Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: ocBQTYY+JWXp+O8OVjyjDSH5FZ0DyXLk9dy8S8ziToo=
Subject key identifier: A2:A8:B6:1D:33:A3:03:74:E9:25:82:FC:1C:5A:8E:2F:3E:E6:21:1C
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 019CAA214BABCFAC49CEB8ADB605CB79D66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:00:34 +0000
Manifest this update: Sun 01 Mar 2026 16:00:34 +0000
Manifest next update: Mon 02 Mar 2026 16:00:34 +0000
Files and hashes: 1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
2: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: MVTFRhftJBwCOtEl6pztFBIn6Y2y6iNHmUY3ajTKZpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4b:ab:cf:ac:49:ce:b8:ad:b6:05:cb:79:d6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Mar 1 16:00:34 2026 GMT
Not After : Mar 2 16:00:34 2026 GMT
Subject: CN=a2a8b61d33a30374e92582fc1c5a8e2f3ee6211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:77:14:e1:73:4d:09:c6:35:0f:27:f0:88:
b4:5f:4b:c3:5c:80:85:27:80:98:7c:83:4a:c6:a0:
b4:c7:f9:a7:f5:bf:51:a9:56:1b:ff:37:df:29:e7:
90:ce:8d:fa:37:d6:14:df:f6:41:7f:5d:2b:bd:26:
81:82:ef:b7:6c:4f:43:70:a5:15:c4:50:3d:dc:d8:
d1:53:f5:a3:01:2d:1e:5b:c2:c9:30:33:44:52:be:
b1:64:67:5f:2f:92:cb:a8:65:3f:ee:9d:0c:ae:c1:
8a:fc:a3:39:97:13:20:3c:e0:92:e8:f0:d5:9e:17:
14:6b:13:30:b1:5e:37:72:0e:7c:d1:4e:92:3c:ae:
2e:1d:12:ee:15:b0:2b:1e:b4:f3:d3:e8:44:cf:6c:
6c:fe:51:0d:c1:00:d0:20:c9:21:6e:b0:13:4b:2e:
26:cf:2e:3a:e6:25:78:78:f5:4f:0c:3b:34:fd:62:
2e:c6:58:6c:a6:0a:4c:6c:45:67:e7:a0:f8:1c:40:
0a:20:e7:52:f6:92:d7:3e:24:a5:b1:95:f8:d1:56:
ed:83:d7:b1:01:3c:be:f8:fd:09:9e:39:05:2b:48:
f2:f2:8c:32:34:d8:dc:5f:59:45:4b:32:98:4e:d2:
67:d1:90:49:fd:69:fe:9d:e1:21:8b:0e:ac:ca:fa:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:B6:1D:33:A3:03:74:E9:25:82:FC:1C:5A:8E:2F:3E:E6:21:1C
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:2b:90:94:05:54:db:f1:ac:0d:97:2c:9d:4b:6e:08:35:
7b:60:40:99:8e:fa:94:2c:a6:e0:98:6a:77:e4:72:0e:0b:67:
76:b5:de:44:d1:0a:86:74:29:ac:e6:d7:6a:6c:f8:9c:b5:f0:
53:23:68:d9:cd:50:3f:27:24:d9:7c:b1:f5:d1:f4:a7:84:5e:
4e:17:fb:bc:40:d6:ea:75:65:ad:3f:bc:d8:3b:1b:61:db:50:
ad:60:30:70:9d:d0:f6:ce:94:f4:44:f2:50:f3:dc:08:0e:bf:
2d:3f:ba:fa:b5:bb:f8:33:d8:65:14:50:d3:b2:02:e2:bc:61:
b2:ce:d8:a2:a9:9f:21:be:12:a2:77:e1:8a:26:73:42:76:95:
2c:c1:71:09:43:a5:43:be:a3:34:e6:12:8a:c7:d3:cc:ce:02:
a6:cc:42:c3:f1:40:96:da:b3:fe:d4:3e:85:99:91:99:ea:9d:
7e:dc:fa:34:13:81:f7:9a:2d:03:03:21:1b:92:7c:be:b2:f5:
57:76:08:e2:27:8b:4d:26:83:66:c5:b9:4f:0f:ea:7c:39:8a:
0d:3b:50:b6:88:7a:8c:e8:d7:e8:39:10:4e:34:31:3a:6a:ed:
9e:22:90:16:ed:ea:c4:25:30:13:35:ee:1c:41:f9:28:1e:09:
15:da:9e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIUurz6xJzrittgXLedZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjRlNDNjNzViZGM1MTFkNTI0ZjBjODVkMDA5Y2JhNzY5
NTYxNDQwHhcNMjYwMzAxMTYwMDM0WhcNMjYwMzAyMTYwMDM0WjAzMTEwLwYDVQQD
EyhhMmE4YjYxZDMzYTMwMzc0ZTkyNTgyZmMxYzVhOGUyZjNlZTYyMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gJ3FOFzTQnGNQ8n8Ii0X0vDXICF
J4CYfINKxqC0x/mn9b9RqVYb/zffKeeQzo36N9YU3/ZBf10rvSaBgu+3bE9DcKUV
xFA93NjRU/WjAS0eW8LJMDNEUr6xZGdfL5LLqGU/7p0MrsGK/KM5lxMgPOCS6PDV
nhcUaxMwsV43cg580U6SPK4uHRLuFbArHrTz0+hEz2xs/lENwQDQIMkhbrATSy4m
zy465iV4ePVPDDs0/WIuxlhspgpMbEVn56D4HEAKIOdS9pLXPiSlsZX40Vbtg9ex
ATy++P0JnjkFK0jy8owyNNjcX1lFSzKYTtJn0ZBJ/Wn+neEhiw6syvosqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKoth0zowN06SWC/Bxaji8+5iEcMB8GA1UdIwQY
MBaAFI1k5Dx1vcUR1STwyF0AnLp2lWFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3Yzct
NzI0NDgzNTJiODA3LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3YzctNzI0NDgzNTJiODA3
LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAorkJQF
VNvxrA2XLJ1Lbgg1e2BAmY76lCym4Jhqd+RyDgtndrXeRNEKhnQprObXamz4nLXw
UyNo2c1QPyck2Xyx9dH0p4ReThf7vEDW6nVlrT+82DsbYdtQrWAwcJ3Q9s6U9ETy
UPPcCA6/LT+6+rW7+DPYZRRQ07IC4rxhss7YoqmfIb4SonfhiiZzQnaVLMFxCUOl
Q76jNOYSisfTzM4CpsxCw/FAltqz/tQ+hZmRmeqdftz6NBOB95otAwMhG5J8vrL1
V3YI4ieLTSaDZsW5Tw/qfDmKDTtQtoh6jOjX6DkQTjQxOmrtniKQFu3qxCUwEzXu
HEH5KB4JFdqehQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:02 2026 by rpki-client