Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: myY1e23nbW6s2YxMIidxDE6BMdAOqZubBZVIH2QyDiA=
Subject key identifier: A0:46:E9:99:2B:FF:39:C6:35:5A:86:2E:A0:A8:55:85:82:69:50:74
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 01A0DA96DB173DE4B6BA7D0B603B17D2BF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1953
Signing time: Fri 25 Sep 2026 22:01:54 +0000
Manifest this update: Fri 25 Sep 2026 22:01:54 +0000
Manifest next update: Sat 26 Sep 2026 22:01:54 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: qSsOhv4DOU5RmLGIrd1C+Yr7VbC0+eZ5EIjAoPuYFpo=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:db:17:3d:e4:b6:ba:7d:0b:60:3b:17:d2:bf:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Sep 25 22:01:54 2026 GMT
Not After : Sep 26 22:01:54 2026 GMT
Subject: CN=a046e9992bff39c6355a862ea0a8558582695074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:dc:9b:26:95:fb:d8:1d:06:ab:90:0f:71:
42:cd:d9:0e:5a:12:53:b9:47:f0:5e:23:52:f7:ab:
35:d8:8f:c8:39:d6:75:ea:83:f6:48:cb:e3:dd:00:
b9:58:74:19:0c:7c:74:be:b0:b8:36:0f:05:d5:a4:
9e:ae:ae:07:49:cf:a5:da:d7:92:19:df:dc:e3:58:
cd:c2:a5:73:38:29:06:96:7e:22:5b:88:86:6c:f8:
d4:55:04:69:47:af:da:b3:ba:dd:fe:41:db:16:3b:
de:23:dd:96:ba:e0:28:be:24:75:ff:e4:57:77:0e:
54:3c:3e:63:02:cc:d9:56:30:c8:93:9b:fc:4d:d8:
1c:62:de:06:8f:20:35:89:8a:c0:1d:80:f1:07:69:
c3:85:79:ee:81:14:d3:d7:40:2e:f8:d4:2f:c3:8d:
93:b2:01:f2:1d:a2:6d:63:30:8c:97:74:c3:a2:fc:
04:e8:69:5f:74:ca:1e:0a:28:2b:62:3b:48:54:5a:
ed:ff:15:0f:ef:c4:db:93:dd:60:04:29:df:a4:41:
f1:db:43:36:19:f0:46:8e:79:76:75:7d:3a:6e:ca:
01:30:35:90:e2:4d:4b:6e:5c:ba:79:56:22:78:6c:
cd:32:65:1e:7d:e2:93:cb:8b:3e:36:2e:a7:94:0c:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:E9:99:2B:FF:39:C6:35:5A:86:2E:A0:A8:55:85:82:69:50:74
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:28:e6:98:36:a8:83:38:ca:5f:58:9f:cf:ce:58:d4:8a:dc:
ab:67:cf:18:90:db:26:30:2c:42:ec:6a:40:6d:b4:a7:b3:d0:
3e:b6:3e:76:e0:42:17:75:bd:7f:11:ec:72:b0:82:21:b8:c6:
e0:f7:83:74:78:e4:5f:09:79:fc:8c:ae:22:aa:9b:ea:7d:20:
d5:29:ae:0b:02:aa:b4:2f:ca:11:48:6d:78:cf:f4:9e:aa:ea:
aa:bf:0f:1f:4a:91:ff:6b:41:1c:8f:8d:f8:fc:83:0d:11:4d:
29:d3:6d:71:c8:9f:00:63:13:5a:8e:9c:51:98:1b:f1:37:27:
55:1d:83:e9:88:b2:93:15:a3:f6:74:cb:58:b9:67:8c:53:28:
31:4d:fd:3b:e9:39:a2:21:b4:bd:3e:34:17:c2:83:d1:0a:85:
82:2b:41:e6:20:90:50:d7:38:c9:5d:a4:1d:c4:17:e6:55:3f:
1d:2d:1a:a9:9a:da:2e:34:25:3f:ac:ce:91:7f:b2:48:d8:2c:
bf:ce:1c:e6:af:55:39:41:30:1a:12:f9:29:26:5d:23:46:48:
1e:c7:22:6a:54:a5:85:80:41:fb:a7:74:b3:6d:02:34:94:c1:
26:d1:32:59:12:3d:f3:c8:4f:f0:c6:93:a3:c2:eb:1b:42:02:
c8:b5:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:08:28 2026 by rpki-client