Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: e5OAtR+AYd92ReggmBmVvA9lYw2sXUBa1J0oyvlYeKY=
Subject key identifier: B9:63:D2:E1:75:90:4D:C1:25:DD:CA:27:A9:47:F3:EC:F0:B0:D8:41
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 019CE5C8C96100E28DACA25BE35368FC8DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 06:01:07 +0000
Manifest this update: Fri 13 Mar 2026 06:01:07 +0000
Manifest next update: Sat 14 Mar 2026 06:01:07 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: VILRH08HX8CR/0dSCTL8XlDq2S2j+zJ9Al5UudfRcPs=)
2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:c9:61:00:e2:8d:ac:a2:5b:e3:53:68:fc:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Mar 13 06:01:07 2026 GMT
Not After : Mar 14 06:01:07 2026 GMT
Subject: CN=b963d2e175904dc125ddca27a947f3ecf0b0d841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:d1:d9:1e:dd:90:4b:e0:08:5a:39:04:e3:
ea:66:b1:4f:95:1a:f3:e3:0b:83:fe:a2:5d:65:ba:
30:ee:00:0d:c4:3c:c0:48:df:f9:4b:49:6b:55:9a:
0d:8f:33:ff:c2:37:0b:c4:c7:c2:03:64:b2:52:7b:
99:d0:40:b8:cc:c0:ca:54:ee:35:1f:ae:af:da:8f:
70:b3:59:75:cc:54:9d:d3:a8:64:5a:02:f5:5c:34:
d4:db:6d:4a:16:24:9c:5d:37:97:ec:03:b8:e5:da:
c8:79:ea:e5:90:a1:b2:35:2d:ee:0d:f0:1f:a3:83:
79:8a:b2:95:70:74:44:de:d3:b5:50:2f:92:38:9a:
9c:48:03:50:7f:75:b1:1b:36:d8:39:5d:a8:13:83:
cf:a9:d9:0f:b9:61:bf:cb:0b:bb:be:af:15:fb:66:
95:80:5a:e6:00:02:02:b3:dc:f6:ac:73:e6:a7:f7:
55:f3:fd:30:c9:98:9d:b8:21:e2:83:76:31:a8:4c:
61:96:6e:d2:5a:c9:54:42:58:9b:bb:3b:e5:6c:4e:
58:aa:d8:f2:c7:85:18:e1:76:fb:35:5c:81:a2:26:
fd:49:99:3b:e8:ab:49:f4:33:23:4f:7a:ba:cf:f9:
6b:ee:bb:f9:53:6d:17:d1:8f:1f:cc:65:57:4c:f3:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:D2:E1:75:90:4D:C1:25:DD:CA:27:A9:47:F3:EC:F0:B0:D8:41
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a9:c5:4a:f3:58:b2:c5:37:02:a4:bd:c3:e1:ef:f0:a0:61:
f4:aa:1b:44:75:83:77:eb:be:ea:8d:b2:9f:4f:72:a0:bb:bb:
2c:52:8b:5e:dc:7a:15:b6:c2:f4:9a:ce:6f:b2:1b:a7:fb:22:
ed:6a:94:2b:13:92:f0:6f:4d:04:c6:84:e0:ab:14:ba:b1:48:
05:e7:81:1b:54:25:7b:e7:34:a9:b1:dd:94:55:bf:f0:76:e2:
68:9a:bf:89:e8:89:5f:95:7c:0d:60:80:96:45:2e:7d:ed:ba:
5c:39:1b:62:d2:04:4f:f0:70:7a:aa:09:0f:b8:ed:fc:e6:a2:
29:8b:e7:40:6a:88:ca:55:cc:7b:b3:b5:2d:5b:3e:ca:3d:03:
6f:7b:1a:d4:b3:0b:59:f3:81:28:03:92:42:ed:3b:7d:a7:c0:
69:0e:b9:6d:b4:ca:b6:22:59:cb:cf:03:c9:9c:38:e3:ae:17:
5f:24:32:85:3e:0b:30:24:44:b7:d1:f4:ed:be:7a:f5:36:3a:
07:fe:5a:fc:8c:e6:f1:d8:ff:17:84:47:62:80:38:11:48:89:
ce:41:e3:1c:1d:71:53:56:82:6b:ea:28:e7:b3:00:88:79:fa:
04:b8:f7:57:c1:86:94:a3:79:c8:4a:10:c7:76:33:cc:e9:f4:
e3:98:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:46 2026 by rpki-client