Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: WP10tq35JfZrHf8d1gSahNSIImyJa1jhRvpcVBuff/s=
Subject key identifier: 1C:1B:70:99:18:49:88:7B:25:AD:A0:E7:AB:A2:FC:70:D5:AF:54:9A
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 019CA945ED169CFB4E1F5638256047CC277E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 150B
Signing time: Sun 01 Mar 2026 12:00:58 +0000
Manifest this update: Sun 01 Mar 2026 12:00:58 +0000
Manifest next update: Mon 02 Mar 2026 12:00:58 +0000
Files and hashes: 1: _Jb5MQL-SwYsiaZAEwlAEPZaGwY.roa (hash: MIMB2XZpuhd7zAatrimOYWSebI/zGxcY2dCKE8yVj7Q=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: pQlITf6aqtBa2mp51Hz5JdrZfZXRt23qf6320i1osig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ed:16:9c:fb:4e:1f:56:38:25:60:47:cc:27:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Mar 1 12:00:58 2026 GMT
Not After : Mar 2 12:00:58 2026 GMT
Subject: CN=1c1b70991849887b25ada0e7aba2fc70d5af549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:ad:b5:b7:0e:a5:d3:93:a6:d4:00:79:04:
50:24:88:0e:23:54:a1:6f:df:36:db:46:28:29:7b:
a6:76:ce:08:e9:19:83:10:a5:d2:c9:37:87:90:e7:
93:cb:f9:5d:15:8f:5f:39:bc:76:8e:85:f3:b8:7d:
1e:da:ef:ee:54:76:81:79:97:f5:f4:84:c0:8e:f2:
d0:7b:cb:3e:b0:2c:8f:54:d8:55:d3:03:02:23:15:
14:27:89:59:91:b5:01:16:cb:4a:73:15:7c:47:f2:
cc:7e:c0:8a:56:8d:5f:0a:4d:13:5d:91:57:0a:46:
00:d6:86:28:b5:0f:e4:f8:32:e7:09:71:c2:ac:e7:
54:04:5f:a8:6b:dd:65:05:25:85:6d:86:73:9a:d3:
44:71:36:fc:54:27:70:ed:ec:fc:6a:55:9a:d9:d1:
91:dc:be:b3:17:bc:ad:f0:7c:46:88:45:f9:6d:e0:
4b:42:3c:a4:0c:fa:82:f8:e9:ee:25:69:21:51:2f:
4c:09:57:53:97:36:4b:32:c7:ea:23:dc:cc:c2:73:
a1:90:bb:9b:ea:84:96:5f:e7:35:e6:57:f4:4c:78:
57:99:1d:de:c3:8f:55:8f:f9:72:82:d0:a0:2b:b1:
cb:0e:e1:d5:51:f1:c8:5c:aa:c5:dd:e7:7a:ae:66:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1B:70:99:18:49:88:7B:25:AD:A0:E7:AB:A2:FC:70:D5:AF:54:9A
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3e:51:b5:0c:5c:a3:1a:78:5d:b2:c9:8a:9b:c1:4d:aa:e7:
11:21:bb:f9:09:08:97:6d:6f:d7:43:bd:ed:fb:11:22:69:63:
27:d3:80:49:54:8e:69:0c:35:86:50:d3:43:53:e0:70:38:02:
08:4b:2c:38:e2:2f:be:3b:52:c9:35:26:1b:c2:ba:b3:cc:74:
b6:56:4d:5f:e7:09:0c:aa:8d:25:b0:3b:0a:b8:d0:b4:37:1f:
95:a5:1f:00:36:d1:aa:93:bc:56:b0:25:3d:3a:15:87:01:4f:
0c:fa:0d:ec:73:57:50:34:e9:56:39:82:23:23:da:5b:0d:89:
08:85:b7:23:34:38:bc:1d:3c:dc:84:9b:3e:6f:c7:d2:fd:b4:
f6:44:2d:09:8c:c7:a6:db:48:a5:6d:0b:26:fc:c9:f3:c7:a9:
99:94:f8:ca:d4:74:24:ff:00:7b:f8:d2:0d:f5:75:5f:e2:22:
ec:5d:8f:78:fe:d9:b1:30:d4:34:8f:7f:fd:21:a2:f8:a2:d1:
36:2b:b8:fb:7f:b0:af:8f:9e:54:9e:61:18:db:df:65:26:58:
f4:8f:40:e0:fb:30:85:8a:cf:23:26:d3:1a:6b:7d:d5:bd:d7:
a0:0b:bd:30:93:65:f3:89:52:4d:83:e3:61:41:2f:3d:06:fc:
88:bf:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:38 2026 by rpki-client