Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: Xn63t3lNbr0npdg8ak05c7NZH0W7RRnE+W6WFA750BY=
Subject key identifier: 3A:04:D2:39:4E:98:E1:CD:DF:09:9F:A2:0E:BF:89:39:27:28:FA:9A
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 01A0E32BF676DFA06432F103E4FCE4506043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0AE8
Signing time: Sun 27 Sep 2026 14:01:44 +0000
Manifest this update: Sun 27 Sep 2026 14:01:44 +0000
Manifest next update: Mon 28 Sep 2026 14:01:44 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: HKcKq7Zj7KSOjzQdnDqdeqMz67KBsbqwtxt0C2un/SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:f6:76:df:a0:64:32:f1:03:e4:fc:e4:50:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Sep 27 14:01:44 2026 GMT
Not After : Sep 28 14:01:44 2026 GMT
Subject: CN=3a04d2394e98e1cddf099fa20ebf89392728fa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:9f:83:92:91:58:43:eb:95:88:8e:89:52:
f7:94:d2:31:33:fb:cb:c2:b9:08:a3:d9:60:db:1b:
42:e5:b1:fb:87:42:42:a4:c0:c7:1c:01:aa:cc:b5:
01:93:2d:08:31:51:9d:5f:99:4d:72:90:aa:65:d8:
1e:51:c4:3a:9c:21:4c:87:08:a2:a4:01:c5:49:fb:
99:23:29:39:f3:e2:8d:7a:29:01:1e:2c:d6:73:98:
07:76:bf:96:7d:cb:67:3d:42:b2:29:c0:c6:07:d3:
a2:4f:15:41:dc:01:eb:72:3b:2c:d3:3d:a6:74:a5:
03:06:7d:00:db:6a:d8:11:ee:83:f5:2c:62:e4:8b:
40:d5:80:2b:75:3d:07:7d:e7:f6:6c:59:33:58:b6:
7b:30:68:3e:7d:67:31:c8:9d:fc:7a:3d:cf:f0:b7:
8f:49:46:30:a2:bd:c5:6f:74:aa:2d:8c:e8:26:af:
90:4b:bb:03:5b:ee:73:2a:95:89:c2:1c:76:92:8f:
d7:6f:4f:bf:33:1d:33:8e:56:a4:a3:e5:a6:56:1d:
b2:70:35:54:bd:61:3a:6a:d3:38:1f:43:32:8b:61:
63:9d:ae:33:d3:71:f3:1f:62:58:5d:42:b6:28:9c:
29:35:c5:27:04:74:3f:cc:70:8a:96:55:1b:d5:ab:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:04:D2:39:4E:98:E1:CD:DF:09:9F:A2:0E:BF:89:39:27:28:FA:9A
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:90:da:d0:d3:32:bb:e7:01:e0:ac:58:30:27:b3:43:6b:
13:5d:0f:1e:49:69:5d:49:5d:fb:c4:e1:fc:26:1f:e8:d3:9a:
e4:f9:1a:7f:3f:88:df:75:27:64:19:6e:c4:9c:c1:09:a3:39:
74:f5:2f:55:65:e5:3f:f4:7a:a0:ac:4c:39:b0:e5:44:ab:58:
51:94:aa:27:0e:3a:15:56:cd:2e:24:56:31:58:e6:77:9b:06:
49:55:c7:06:f0:9d:3e:58:a3:93:ab:76:85:4a:a0:3f:86:55:
63:6e:85:7b:06:6e:85:e6:7f:b5:9f:7d:7d:3f:7b:e2:ed:d2:
1e:5d:4b:45:8a:45:93:40:c4:c0:a5:c9:7b:d9:71:96:16:61:
88:13:22:38:00:13:00:c6:60:f2:f7:1d:3f:82:c2:db:56:4c:
54:65:e8:b3:2f:2c:0c:76:fb:17:87:ea:a2:3b:d7:92:a5:2b:
2b:3f:98:de:ce:a8:33:49:29:47:94:80:c3:06:73:a3:dd:28:
88:63:b3:31:ec:da:51:7a:be:72:97:9a:58:90:be:ef:40:54:
35:f5:ec:97:90:00:ea:bb:32:db:62:b3:d8:22:e1:39:b0:c9:
3c:a8:ee:24:f7:29:4f:7f:d5:df:fa:99:59:08:68:f1:03:7a:
6f:cd:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:52:38 2026 by rpki-client