Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: B02kV0xDdEYLDxgaVXn5Ye++9X8uxbq0nEb1flqQiGM=
Subject key identifier: D8:17:E0:72:48:C3:3A:6E:B0:E0:19:6F:49:A1:87:36:65:58:4E:1E
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 019D9AABC68100055BDE54DCBE58FDD9BA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 1588
Signing time: Fri 17 Apr 2026 09:00:41 +0000
Manifest this update: Fri 17 Apr 2026 09:00:41 +0000
Manifest next update: Sat 18 Apr 2026 09:00:41 +0000
Files and hashes: 1: _Jb5MQL-SwYsiaZAEwlAEPZaGwY.roa (hash: MIMB2XZpuhd7zAatrimOYWSebI/zGxcY2dCKE8yVj7Q=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: NVvSYWlEelGxEU1imE7S5pgUTaepCtWwENPStb3zSRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c6:81:00:05:5b:de:54:dc:be:58:fd:d9:ba:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Apr 17 09:00:41 2026 GMT
Not After : Apr 18 09:00:41 2026 GMT
Subject: CN=d817e07248c33a6eb0e0196f49a1873665584e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:e2:e0:71:31:d1:5e:d3:31:59:b9:b8:ae:
ac:a8:ae:c2:3d:cf:2f:11:1b:3e:75:f0:b2:83:e8:
70:3a:4a:d4:ff:07:8d:4b:14:ca:d9:77:08:71:c9:
f4:f4:3e:81:d5:1b:37:f4:d8:95:af:32:74:b9:ed:
7c:9e:aa:a2:6d:9d:09:3f:ee:2a:e9:c0:c0:c4:2e:
dd:02:71:ff:c1:9c:02:36:20:23:67:13:d8:1c:ff:
a6:59:42:b1:5a:63:76:53:c9:a7:92:2f:1a:67:3b:
01:38:39:0c:ff:0f:0e:b8:a6:53:d0:bf:6b:f6:c5:
64:17:c4:7e:59:be:48:95:f6:47:17:2a:4b:0c:7c:
bd:81:94:f4:24:61:df:cb:7d:76:60:08:dc:e6:bd:
a0:48:82:bf:de:a3:f7:6e:2a:3f:4d:ca:73:0a:87:
48:ff:09:27:38:3f:85:53:63:18:3f:f6:f3:a2:ac:
e4:a6:59:94:29:e4:ee:8d:99:c2:bf:b4:38:08:c2:
61:7a:18:91:94:44:44:ce:62:f8:86:c7:f6:c7:b1:
aa:7d:f4:ef:f1:cc:a4:56:f0:c0:a3:10:ce:90:fb:
22:85:08:3c:c5:a1:91:8b:3a:80:05:4f:28:05:68:
20:c1:f5:56:01:c6:1d:4b:9a:1a:a1:e8:25:8c:6f:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:E0:72:48:C3:3A:6E:B0:E0:19:6F:49:A1:87:36:65:58:4E:1E
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:61:82:f3:ed:d1:30:fe:ee:a9:fc:00:a2:14:e1:37:80:6f:
b8:4f:3b:46:17:7c:6d:b6:ac:23:19:7c:b8:11:e0:42:ac:64:
0f:23:70:57:69:d9:b9:ae:58:a2:1c:80:c7:9c:9f:0f:6e:54:
90:74:b8:4c:17:a6:bd:d6:b8:86:d7:8c:db:32:74:15:39:9d:
50:48:e0:37:77:58:5c:e0:87:eb:a7:31:1c:fe:10:7a:74:b8:
53:47:eb:18:60:2e:87:0b:8a:8d:17:ea:e2:13:65:a7:4c:b6:
aa:13:c2:f5:a7:10:10:f7:32:3a:41:f9:e4:98:a8:81:bd:05:
77:41:d8:56:39:22:d2:f1:d5:3d:65:4f:2f:01:26:c5:f8:4a:
3c:d6:9d:e0:ab:e7:9d:20:4b:64:f7:26:15:99:b4:7a:99:3b:
86:da:e8:41:dc:cb:7c:3d:71:3f:8a:43:1a:a9:73:f6:45:93:
7d:b0:0e:47:83:31:0b:17:98:f0:47:ab:ab:6e:d9:51:4c:ab:
da:44:fc:be:f4:c8:56:48:3f:bd:8e:9b:58:46:48:af:e1:b8:
2c:27:a4:0e:09:d7:4c:6d:e4:9b:ae:7e:cf:b1:06:96:b1:05:
00:03:2c:55:66:61:a4:f8:45:c3:84:06:ec:ba:85:d4:cb:08:
60:8b:98:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8aBAAVb3lTcvlj92bqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDg0ZjNhODBiNGExZGY0ODExNjQyYWFiOGQ3OTUxNjM5
YTJlNTgwHhcNMjYwNDE3MDkwMDQxWhcNMjYwNDE4MDkwMDQxWjAzMTEwLwYDVQQD
EyhkODE3ZTA3MjQ4YzMzYTZlYjBlMDE5NmY0OWExODczNjY1NTg0ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshPi4HEx0V7TMVm5uK6sqK7CPc8v
ERs+dfCyg+hwOkrU/weNSxTK2XcIccn09D6B1Rs39NiVrzJ0ue18nqqibZ0JP+4q
6cDAxC7dAnH/wZwCNiAjZxPYHP+mWUKxWmN2U8mnki8aZzsBODkM/w8OuKZT0L9r
9sVkF8R+Wb5IlfZHFypLDHy9gZT0JGHfy312YAjc5r2gSIK/3qP3bio/TcpzCodI
/wknOD+FU2MYP/bzoqzkplmUKeTujZnCv7Q4CMJhehiRlEREzmL4hsf2x7GqffTv
8cykVvDAoxDOkPsihQg8xaGRizqABU8oBWggwfVWAcYdS5oaoegljG9eRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgX4HJIwzpusOAZb0mhhzZlWE4eMB8GA1UdIwQY
MBaAFI8ITzqAtKHfSBFkKquNeVFjmi5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2Mt
YjBmNmNjZDQ2Mzg3LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2MtYjBmNmNjZDQ2Mzg3
LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGGC8+3R
MP7uqfwAohThN4BvuE87Rhd8bbasIxl8uBHgQqxkDyNwV2nZua5YohyAx5yfD25U
kHS4TBemvda4hteM2zJ0FTmdUEjgN3dYXOCH66cxHP4QenS4U0frGGAuhwuKjRfq
4hNlp0y2qhPC9acQEPcyOkH55Jiogb0Fd0HYVjki0vHVPWVPLwEmxfhKPNad4Kvn
nSBLZPcmFZm0epk7htroQdzLfD1xP4pDGqlz9kWTfbAOR4MxCxeY8Eerq27ZUUyr
2kT8vvTIVkg/vY6bWEZIr+G4LCekDgnXTG3km65+z7EGlrEFAAMsVWZhpPhFw4QG
7LqF1MsIYIuYYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:20 2026 by rpki-client