Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: EOFEGdTCb32a/GZBfUVzJ3ofg7V4mHAPTyDkVPgib/g=
Subject key identifier: BA:D4:6C:93:05:DA:F5:3C:B8:93:4C:05:80:A9:49:81:B2:B9:E5:37
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 01A0D3B8ECC5D5B1AAB2991552167FBDD90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 14:01:46 +0000
Manifest this update: Thu 24 Sep 2026 14:01:46 +0000
Manifest next update: Fri 25 Sep 2026 14:01:46 +0000
Files and hashes: 1: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: zxGlvpvqqXckRqosULnXmLWEiEIpFuwlSWEB9C1I8L8=)
2: yu7FGYZBG0qZPxFlCSBNuH6vubo.roa (hash: TJHmQ5jIZkK8Ij/mX9PCFzWqzWwlwt2c2mMEyeNiyPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:ec:c5:d5:b1:aa:b2:99:15:52:16:7f:bd:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Sep 24 14:01:46 2026 GMT
Not After : Sep 25 14:01:46 2026 GMT
Subject: CN=bad46c9305daf53cb8934c0580a94981b2b9e537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:91:d7:e5:c4:ac:d5:51:31:f3:3e:90:43:
6f:5b:c9:2f:13:27:0c:84:cb:83:cc:17:36:8c:65:
ae:3b:db:8e:a3:f2:4d:75:4d:85:40:83:1a:04:68:
7d:b7:0c:b6:6f:59:cf:8f:18:23:83:ec:21:cb:5a:
63:19:53:13:b0:a7:2b:15:42:b9:5e:e2:4f:4d:b9:
2c:17:17:dd:a2:8c:f4:30:56:75:92:9b:ad:17:b7:
1c:1f:b5:15:62:b5:77:f3:01:7e:3e:c8:6b:7c:a2:
40:27:ef:3e:ad:9c:2e:3b:13:7b:ef:77:c9:a4:35:
f9:12:19:99:d0:72:51:02:91:69:28:0d:d7:06:a0:
29:51:d9:0f:a3:6e:65:62:8f:e7:7c:1a:6c:e6:c8:
77:58:75:cc:68:0d:43:ec:17:31:fd:74:89:65:66:
38:6d:4b:90:19:61:d0:f3:9b:02:35:d5:b2:1f:5f:
e7:f1:63:b0:91:6c:e1:2c:a3:2d:44:cd:83:21:13:
20:a4:7c:58:32:0e:9e:40:a8:3e:0b:25:09:86:36:
24:25:61:50:20:72:9a:e1:e5:8e:3e:4f:bf:13:c5:
d4:67:bc:2f:f7:3f:cb:d4:7e:5d:e8:3d:de:01:ec:
23:29:3a:86:16:f3:41:55:79:7e:ae:21:6c:67:5e:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:6C:93:05:DA:F5:3C:B8:93:4C:05:80:A9:49:81:B2:B9:E5:37
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f9:0b:d1:53:37:82:a7:c5:7c:ba:eb:4b:da:ed:24:1d:1c:
f5:10:76:63:e4:4b:90:22:26:4a:db:e4:26:52:d4:d4:97:f7:
84:b7:55:1e:2c:75:c6:4e:c2:1f:ea:f9:39:48:21:f1:c6:5f:
f7:21:27:a7:0a:db:89:bc:7a:3a:d3:c9:ce:fd:c9:0e:7b:82:
2a:20:75:6c:f9:87:b9:80:1c:6c:45:a7:a3:e4:d5:c4:f3:aa:
83:a7:62:ab:38:dc:63:f0:b4:02:6f:d1:10:e9:04:a2:fb:b4:
23:7f:b4:19:ae:30:5f:8a:2b:92:3f:00:66:a1:21:fb:b7:a9:
64:70:fc:48:45:41:df:7c:25:74:e3:d6:28:bb:04:14:1f:38:
e1:8f:fc:87:4c:82:1a:f6:ed:3e:93:4e:c8:8a:08:39:25:a6:
48:58:21:95:7b:29:e3:63:98:1a:4a:7d:8b:72:ae:33:65:5d:
a9:3d:91:a4:92:d6:25:fc:75:0c:2b:0a:82:b1:ac:fe:71:60:
cc:34:98:02:6a:c0:4e:e3:74:97:4b:9b:94:5c:04:bd:a1:ab:
08:4d:38:7b:0b:b9:45:27:42:cd:cc:16:59:eb:b0:fa:17:5c:
fc:e0:2d:db:fc:64:f5:5c:11:79:6e:3a:4a:d7:87:b9:9a:0a:
1a:c8:f6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:23:03 2026 by rpki-client