Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: G9GOUtfCrROLlSHN7ddCckF3azEKCjk5Gp5FSNIlTB4=
Subject key identifier: 0D:6C:1A:E9:0A:86:64:6E:48:5E:1F:BB:05:0C:D2:72:3E:39:96:CF
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019F94368BAB05EF06173D2A055CDFDBA3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 18AA
Signing time: Fri 24 Jul 2026 13:00:30 +0000
Manifest this update: Fri 24 Jul 2026 13:00:30 +0000
Manifest next update: Sat 25 Jul 2026 13:00:30 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: CZ/P/uiwJXaUkNWRsRoSQpQLQ614BnquWn944Gs0yvs=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:8b:ab:05:ef:06:17:3d:2a:05:5c:df:db:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jul 24 13:00:30 2026 GMT
Not After : Jul 25 13:00:30 2026 GMT
Subject: CN=0d6c1ae90a86646e485e1fbb050cd2723e3996cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:b3:d3:a2:2b:5e:cc:c7:36:39:93:07:bc:
24:81:8c:d2:34:b5:fe:3d:09:e5:18:83:c6:28:f0:
6d:90:dd:7d:6c:b3:4a:a4:05:3e:26:79:8f:28:a3:
f8:d6:e4:e9:8d:60:1e:15:8d:da:55:b2:4d:5a:8a:
e8:d6:6e:50:c6:94:a5:e8:ec:b3:83:12:99:ad:1b:
01:08:32:9f:f3:a3:d3:72:0f:d9:cc:a8:e5:ae:26:
81:49:e8:1f:78:1b:2c:30:96:fd:a9:d8:0c:76:f3:
89:c7:99:c3:ff:a1:3a:f8:c7:b2:d2:79:64:d7:35:
95:ac:f6:37:fc:0e:6e:01:0a:97:bd:da:ba:59:24:
ff:f1:da:37:e5:d6:ab:d4:06:57:6f:97:38:43:c0:
ab:83:75:d2:72:d7:58:32:35:65:80:82:8f:0c:c6:
65:35:de:87:6d:e9:58:55:74:a0:8e:39:51:5b:d5:
66:d9:3a:e2:bd:bd:d3:05:e4:6c:20:c7:d9:35:b5:
87:9f:b6:25:19:26:15:54:0b:b0:3c:b7:40:d9:23:
bd:1b:f4:ba:47:ac:a3:2f:fc:f8:49:d0:0b:71:23:
89:e3:e2:ce:ed:53:b6:b6:48:6a:95:05:9b:34:5c:
6c:7f:00:6e:15:8f:59:ab:0b:78:c7:75:ca:29:fc:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6C:1A:E9:0A:86:64:6E:48:5E:1F:BB:05:0C:D2:72:3E:39:96:CF
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:d1:ca:15:46:70:45:e0:d9:fc:80:3b:d4:05:e1:18:27:
07:49:9b:7f:80:25:1c:1f:88:5c:05:b5:87:2e:86:bc:7b:41:
1e:b3:d2:b3:b0:f1:d5:01:25:c5:5c:ba:56:9b:70:26:47:2d:
97:d9:e4:05:f7:a2:5c:5e:2c:82:88:a8:0d:f3:40:b2:06:82:
5f:8d:45:12:54:c1:3a:ef:db:a7:80:c5:f4:88:c9:ea:bc:fb:
67:16:a3:f9:59:f3:bd:bc:87:e3:35:c4:94:bc:fe:76:44:7e:
74:4f:78:81:49:3b:44:64:28:45:bd:20:68:99:4f:aa:38:49:
48:d4:54:08:61:f1:84:99:c5:c2:22:a6:7b:e1:24:72:32:1c:
dd:46:08:6d:38:d3:e5:de:58:95:f9:c5:10:66:ce:51:8c:30:
c6:17:13:91:2e:25:b9:56:38:3b:ae:f6:b7:c9:4e:ca:f9:3f:
a9:b2:bb:6d:ab:8a:53:c5:1f:7c:59:ff:eb:21:8f:9e:4e:02:
79:4e:88:c6:f0:22:32:9e:91:da:01:01:cf:b5:2e:0e:a2:02:
bb:05:7a:e8:e9:81:bc:45:c0:c7:ac:c4:db:2a:18:5c:c2:07:
2a:90:8c:5d:35:76:a8:c2:f5:5d:ba:63:41:b2:13:aa:e4:57:
d9:29:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:57 2026 by rpki-client