Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: wERJvqSdSzfBllnEDiv2u1Ubsn7KE48w0D8wllSGPic=
Subject key identifier: 35:91:EC:38:25:FA:7B:AD:C0:DD:B0:E9:C6:18:CF:F8:96:6F:D4:0B
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01A10625949D7B3E951083CB94794909B9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 19D3
Signing time: Sun 04 Oct 2026 09:01:28 +0000
Manifest this update: Sun 04 Oct 2026 09:01:28 +0000
Manifest next update: Mon 05 Oct 2026 09:01:28 +0000
Files and hashes: 1: 50eTTS1czBLSMMerOJ7UzbyboOc.roa (hash: DWFW3kXBgfv/F0ugZfj5ShtPXjsjIRXJue6n2/frsCE=)
2: Gjl2RpEwdOS5o6zJf8wpdh1hzU8.roa (hash: jYEPrUYBib8AqNU7rjlO4YMohxNp1Tb65NhyewGt9eQ=)
3: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: pErHqm49ebCm9b7YhjY+huHNPCMtrfmPakA1msuvHDw=)
4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:94:9d:7b:3e:95:10:83:cb:94:79:49:09:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Oct 4 09:01:28 2026 GMT
Not After : Oct 5 09:01:28 2026 GMT
Subject: CN=3591ec3825fa7badc0ddb0e9c618cff8966fd40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:4e:11:af:fc:fb:c7:0a:69:1f:56:5c:2b:
04:48:0e:c0:71:b6:48:cd:9f:ed:d9:66:0e:a0:5d:
c4:3d:fb:5b:4d:2d:b0:c1:54:79:b5:95:af:3e:72:
56:76:b1:24:65:6a:59:53:91:f8:50:0c:53:7a:a8:
a5:63:d2:18:e7:1a:f3:8a:07:22:cf:91:99:b0:76:
f8:ad:c3:55:7f:7b:64:39:7d:22:eb:77:db:8d:db:
72:d6:27:5c:e3:dd:6c:0b:ad:1f:cd:8e:63:ac:ee:
8a:ad:5b:5d:b7:83:68:9c:ad:b0:c2:ac:f4:4d:1f:
3a:40:e0:6e:2b:e5:2c:b2:4b:d9:53:25:78:81:e4:
0c:b6:86:3c:4b:cc:72:cc:ad:e4:54:b3:6c:b0:4a:
fa:f6:b5:0b:c8:97:1b:db:3d:b9:b5:c1:0f:d7:22:
08:4d:b0:18:fb:bd:e0:f4:5b:86:10:59:14:b9:c8:
e4:e5:01:c2:ce:d8:49:cb:24:5b:1d:9a:c0:e5:53:
7f:ba:58:15:da:9a:db:a0:75:26:d2:81:81:d0:98:
a9:ae:45:55:d0:f0:06:a9:31:50:f4:13:84:de:a8:
9f:03:0d:15:ac:cd:1c:e4:50:f4:07:8f:cc:86:72:
db:a1:22:bb:3d:83:3d:c4:29:b7:47:e6:aa:77:79:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:91:EC:38:25:FA:7B:AD:C0:DD:B0:E9:C6:18:CF:F8:96:6F:D4:0B
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:71:14:8d:37:5e:af:55:8b:95:b7:ec:9b:b0:1d:92:90:8f:
37:77:90:aa:e7:03:f2:12:19:66:3c:47:17:ef:f3:b3:ba:3b:
c4:eb:a9:22:03:c1:f5:f8:96:e7:13:34:9e:e9:0c:9c:8b:e0:
89:02:38:ea:cb:ca:ab:a6:b4:8f:62:95:50:bb:d0:11:a7:04:
86:61:4d:35:13:f6:9c:41:0b:f6:5f:72:0e:43:33:5e:8f:bf:
a0:66:b3:c3:4b:3b:b3:61:f9:cf:8e:2d:8f:24:c7:35:7a:07:
1d:ba:49:fc:8c:f8:15:a6:af:6d:77:56:10:d6:13:01:3d:16:
19:e6:4c:20:b6:85:5f:34:d1:f1:a2:cb:ae:d5:a3:38:6b:ca:
fb:90:3e:43:e7:aa:6a:06:01:73:33:36:eb:3b:99:24:75:70:
4c:4b:09:54:0f:51:92:80:15:ea:8f:bc:09:a4:59:65:c8:ed:
ed:9f:5d:09:3d:05:36:2a:1e:9c:87:fb:d5:c9:3d:b2:bd:06:
ed:ce:e0:fc:d2:cc:44:5a:82:cb:73:2f:7b:04:c5:a3:23:6f:
77:36:ba:56:d5:5c:2e:e7:2d:42:a8:2d:97:47:4a:81:38:9c:
a0:12:3b:28:bb:66:08:71:27:fd:34:ea:ed:e4:7b:39:9a:56:
15:88:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:36 2026 by rpki-client