Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
File: JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json)
Hash identifier: T1G0sa7PtaEjihsx9q4KOzRraAtUwHYTOJU0hGdDdgM=
Subject key identifier: 38:EC:8B:BE:0D:B2:E8:E5:FF:DC:F1:8D:8C:71:87:86:B0:AE:36:2B
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 01A0D3B8BA04C13E4871CE285BDFB4AE8F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
Manifest number: 07DC
Signing time: Thu 24 Sep 2026 14:01:33 +0000
Manifest this update: Thu 24 Sep 2026 14:01:33 +0000
Manifest next update: Fri 25 Sep 2026 14:01:33 +0000
Files and hashes: 1: AhjWgQe5daBXqh1dc2blAO0Ic2w.roa (hash: a7wxAC+oIB/6gPef5eFXwJM4UM8yzMuA8+Ys7Te3ao0=)
2: GXGKIBcqqhQNGnmXFb4-jHoOCEE.roa (hash: PlvHrrR/gICbE9juRm1dMuCUlODkxhFuRDveJO5Bh7Q=)
3: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: ZTco1+vt5fUYd2SaMON2bBFLzvInOXYn6jKxkazm79E=)
4: Q5KSfGS3tHda5rpVovsFITdTDYg.roa (hash: ICa5+GlL+U3Gm/Y9rjnti3iGdfCYMhzdaqvSwGSYDhw=)
5: WCJ9gE-e8QjNE_vVGqmE6pO_nvw.roa (hash: DeEHxD61Idh7MZyjwpXRlXo6rPbiEwB469c7Waf82Ic=)
6: XtShvNgMwZA_rgTfZdTsjFYrJj4.roa (hash: QVsItKxf/ARRX3hlHmJ5FKurvG5F+zyGh9CaElCqQS8=)
7: YYSBCusmOATTsDlexwdHCGh1TQo.roa (hash: h7RqP8GZAD05bX49zITtzPTXDfFkGa6deohAIGARxjs=)
8: cE1ZYF9CNoKRufIDTnsTQMnkDsE.roa (hash: zlvQVPFaV+iVd6JKfLfvowM6oA2oW/EsRrEhCPb+96A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:ba:04:c1:3e:48:71:ce:28:5b:df:b4:ae:8f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Sep 24 14:01:33 2026 GMT
Not After : Sep 25 14:01:33 2026 GMT
Subject: CN=38ec8bbe0db2e8e5ffdcf18d8c718786b0ae362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:a1:91:25:40:88:f2:3c:f8:78:f3:23:f9:
88:7a:b5:a5:c4:e8:19:df:ad:86:09:7e:8f:6c:68:
42:ac:f9:19:f6:56:72:eb:55:4a:cd:33:eb:d3:04:
00:10:1a:a8:22:e9:e3:05:7f:21:3d:45:1f:1b:ba:
9f:b4:0b:c7:9a:99:43:ad:71:20:b3:b6:ef:3a:19:
d9:f2:3f:69:88:4c:0b:98:18:86:98:17:cd:08:2b:
d8:42:bb:96:6d:4f:97:83:97:ee:6b:83:0c:ac:1c:
84:cd:ed:89:b5:19:dd:9d:28:5e:5a:a4:d8:f0:7a:
9c:be:2d:79:76:40:83:c5:08:fa:c9:5a:8a:ec:2f:
af:58:89:5a:b8:75:05:78:bd:4c:b9:11:ee:cc:06:
e6:38:cb:67:87:0b:7f:22:6e:9e:ed:1b:c0:f4:b9:
c5:f6:d2:79:35:1d:7b:4d:6f:98:73:d7:48:c3:77:
2a:82:2c:fe:86:7e:c4:c0:3a:2b:00:93:86:1b:1c:
e7:3c:4a:de:81:e6:36:5d:1e:ec:ab:9a:4d:30:dc:
93:23:a1:39:05:fc:05:5e:61:14:b7:18:6a:fd:e3:
97:5d:00:9e:f2:19:f4:b4:05:57:ad:db:b5:89:b1:
fc:a4:63:76:3b:a7:f0:1c:63:65:f2:ef:f7:62:1d:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:8B:BE:0D:B2:E8:E5:FF:DC:F1:8D:8C:71:87:86:B0:AE:36:2B
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d8:25:f5:bb:dc:4b:92:94:0d:92:d1:44:38:6d:df:a9:c3:
51:8b:b4:f3:a3:1f:db:29:62:5a:e7:37:32:69:0b:12:5a:46:
a5:6c:51:7b:b1:14:16:ae:67:35:e8:15:df:30:37:ee:e6:e3:
ab:65:ee:93:ab:a9:4f:ef:34:7f:1e:be:1b:fb:34:cb:88:e7:
d2:92:0e:1a:b5:c1:94:9b:b3:99:ba:e9:3b:aa:1f:a6:35:34:
51:d0:ed:39:56:fa:5f:fa:75:4d:42:e6:9f:55:39:c7:f6:01:
7c:c0:87:67:c7:7c:67:f9:37:09:48:fd:50:98:43:47:35:32:
52:f0:8b:04:ab:3e:95:01:81:6f:a1:fa:a7:fe:64:e8:d5:d9:
92:70:45:52:e6:1d:a7:8d:48:2b:be:17:d6:06:9d:0c:1a:87:
2b:fa:07:e8:be:4b:94:e8:3d:63:25:73:75:84:2a:7b:7f:cd:
e3:89:6a:17:bc:c9:82:aa:9b:74:a7:70:40:25:fa:c9:b6:bf:
0f:d5:c2:00:c1:83:16:1b:5a:d9:45:d6:ad:84:e4:26:ed:23:
da:a4:53:d2:8c:ec:66:be:1d:7e:09:13:a8:35:c0:13:35:64:
be:2a:c8:7e:ca:b5:d1:83:c3:d1:ce:be:c7:db:aa:29:0a:dc:
e7:a5:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:23 2026 by rpki-client