Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: GYc6o/+UUIqzW2gW5Z/SPHT8vKvVYAGkF8CfiQt6Usg=
Subject key identifier: 37:AB:CA:C5:18:E1:2E:97:75:7D:15:9E:07:B5:A4:41:D3:71:DE:40
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 01A11F76D3018B3481F32F0090266E0E7A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 15F1
Signing time: Fri 09 Oct 2026 07:00:43 +0000
Manifest this update: Fri 09 Oct 2026 07:00:43 +0000
Manifest next update: Sat 10 Oct 2026 07:00:43 +0000
Files and hashes: 1: OEpwskwsLrz2yf1kQY123zPLnE4.roa (hash: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: +WTt2YJv03DYyiy3fiGnMI9Y+MJ2bh/Az45J7vkTNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:76:d3:01:8b:34:81:f3:2f:00:90:26:6e:0e:7a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Oct 9 07:00:43 2026 GMT
Not After : Oct 10 07:00:43 2026 GMT
Subject: CN=37abcac518e12e97757d159e07b5a441d371de40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:2d:f2:ee:65:57:1a:6b:4c:b2:5f:de:92:
f1:d0:08:b4:22:42:57:37:f0:c0:68:84:5a:3d:79:
2e:e0:2d:42:76:46:a5:1b:cb:12:23:f3:11:14:bd:
d3:85:a0:f8:79:43:8d:1f:ea:cd:36:41:38:d0:e7:
c9:52:d1:4e:5b:59:3d:62:54:87:76:f5:3b:08:3a:
7b:13:4f:08:f5:54:2d:c3:eb:11:d6:dd:ff:c5:e1:
5b:bb:45:ff:30:93:6e:cd:01:be:d1:9d:4f:ff:73:
27:47:05:72:d6:44:8b:e4:d3:5d:e7:fc:af:da:bd:
5a:0d:b1:c1:15:ad:53:54:0f:57:b8:68:b6:b9:8b:
14:73:00:ae:30:78:bc:31:6a:03:9c:8a:59:19:5e:
60:f8:e9:20:6d:53:6b:82:1f:47:13:f6:c2:bc:10:
b8:3b:cb:ee:3b:47:0e:c3:b9:3e:29:49:c5:f7:47:
de:fb:23:14:fd:60:a4:9b:ea:e7:4d:4a:5e:c3:a1:
e2:1b:2a:07:39:b7:4d:04:fd:58:94:7d:c4:8b:90:
78:71:f7:8c:4c:10:88:1c:5a:24:3b:7f:69:2e:6a:
81:a2:4c:01:fc:79:a7:d5:72:5e:b7:f7:6b:92:1b:
4b:9c:94:87:22:6a:e4:8a:9e:72:96:59:0d:01:e2:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:CA:C5:18:E1:2E:97:75:7D:15:9E:07:B5:A4:41:D3:71:DE:40
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:88:ba:45:42:f1:04:29:fb:19:1f:30:dd:80:4d:ef:32:
75:7c:64:f1:64:55:cc:c7:a2:58:3e:9e:9b:a7:65:b4:d5:7e:
f8:24:0d:dd:aa:69:fd:44:02:22:fd:ce:1e:92:49:1e:be:89:
99:24:ec:45:6e:49:a0:b2:f3:85:a4:84:a3:7f:5e:63:20:72:
bc:69:cf:45:20:ca:ee:55:b8:d3:28:52:9b:d8:23:2c:6a:04:
aa:5a:2c:c3:87:2b:c4:33:2f:f6:2d:16:7e:f4:51:fd:0a:aa:
9d:72:af:02:02:9a:67:8e:09:a8:df:3b:82:f7:62:62:29:0d:
f7:d3:63:fa:49:c2:84:55:17:27:4a:85:d0:2d:f8:a6:d2:05:
96:85:5a:c7:5b:5d:2e:59:b9:09:00:5c:43:2c:12:d0:d5:03:
bc:5a:e7:70:b0:fc:c1:7e:be:5f:f2:8e:bd:62:f3:7f:ce:93:
14:cb:32:71:7e:1d:28:c2:b7:86:49:f2:76:b2:2d:ec:4f:95:
c0:d2:e7:0b:18:94:0c:94:f7:56:e5:3d:40:49:15:2e:76:8a:
f2:4c:18:e1:90:2c:f1:9e:20:b5:46:0b:cf:2e:a0:d1:e2:b6:
13:aa:27:d5:40:a7:24:11:c4:89:fc:0a:ad:66:93:53:64:ca:
68:09:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 12:09:48 2026 by rpki-client