Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: Kuxjg7pvamTi4EqT4V2mOe8gC+FmbgrXe3sndtnF8+c=
Subject key identifier: CA:E0:23:F6:4D:01:E3:03:DC:D8:E4:A6:2D:D7:40:C3:0A:0D:47:8C
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019D3789AD60523F3D7387A103B9C1569CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 03:01:02 +0000
Manifest this update: Sun 29 Mar 2026 03:01:02 +0000
Manifest next update: Mon 30 Mar 2026 03:01:02 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: +9JPFuwnHZlSB5BV9NCS7u81n91EwGVRYKFSC+bTFvo=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ad:60:52:3f:3d:73:87:a1:03:b9:c1:56:9c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Mar 29 03:01:02 2026 GMT
Not After : Mar 30 03:01:02 2026 GMT
Subject: CN=cae023f64d01e303dcd8e4a62dd740c30a0d478c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:31:c4:d7:0f:71:a8:5f:90:f9:0b:34:6f:
03:7d:fa:49:27:6c:9d:ba:66:4b:b6:0a:8b:72:59:
b3:f8:7f:3c:df:41:31:b8:0d:72:1d:99:cb:58:42:
3a:e0:7f:ed:77:0b:6b:43:ac:88:2f:af:69:5c:0a:
02:60:4a:67:7e:ae:58:ce:e9:f1:db:fc:59:54:19:
7c:ea:64:0c:dc:8b:65:c7:1f:72:ec:e7:08:5c:4d:
51:a0:df:b5:6f:f5:8e:07:71:8b:dc:f0:bb:53:ac:
38:72:b2:0f:c0:af:fb:c5:54:2c:73:fb:23:e4:11:
0b:1e:18:9c:16:21:ae:ac:38:4a:c6:b1:c9:62:39:
aa:0c:23:bc:a7:da:94:55:65:18:5a:71:80:bd:6b:
49:47:95:d6:c7:c6:e3:31:37:92:9c:29:6f:cd:61:
d0:a7:97:85:ce:13:1b:be:20:50:78:70:bb:3d:d9:
a9:7a:25:d9:5e:a5:84:c0:99:52:f9:79:15:01:b5:
da:67:44:8a:aa:aa:cf:d8:6e:69:ce:a3:fe:ff:43:
5a:db:c1:9b:07:96:fd:93:b9:6e:7b:1b:c6:e2:9f:
93:ac:90:e0:be:39:b0:df:83:2e:61:61:d1:4c:87:
16:6f:41:51:ab:00:1f:77:2a:5c:7d:e9:0a:bd:f9:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:23:F6:4D:01:E3:03:DC:D8:E4:A6:2D:D7:40:C3:0A:0D:47:8C
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7d:02:0b:e4:53:0e:75:36:6f:0d:35:de:63:ec:a5:de:30:
d5:96:c6:33:c3:d0:09:fd:60:bb:79:d9:d7:86:b1:34:ab:65:
1a:84:56:b2:d8:2f:b3:39:c3:dd:28:06:81:45:d8:6a:c0:a1:
9f:b3:d4:94:7a:96:51:3e:2f:de:cd:f0:7e:cc:a3:b0:54:5d:
05:c1:f5:34:7d:1e:0f:94:04:4f:d7:2a:bf:56:b7:f8:a1:b8:
ff:78:3b:8d:de:12:d0:6c:dc:74:9e:f8:47:6e:82:35:40:90:
b1:cc:ef:42:03:bd:05:58:8c:c4:07:e2:8f:08:43:b6:88:bc:
4c:83:a7:d4:2c:32:18:4a:55:33:42:b4:32:ba:66:4e:3d:d5:
47:e7:de:fc:20:a5:3e:df:2e:a9:e8:71:0d:e2:14:ba:b7:20:
47:01:27:c7:92:59:32:9c:87:73:94:af:bf:a6:d8:fe:5c:9f:
4a:3e:09:5d:4d:13:26:15:52:14:c0:3a:7b:4f:1b:24:e7:3a:
5a:9b:7d:19:b3:7e:0c:49:f5:24:6c:d7:2c:67:4a:5d:38:dd:
33:1a:47:e4:34:c9:cc:93:80:71:9c:96:eb:12:e4:6f:b3:ec:
e1:f3:2e:bc:f6:fe:53:1b:50:bf:29:ef:36:d0:ec:02:fb:84:
43:39:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:30 2026 by rpki-client