2c:9c:1c:
b1:de:18:51:ea:9d:cf:f5:ec:13:6c:9d:49:36:e8:ce:ce:f8:
72:ee:dd:75:b7:23:ef:39:32:64:46:b5:8d:43:c0:b3:6c:2f:
9a:0b:36:e4:d0:16:8e:b9:90:2b:f5:33:10:70:fb:b2:ea:99:
23:bd:23:fd:55:90:32:42:53:e4:6d:43:88:a7:b4:4a:0e:a8:
09:7a:b6:96:e9:a6:7d:69:60:f6:3f:dd:d4:52:ee:23:3b:d1:
a5:70:2b:69:cf:d1:4a:5a:5c:57:c6:48:ff:57:06:4c:f2:ce:
b7:b2:a8:e3:88:6e:95:37:28:17:f8:96:e4:87:e9:01:55:7c:
25:8f:52:a9:c0:05:ee:ea:e8:ac:25:a8:e8:9e:b7:e1:77:95:
03:8f:97:64:12:59:00:4f:c8:bc:89:74:af:ca:44:a8:32:c9:
c5:7e:f1:64:52:36:86:2a:c0:5d:5e:13:8e:05:cc:0e:2a:50:
9a:a4:3e:af:d7:91:45:aa:50:b5:27:b9:e5:16:0c:82:1e:00:
69:34:87:b9:c6:b5:92:b9:9b:18:37:e5:44:5b:e0:c7:03:ea:
02:da:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:16 2026 by rpki-client