Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: eG8UCeANmCviTyZmTGeJb0rLs6IBZ+cixeSXTkMenxQ=
Subject key identifier: E4:5A:08:02:B8:15:78:D9:F7:BC:C1:B7:33:8C:44:38:07:48:9B:54
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019F9323A505D7DC2C294F53F8EFD53CF1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0A3A
Signing time: Fri 24 Jul 2026 08:00:14 +0000
Manifest this update: Fri 24 Jul 2026 08:00:14 +0000
Manifest next update: Sat 25 Jul 2026 08:00:14 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: TUO0LbWyfXjHLkcqBpa05hzmkOr5rjJtMF5M4/ZA1Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:a5:05:d7:dc:2c:29:4f:53:f8:ef:d5:3c:f1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Jul 24 08:00:14 2026 GMT
Not After : Jul 25 08:00:14 2026 GMT
Subject: CN=e45a0802b81578d9f7bcc1b7338c443807489b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:76:b7:fd:30:6c:aa:b6:40:09:7c:eb:df:
f9:01:e5:58:b3:2e:54:37:d8:90:08:13:06:9b:98:
fb:47:d1:ee:7a:5a:e7:8b:88:76:bb:11:45:fb:ec:
14:21:2f:5d:19:93:79:9b:bc:96:4b:03:36:3d:ec:
9b:9a:a6:7d:75:4d:f6:02:fa:32:37:1a:1c:c7:d2:
ca:f0:79:c5:d1:69:35:3e:eb:c2:44:b3:92:8b:5c:
54:8d:9f:4c:f4:8b:1c:57:86:f6:66:72:ed:c6:02:
4c:34:e9:87:45:73:6d:77:67:14:53:74:9f:f6:66:
05:31:25:33:e0:8c:08:08:36:1a:84:65:0f:bc:e6:
eb:16:65:0f:f9:cc:5a:1d:f9:c3:43:7c:c4:a2:52:
de:00:0a:b7:3a:95:04:73:14:88:09:00:55:58:14:
3d:4f:6f:3e:26:00:d6:c8:dd:32:a2:9a:da:ac:d4:
83:9d:0e:b9:51:82:77:13:e2:3c:6f:d9:ac:78:41:
fb:67:49:05:e5:d9:6f:a3:ec:99:19:79:79:8d:09:
07:17:f4:e9:25:27:08:77:8e:60:2b:9c:54:c7:1f:
ed:a3:a3:5a:f7:03:c6:25:2e:be:66:d6:e7:92:c4:
8c:e4:07:14:c5:7a:8d:a0:a3:bc:53:9d:29:6f:73:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:08:02:B8:15:78:D9:F7:BC:C1:B7:33:8C:44:38:07:48:9B:54
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f8:c6:81:a1:b2:4f:27:49:4c:52:a9:21:2c:1e:12:0c:2b:
be:7a:7c:1d:3a:58:91:0c:e9:02:0f:45:58:9d:b1:a5:64:84:
2f:5b:56:86:66:db:75:62:c9:56:fe:8f:44:ad:e7:62:71:95:
47:56:89:50:91:82:26:c0:f1:07:f5:0c:b8:18:aa:87:2d:1b:
b3:eb:a5:69:f1:61:17:69:4c:f6:4a:98:21:cc:4b:f6:9e:f2:
ac:ad:a9:9d:36:a6:de:7e:ec:f2:e5:95:8a:83:57:38:d2:4a:
86:62:3d:78:1b:5a:42:74:ba:8c:06:8d:7e:b7:6f:68:ef:ec:
0c:54:85:e7:38:42:62:09:dc:fa:25:8e:16:23:53:ed:ed:19:
6b:b0:34:e2:4a:3a:a2:01:1b:cc:97:38:01:24:6f:7c:a2:a1:
25:24:93:b5:05:5b:fa:33:31:8b:51:8a:d6:8d:f8:ef:95:54:
77:1c:09:5d:09:70:1c:41:54:4e:40:0f:f5:6b:de:38:55:2a:
e2:65:4e:4a:d4:be:89:3f:23:97:4e:09:ab:a2:16:ec:c4:3c:
90:a0:f7:fe:02:cd:f9:df:ba:77:3c:e6:dc:94:75:c4:8d:be:
60:33:99:b4:32:4c:ce:41:48:d7:38:15:eb:a8:31:c7:3a:33:
50:5a:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:51 2026 by rpki-client