Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: e1AfNeNNLqq1fJ32mweXABQxmtp3gSgW2Qj7xnWJ+DI=
Subject key identifier: E2:09:2E:C2:04:56:86:4D:1E:9A:BF:A3:20:4B:7C:FF:08:D9:79:EA
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019CAC7E324A6634C5D410243E7DC0E9B1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 03:01:17 +0000
Manifest this update: Mon 02 Mar 2026 03:01:17 +0000
Manifest next update: Tue 03 Mar 2026 03:01:17 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: i17uRintRD4rYfrnGM3ptPrXz07EwVDDOdetKrfmDq0=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:32:4a:66:34:c5:d4:10:24:3e:7d:c0:e9:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Mar 2 03:01:17 2026 GMT
Not After : Mar 3 03:01:17 2026 GMT
Subject: CN=e2092ec20456864d1e9abfa3204b7cff08d979ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:75:4a:68:43:00:4a:4e:eb:ee:be:f5:f1:
0a:4a:ce:b8:09:41:ac:c2:27:de:ac:d8:de:0b:9c:
38:61:b7:96:38:96:4e:4e:c5:ef:5c:c7:06:f8:e4:
22:1a:82:eb:1b:f6:ce:3f:c9:3b:52:f8:72:4f:6d:
35:17:2a:3f:37:4b:9b:bb:9b:07:70:ab:d7:96:8d:
b6:90:a4:ef:15:bd:2f:be:10:ab:55:93:00:18:64:
9f:07:98:41:d8:f7:4e:82:5b:34:87:d4:eb:c6:4b:
33:7f:cc:86:28:10:2c:c5:c9:62:d0:6e:b5:61:d5:
ac:f5:51:04:a4:e7:c7:60:48:e6:e5:d1:6d:3b:98:
b8:f5:ac:da:45:53:4d:93:f3:d2:54:6c:98:a7:3b:
75:ef:72:ac:75:20:e8:7f:da:84:cd:90:2a:14:f6:
94:a6:ac:24:88:94:05:82:af:68:6a:b9:dc:84:d7:
b7:51:8e:73:06:38:d3:4c:7a:dd:11:ca:21:7a:48:
f1:57:58:fb:63:18:b5:86:f7:e1:cb:ba:44:8e:fc:
7d:9c:f5:9d:54:98:1c:1e:ec:9a:1b:42:1b:c5:00:
bd:fd:4b:04:54:ec:87:7a:62:42:bf:e6:46:02:32:
16:2d:f1:e5:c7:2d:26:f5:61:88:a3:e3:fc:79:a3:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:2E:C2:04:56:86:4D:1E:9A:BF:A3:20:4B:7C:FF:08:D9:79:EA
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:f2:51:d1:e3:85:96:cd:82:c0:66:3f:3d:67:30:8a:17:
33:d5:69:34:b9:1d:5d:29:46:38:eb:17:37:b6:69:7f:3c:44:
98:9c:ca:8a:e2:51:4f:4f:5a:84:82:73:83:38:ef:b0:67:7b:
db:d0:d4:26:38:60:0a:15:5a:8f:2d:ab:f7:98:c2:21:fa:1e:
14:e7:c4:ac:e0:b7:1d:05:d6:9d:74:c7:50:48:26:f4:1c:82:
98:d0:1a:ee:7b:9e:9f:03:92:2c:c6:1b:75:65:92:a8:3b:d0:
6b:81:c2:69:f5:a9:82:a3:92:a5:f1:21:7e:05:c8:35:12:cf:
0e:8c:68:bd:fa:77:1f:95:88:88:f1:6a:e1:a7:b0:f6:07:9d:
af:95:1c:63:c4:3b:ab:31:77:8e:c4:fa:bd:4c:99:25:34:09:
03:4a:7c:d9:42:80:b7:aa:da:96:f3:ad:f0:92:46:fa:ab:9f:
a8:01:19:3c:12:01:11:5c:67:92:9d:55:20:5b:e5:0f:63:1f:
b5:13:a3:19:d4:10:f4:80:23:c9:c6:c5:ef:8d:12:f1:7e:96:
f5:7f:c1:41:69:8c:f8:67:02:1f:04:b0:49:57:2e:9c:11:21:
b5:b9:e1:b2:2e:21:68:8f:24:f2:71:3c:8f:02:af:e3:4b:f1:
bc:fe:84:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfjJKZjTF1BAkPn3A6bG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4
NzEzMzgwHhcNMjYwMzAyMDMwMTE3WhcNMjYwMzAzMDMwMTE3WjAzMTEwLwYDVQQD
EyhlMjA5MmVjMjA0NTY4NjRkMWU5YWJmYTMyMDRiN2NmZjA4ZDk3OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqR1SmhDAEpO6+6+9fEKSs64CUGs
wiferNjeC5w4YbeWOJZOTsXvXMcG+OQiGoLrG/bOP8k7UvhyT201Fyo/N0ubu5sH
cKvXlo22kKTvFb0vvhCrVZMAGGSfB5hB2PdOgls0h9Trxkszf8yGKBAsxcli0G61
YdWs9VEEpOfHYEjm5dFtO5i49azaRVNNk/PSVGyYpzt173KsdSDof9qEzZAqFPaU
pqwkiJQFgq9oarnchNe3UY5zBjjTTHrdEcohekjxV1j7Yxi1hvfhy7pEjvx9nPWd
VJgcHuyaG0IbxQC9/UsEVOyHemJCv+ZGAjIWLfHlxy0m9WGIo+P8eaO9CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIJLsIEVoZNHpq/oyBLfP8I2XnqMB8GA1UdIwQY
MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt
NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk
LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKfyUdHj
hZbNgsBmPz1nMIoXM9VpNLkdXSlGOOsXN7ZpfzxEmJzKiuJRT09ahIJzgzjvsGd7
29DUJjhgChVajy2r95jCIfoeFOfErOC3HQXWnXTHUEgm9ByCmNAa7nuenwOSLMYb
dWWSqDvQa4HCafWpgqOSpfEhfgXINRLPDoxovfp3H5WIiPFq4aew9gedr5UcY8Q7
qzF3jsT6vUyZJTQJA0p82UKAt6ralvOt8JJG+qufqAEZPBIBEVxnkp1VIFvlD2Mf
tROjGdQQ9IAjycbF740S8X6W9X/BQWmM+GcCHwSwSVcunBEhtbnhsi4haI8k8nE8
jwKv40vxvP6E8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:46 2026 by rpki-client