
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
File: JW-mc9s74eLrq_uZbQfPSSJevAg.mft (raw, json)
Hash identifier: H60kiIJFWLt/3OaArCjMgw2uHZO36IXptuEsXBOm3U8=
Subject key identifier: A1:03:8C:C9:44:B5:6A:5E:B1:65:95:F9:9B:28:4F:AA:B8:13:9A:E4
Authority key identifier: 25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
Certificate issuer: /CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Certificate serial: 01A0DE72D1DE3D290CB51B0470460153D12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
Manifest number: 010C
Signing time: Sat 26 Sep 2026 16:01:01 +0000
Manifest this update: Sat 26 Sep 2026 16:01:01 +0000
Manifest next update: Sun 27 Sep 2026 16:01:01 +0000
Files and hashes: 1: 1w7jxh2aEyNaIYWXC_VHPbHo1oc.roa (hash: gsx85QJ2WG90A2G8uFzj2SzVBAenv+NakL2t0df+a+8=)
2: JW-mc9s74eLrq_uZbQfPSSJevAg.crl (hash: 4zyeALEK7AmrKFA3gymzrKFiciW69enqMcHOlFERw+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:d1:de:3d:29:0c:b5:1b:04:70:46:01:53:d1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Validity
Not Before: Sep 26 16:01:01 2026 GMT
Not After : Sep 27 16:01:01 2026 GMT
Subject: CN=a1038cc944b56a5eb16595f99b284faab8139ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:ea:14:5d:16:b4:95:71:41:0f:f3:26:4c:
39:4d:e0:db:b5:ff:59:6b:96:f7:14:e2:fd:60:71:
42:7d:dd:c7:53:53:1a:f8:19:b9:8c:5c:fb:1e:d9:
94:f7:c9:d6:90:f1:a1:bf:8d:81:04:3e:5e:36:ae:
f5:b9:f6:61:86:43:8a:0b:7f:b8:55:df:c7:47:c4:
6e:c2:3c:30:9b:58:dd:b4:7e:20:5a:41:b6:ab:54:
d4:8e:e9:70:52:5c:2f:01:ac:53:68:fa:61:59:a4:
a2:da:18:0a:58:1f:08:4e:3b:44:9d:c9:14:0a:45:
54:a1:02:dc:93:ce:fc:93:ba:97:e1:7b:ab:7e:9f:
a6:e3:5e:6f:3e:7b:d3:74:ac:db:59:98:3e:ff:04:
2f:24:d5:70:9b:5d:49:71:77:26:8e:51:ae:7a:0d:
ec:49:60:1a:1e:4a:52:a6:95:ec:6a:ae:d2:57:b2:
39:01:61:9e:70:f2:eb:a7:6a:7d:ae:99:bb:04:96:
92:eb:ab:da:98:b2:81:47:25:4b:63:cb:15:d6:b4:
fb:40:7a:7f:c1:ae:7f:f1:63:8d:e9:37:c5:e0:48:
82:e8:fc:87:90:f4:c3:dd:d7:e6:0a:17:b0:00:74:
fb:5d:d4:14:9f:cf:ca:00:9a:45:e2:81:87:b1:1f:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:8C:C9:44:B5:6A:5E:B1:65:95:F9:9B:28:4F:AA:B8:13:9A:E4
X509v3 Authority Key Identifier:
keyid:25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:64:c0:0f:fb:7c:c9:3e:ec:be:5c:ea:5e:6f:6a:f1:c1:4a:
73:7f:ec:cc:37:15:9f:46:37:4f:83:77:81:f0:1c:6d:13:fe:
d0:fc:26:0c:3a:d0:a8:be:d9:cd:8c:00:6f:35:6a:53:42:75:
62:38:a8:cd:82:2e:b1:46:21:fb:96:2b:27:3d:84:84:f4:09:
67:c4:64:6e:d0:9f:02:33:6a:d5:bc:c5:af:59:69:bd:69:c3:
1a:9f:4f:f4:dc:05:b2:8c:74:69:be:a3:01:d0:6c:79:01:c0:
b1:54:06:52:bd:16:2f:5e:2d:e3:51:f4:bb:ae:ce:36:08:84:
73:b2:ff:07:1f:33:84:b9:4d:72:0c:4f:32:c1:e3:a0:89:7f:
50:b9:aa:36:6e:cd:4f:63:7e:46:83:88:8b:3c:8b:64:34:ed:
d8:43:d1:a5:eb:26:7d:dd:5c:84:4c:39:8f:98:93:23:44:da:
eb:a2:ac:8d:a8:0a:79:cc:7b:76:cc:be:5b:22:8f:68:b4:6c:
07:01:42:0e:0e:20:ba:df:28:d0:96:bb:44:66:22:24:b8:35:
0b:5e:91:f4:d3:8e:59:b3:ef:01:fc:a9:41:c2:f4:b2:59:d1:
69:29:37:49:16:c3:79:81:de:82:99:b5:5e:1f:2c:99:a8:aa:
12:8c:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:27:50 2026 by rpki-client