Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: Zm9v5HK2tpTJEof0iSRizNeR3aDoRUTsPVxkTz2IJEw=
Subject key identifier: 87:E4:0C:AD:F7:63:76:56:A9:20:33:48:03:E8:46:02:35:F5:75:DF
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 01A1DE39CCB3A0BEAE30212F59D28762E807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 08:01:32 +0000
Manifest this update: Sun 15 Nov 2026 08:01:32 +0000
Manifest next update: Mon 16 Nov 2026 08:01:32 +0000
Files and hashes: 1: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: dcQRsFIQvoxMnDQf4el3F0jdhHAIB5mL1NRDg0yDVUY=)
2: yu7FGYZBG0qZPxFlCSBNuH6vubo.roa (hash: TJHmQ5jIZkK8Ij/mX9PCFzWqzWwlwt2c2mMEyeNiyPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:cc:b3:a0:be:ae:30:21:2f:59:d2:87:62:e8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Nov 15 08:01:32 2026 GMT
Not After : Nov 16 08:01:32 2026 GMT
Subject: CN=87e40cadf7637656a920334803e8460235f575df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:7f:a2:9a:c4:01:3a:f1:f0:cb:a4:be:8b:
1d:87:32:69:3a:46:0f:95:b7:8b:bf:8d:d9:87:97:
60:69:c8:e0:d5:2f:6f:ce:16:37:44:b1:bf:8f:f1:
97:9f:aa:a8:ed:9c:b4:13:4a:18:fd:85:e5:d7:f9:
bf:e6:40:ed:39:e3:83:fe:fb:c2:53:1a:f1:1e:12:
99:30:74:45:02:df:6d:e6:78:27:a1:ba:fb:5b:0e:
ab:ce:82:e4:ac:bf:9b:d7:1b:73:83:ce:12:7b:ac:
8d:85:88:fc:dd:b2:bf:b2:8a:38:c1:3a:30:7d:81:
d9:24:9b:df:cb:2d:fe:95:bd:f6:63:ce:e8:73:f4:
c5:8c:12:93:0a:24:80:9f:54:87:0b:af:33:b4:16:
dd:03:49:72:25:18:80:fb:27:f0:cb:05:2b:99:83:
a5:c8:a6:38:e7:a0:e4:c4:39:83:fb:12:cf:9c:a8:
e1:f2:c2:80:40:4f:a5:93:ba:6a:b5:07:d8:53:87:
65:40:6b:ae:c8:db:32:e2:00:dc:39:1d:e8:3d:78:
b8:ec:f1:7a:00:47:91:75:38:86:5e:45:5d:ab:ab:
50:61:81:c6:7f:89:e8:5f:8a:31:63:24:5f:eb:58:
6e:90:bf:39:a2:f2:4b:37:a2:01:fd:d4:2c:0a:69:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:0C:AD:F7:63:76:56:A9:20:33:48:03:E8:46:02:35:F5:75:DF
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:99:4b:92:6a:9f:e4:f1:71:d9:95:13:83:54:33:a5:eb:8d:
56:e8:5d:9a:5b:79:11:48:69:e1:03:11:e7:33:38:02:80:0e:
fe:5d:fc:e1:ec:ea:5d:cf:17:25:b8:6b:8d:67:92:4d:dc:37:
48:8a:16:6f:d2:8f:c4:ad:e0:89:0c:36:4b:6c:3f:04:a2:5a:
fe:08:d0:76:c1:4b:8c:2a:d4:90:f9:99:b7:96:c1:28:91:a8:
14:77:a3:a1:db:45:90:8c:fd:1e:d0:16:8e:b6:dd:33:83:16:
26:e5:97:a0:ec:9b:e1:a5:e2:f0:6f:b5:10:f9:3f:18:05:ea:
36:67:e8:01:d6:e8:22:c8:71:81:35:d2:d7:99:66:6e:49:71:
8d:13:17:a6:25:bd:e4:06:65:32:d4:f7:7c:52:0a:39:e7:d5:
b3:ec:fb:9b:96:fc:db:1d:e2:29:b9:cc:e4:50:4a:68:17:2a:
f9:40:68:04:c8:cd:66:3a:1c:04:d9:5e:e2:29:9b:5f:d9:fa:
75:70:58:a0:2a:e5:1a:84:0a:9d:69:3e:e3:31:a5:f6:27:1d:
cf:06:53:2a:0a:40:cb:6f:a7:70:59:6b:ac:5e:65:07:fe:dd:
dd:11:bd:2b:8d:26:8f:37:8b:1f:f6:15:bc:70:5d:71:e0:6b:
16:75:cf:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOcyzoL6uMCEvWdKHYugHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDVhNGVkMTdhNjgxODQyMTAyY2M4ZjZlZjAzYTU2OWUx
NTYxMmEwHhcNMjYxMTE1MDgwMTMyWhcNMjYxMTE2MDgwMTMyWjAzMTEwLwYDVQQD
Eyg4N2U0MGNhZGY3NjM3NjU2YTkyMDMzNDgwM2U4NDYwMjM1ZjU3NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9d/oprEATrx8MukvosdhzJpOkYP
lbeLv43Zh5dgacjg1S9vzhY3RLG/j/GXn6qo7Zy0E0oY/YXl1/m/5kDtOeOD/vvC
UxrxHhKZMHRFAt9t5ngnobr7Ww6rzoLkrL+b1xtzg84Se6yNhYj83bK/soo4wTow
fYHZJJvfyy3+lb32Y87oc/TFjBKTCiSAn1SHC68ztBbdA0lyJRiA+yfwywUrmYOl
yKY456DkxDmD+xLPnKjh8sKAQE+lk7pqtQfYU4dlQGuuyNsy4gDcOR3oPXi47PF6
AEeRdTiGXkVdq6tQYYHGf4noX4oxYyRf61hukL85ovJLN6IB/dQsCmm7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfkDK33Y3ZWqSAzSAPoRgI19XXfMB8GA1UdIwQY
MBaAFCcFpO0XpoGEIQLMj27wOlaeFWEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUt
NjUzNjhmNDA4ZGEzLzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUtNjUzNjhmNDA4ZGEz
LzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWplLkmqf
5PFx2ZUTg1QzpeuNVuhdmlt5EUhp4QMR5zM4AoAO/l384ezqXc8XJbhrjWeSTdw3
SIoWb9KPxK3giQw2S2w/BKJa/gjQdsFLjCrUkPmZt5bBKJGoFHejodtFkIz9HtAW
jrbdM4MWJuWXoOyb4aXi8G+1EPk/GAXqNmfoAdboIshxgTXS15lmbklxjRMXpiW9
5AZlMtT3fFIKOefVs+z7m5b82x3iKbnM5FBKaBcq+UBoBMjNZjocBNle4imbX9n6
dXBYoCrlGoQKnWk+4zGl9icdzwZTKgpAy2+ncFlrrF5lB/7d3RG9K40mjzeLH/YV
vHBdceBrFnXPrQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:16:38 2026 by rpki-client