Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: YSfbfZ765SH+VtcGOwmPwwhwFemeR84vWdeK0SmlgDQ=
Subject key identifier: D1:4A:40:2B:15:46:A9:FE:E1:88:EE:3F:91:91:49:B4:4D:8C:16:BD
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 019F9391996D2726204243C91F25B8C0C084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 1524
Signing time: Fri 24 Jul 2026 10:00:20 +0000
Manifest this update: Fri 24 Jul 2026 10:00:20 +0000
Manifest next update: Sat 25 Jul 2026 10:00:20 +0000
Files and hashes: 1: OEpwskwsLrz2yf1kQY123zPLnE4.roa (hash: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: y5Iam8/mlYm0Qd4eaqiyxJcPqtxHJH6O8y/rE1OqLqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:99:6d:27:26:20:42:43:c9:1f:25:b8:c0:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Jul 24 10:00:20 2026 GMT
Not After : Jul 25 10:00:20 2026 GMT
Subject: CN=d14a402b1546a9fee188ee3f919149b44d8c16bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:63:98:f4:6f:99:6c:a8:6f:9c:95:ef:f0:
9c:4a:d5:1b:e8:5a:90:c9:41:23:f3:fc:cc:e1:e7:
c1:67:89:d8:b1:a7:62:dd:17:02:93:76:94:67:8e:
60:3f:c2:7b:9d:dd:22:89:e7:dc:10:54:06:11:c2:
bd:3b:37:13:87:a6:de:82:0b:aa:8c:7c:1a:a0:78:
cc:7c:45:dc:a6:81:e8:5f:0f:ec:02:bc:c9:8a:57:
5d:b8:96:bc:f3:4f:1d:72:a9:39:2d:3d:0b:2e:ae:
6a:a6:2d:2c:ce:74:65:a4:b9:7d:bc:44:c6:c7:2a:
0d:70:49:93:21:9f:34:df:be:f0:11:0f:92:d0:36:
7a:cd:35:23:db:55:63:02:74:99:cb:97:1e:1f:cd:
b6:5a:2b:a2:8a:b7:9f:95:a6:ae:57:25:d6:f4:b8:
c7:48:72:b0:e3:18:40:bc:57:54:e1:af:5a:bc:0b:
e5:74:42:3e:59:81:42:0c:f2:35:7f:a7:ad:ae:c5:
1e:4c:0e:5e:48:0b:0d:0f:aa:47:50:f8:d8:17:83:
b2:16:c7:73:4d:c0:0a:5a:33:1e:bc:b8:46:00:81:
62:8d:62:c7:ff:a1:a4:d8:75:f7:b3:34:fb:57:d9:
0c:0e:ce:5c:97:e2:4d:1b:1b:22:a7:1c:16:6e:16:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:40:2B:15:46:A9:FE:E1:88:EE:3F:91:91:49:B4:4D:8C:16:BD
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:22:54:ed:6d:8c:e6:d7:c7:6f:a2:d9:bc:0d:91:d3:e7:c7:
f3:bc:cf:43:49:6d:de:6f:89:2d:01:ef:4b:da:0d:03:9d:b7:
ed:1a:56:71:c9:fb:b2:50:63:eb:dc:26:2b:a1:e7:09:bb:c1:
82:eb:19:44:2f:ef:d4:6f:3e:d5:cb:b5:9e:5f:7f:bd:a6:8d:
cc:75:7d:09:ee:e8:99:46:12:66:ea:52:67:b4:30:5c:d2:48:
7f:d4:35:89:d4:85:a4:7c:7e:c3:05:dc:e4:62:25:0b:ce:dd:
4c:69:ee:db:37:98:4c:7b:3b:75:3d:2a:dc:97:3a:58:55:b0:
67:a8:1c:0d:bb:75:da:2a:64:83:1f:36:d2:e4:68:ca:0c:9e:
8b:4b:18:ed:ee:47:35:72:cb:a3:90:bb:d9:ef:d4:3b:ea:7d:
4a:0e:73:87:37:6e:a0:0b:b6:93:5c:7b:1e:3c:df:f1:3c:6e:
a3:4a:44:5e:fe:9c:a8:52:ee:b1:fe:4f:3e:47:11:19:61:7c:
e9:db:7b:bd:3a:cd:89:be:42:eb:02:98:cd:5f:1e:53:1e:da:
d7:cd:7b:26:a7:b6:a0:98:10:9f:a6:21:fa:f4:ea:cd:5b:6b:
3e:55:3e:5b:8d:72:02:7b:83:8b:66:ee:cc:f8:ba:b8:9a:d7:
c7:10:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:09 2026 by rpki-client