Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: pvyGl857T3uzzRvH74htfbKAq3HoPgVxvlP9XfwEf1A=
Subject key identifier: 91:F3:0F:EA:9A:0F:0F:54:E1:6B:14:36:21:6B:A4:2F:FD:88:E6:D0
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 019D2961B08338AD87C35F1CE25F874520F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 0310
Signing time: Thu 26 Mar 2026 09:02:41 +0000
Manifest this update: Thu 26 Mar 2026 09:02:41 +0000
Manifest next update: Fri 27 Mar 2026 09:02:41 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: JWx3Cam7K6QvKMTZZ4OlUY6hbpzuhTHifo5w7zujnKM=)
2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:b0:83:38:ad:87:c3:5f:1c:e2:5f:87:45:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Mar 26 09:02:41 2026 GMT
Not After : Mar 27 09:02:41 2026 GMT
Subject: CN=91f30fea9a0f0f54e16b1436216ba42ffd88e6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:bb:a3:56:ac:f0:07:32:ba:09:ad:00:a4:
37:eb:d1:9c:8e:21:ac:05:e9:74:85:9e:ef:7f:97:
fb:ea:95:f3:68:ae:ed:31:27:05:f9:b0:9b:c0:49:
b3:4c:15:a7:7e:4d:54:8a:e4:8d:a7:48:b3:84:ff:
94:5d:95:1f:6e:32:b5:28:02:df:5e:3e:c2:fd:b7:
90:d9:df:03:82:74:46:10:3a:93:11:c0:2c:66:c8:
a4:8c:50:75:98:e0:c4:bf:5e:2b:9b:1b:ab:dc:4c:
cf:d3:2e:36:62:ce:7d:0c:03:f8:88:d6:76:48:a0:
9d:74:1b:90:28:4b:47:52:3c:a8:fb:ce:87:eb:ca:
b2:8e:15:19:ea:e5:ad:6f:23:fe:df:43:80:95:56:
c7:ed:34:48:c0:06:66:23:12:cb:e7:f6:60:14:b8:
82:22:10:ca:c6:8d:41:80:0e:cc:da:3f:71:56:51:
9c:68:a3:f2:cd:19:e6:67:ca:fc:ba:01:02:1f:19:
c1:9c:84:9e:9c:f4:49:da:f7:63:aa:5e:17:07:ae:
c8:43:9a:d0:aa:8f:0d:23:79:f2:58:5a:f8:c9:93:
2e:4a:84:a5:73:ac:1e:d1:7b:b8:33:ae:13:8e:a2:
e4:25:d0:f9:17:81:61:cd:d2:c0:77:75:19:b6:69:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:0F:EA:9A:0F:0F:54:E1:6B:14:36:21:6B:A4:2F:FD:88:E6:D0
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:20:5c:b4:43:32:29:28:6a:66:e1:90:d3:17:c6:c6:3c:
aa:97:ec:fd:61:cf:f0:ac:10:3d:ef:0c:f4:f4:f4:0e:0c:f0:
28:7a:14:e5:1d:a8:1e:9f:97:e9:b2:04:51:43:d3:2d:29:09:
c2:81:69:a8:d5:11:4f:cd:7a:d6:95:1a:4c:97:3f:cd:83:95:
60:09:63:8f:f5:51:04:96:03:6b:6f:b9:0c:bb:b1:00:54:d3:
fb:d8:c2:35:28:a4:30:46:82:5d:1b:b4:56:2d:ce:be:2a:27:
2d:88:1e:3e:2d:e8:35:f4:2e:eb:9a:68:e9:73:99:db:2e:fc:
b0:71:f0:50:c4:e4:d7:8b:80:20:29:06:df:8c:ff:8e:43:e2:
30:b6:d3:ed:dc:80:90:33:2e:06:1e:60:14:1e:5f:55:73:a4:
8b:9e:13:9e:17:de:a1:1b:79:0c:9a:ec:a7:69:5e:f1:14:6d:
b2:38:7f:fc:2d:72:c7:22:7c:15:34:c6:c9:3e:2c:72:01:e1:
d3:f1:a4:84:4e:e6:d5:89:15:3c:0a:d6:49:1d:6a:fa:96:5c:
0a:09:ba:37:2d:35:c9:5c:a1:e3:49:62:e1:9a:e2:58:5f:74:
f6:d2:1a:57:ef:45:0c:a8:ad:40:5c:88:71:a8:ed:12:3e:ac:
73:d5:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:04 2026 by rpki-client