Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: RvHtW6ua1m/QXLeWWSyzbW6MnYyTSDuMYUJ7z9kii3E=
Subject key identifier: 6B:BD:6C:30:1E:F4:24:55:8A:DD:9A:2F:BE:C2:3B:2E:36:33:72:A4
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 019D3A1C6EBC85B5EF077380B37D78D53B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 1556
Signing time: Sun 29 Mar 2026 15:00:34 +0000
Manifest this update: Sun 29 Mar 2026 15:00:34 +0000
Manifest next update: Mon 30 Mar 2026 15:00:34 +0000
Files and hashes: 1: _Jb5MQL-SwYsiaZAEwlAEPZaGwY.roa (hash: MIMB2XZpuhd7zAatrimOYWSebI/zGxcY2dCKE8yVj7Q=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: 9fy2IjDMxH2Zk6AJH58tDjBW+dLFbMonqtlu9QD5T9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6e:bc:85:b5:ef:07:73:80:b3:7d:78:d5:3b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Mar 29 15:00:34 2026 GMT
Not After : Mar 30 15:00:34 2026 GMT
Subject: CN=6bbd6c301ef424558add9a2fbec23b2e363372a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:07:f0:32:5c:3a:a5:bb:f9:5e:bb:5f:07:
89:12:85:0c:d7:b1:14:e0:86:5d:f8:dc:a1:f7:4d:
6e:b5:6f:f1:7a:31:c2:d1:58:ec:ec:fb:5e:6b:13:
20:c0:b0:f5:6d:cb:0f:76:bd:f5:67:6b:f5:c8:41:
d4:21:81:1a:79:7c:fd:ab:5d:f9:d3:e9:f4:c1:71:
59:31:13:0a:d2:6d:e2:62:5b:6c:ec:59:75:6e:ce:
1e:bf:58:47:0c:63:30:a8:2f:d9:8e:81:4a:31:6b:
70:1e:b5:a6:b5:d4:b5:ae:ec:02:c0:55:87:38:21:
4c:86:58:68:9e:11:0f:5f:ce:52:76:1c:55:3c:f7:
4c:00:42:cd:68:df:ee:fc:d6:ae:41:6c:ef:b6:31:
b2:e8:47:34:3f:c0:b4:e5:31:28:09:6b:34:a5:29:
78:42:66:34:67:11:ba:ad:29:b2:b9:01:fd:96:f7:
da:9b:b9:89:df:40:98:f4:e6:1c:b1:c3:61:3d:e9:
c8:57:3a:e1:86:dc:d0:63:18:ef:34:3b:fd:8b:6d:
95:10:06:be:12:c7:74:28:ec:40:24:35:d1:b4:ab:
08:2b:96:56:9b:01:53:eb:64:c7:84:ea:54:53:d0:
15:42:a2:95:a1:ca:92:d8:c0:98:01:44:14:81:4f:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:6C:30:1E:F4:24:55:8A:DD:9A:2F:BE:C2:3B:2E:36:33:72:A4
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7f:29:db:f5:b0:f3:c5:98:8f:90:ce:83:2d:a4:72:76:6a:
ab:88:02:89:e1:08:28:65:59:5c:57:44:88:dc:6e:1c:ee:33:
21:c1:2d:69:45:e3:18:c1:03:da:1a:c3:54:a7:4f:47:31:02:
5d:79:bd:a0:29:2f:17:7c:a7:42:15:d1:7e:b2:e7:a5:f6:33:
21:59:c1:f8:d7:49:82:05:16:e7:f2:c2:11:7d:2a:ae:64:ba:
64:59:1c:dd:b3:e9:e8:02:87:82:6d:74:f0:e2:c2:fe:9e:ae:
fc:5a:3c:bf:24:a1:41:af:ee:6e:0c:28:4b:c5:23:41:38:2d:
75:44:65:cd:0d:cc:63:4a:91:a9:28:3f:19:d2:bc:66:a3:8a:
39:d7:f6:b6:21:cd:f8:e2:fd:32:03:3b:05:a8:4a:d3:b0:d5:
33:76:2d:bb:85:50:ce:36:a2:ae:97:bb:44:dc:e7:30:6d:c5:
96:02:e0:86:18:d8:13:ec:d4:ae:cc:a3:35:14:06:54:d1:5d:
81:8d:e6:34:d6:c6:5d:9d:09:09:55:72:c1:11:be:56:74:1f:
19:7b:6c:af:52:da:5e:06:66:6f:c1:80:89:de:da:2d:97:69:
46:10:85:b6:ea:0d:fa:7c:74:57:60:ba:82:3a:66:91:8e:94:
56:de:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:21 2026 by rpki-client