Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: 6wJTDTNuk+p8LW16+oSldOtPYN0theO+FOuZT8uLxN4=
Subject key identifier: 2F:D9:2C:04:EA:1F:63:C4:B2:12:32:2E:14:B7:FD:12:58:5C:A3:74
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019D284D7D495459A742EFDE70FDAEB3A346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1769
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: u5s1XdQBJGVra3PLVZ49E3tEQJHTl7NeHYP++JIwDb8=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7d:49:54:59:a7:42:ef:de:70:fd:ae:b3:a3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=2fd92c04ea1f63c4b212322e14b7fd12585ca374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:5c:ee:7b:03:10:d4:54:62:83:6d:2b:5f:
53:de:2b:71:76:ae:c0:2e:a5:75:f5:e0:43:ac:e9:
0c:a0:f6:78:54:ed:c7:98:3b:b0:46:63:9f:cb:9f:
4d:02:7c:69:6c:6f:84:1e:ff:93:d4:16:80:2c:33:
fc:19:72:a5:99:07:74:81:cc:91:08:26:ae:82:be:
9e:d6:84:61:e2:94:82:a9:96:92:90:cf:2b:b6:d9:
96:1e:15:a0:c1:13:5b:8d:35:30:cd:d4:a0:52:32:
b5:6b:71:bf:c1:27:48:67:7b:a0:7a:a7:da:70:cf:
f4:29:13:43:b5:f8:b1:d3:23:3d:5f:6a:a1:15:e0:
d7:20:e3:75:95:5a:bc:85:64:46:83:f0:03:d7:00:
c0:00:54:1c:80:8c:87:dd:bf:52:31:b0:45:db:98:
58:85:c1:07:94:2d:e6:bf:dc:48:33:2e:41:97:71:
f8:c0:4c:35:96:8e:b5:10:4e:19:96:86:5c:1b:68:
8e:1c:5f:2d:fc:8a:fa:b6:78:54:8e:79:e8:d7:06:
b2:a8:4b:47:dd:cd:7d:ab:c7:80:ab:dc:9e:36:87:
44:04:2f:bd:5b:e3:80:67:3b:db:50:a7:e9:09:87:
49:33:98:40:b3:bf:b2:e0:bc:91:4a:a2:2d:f6:1f:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:2C:04:EA:1F:63:C4:B2:12:32:2E:14:B7:FD:12:58:5C:A3:74
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:81:83:56:a4:43:24:54:50:d7:bb:48:27:b4:97:f2:d4:d6:
fc:d4:0e:11:83:26:24:07:9e:6a:ab:79:b2:1c:ef:4f:31:ef:
be:90:f1:64:89:17:e7:94:f1:a9:d7:a4:42:50:db:a4:08:e9:
2c:7f:8d:27:eb:eb:8f:1f:4a:91:34:d1:fc:43:17:b8:74:3e:
83:5b:2b:0b:ee:22:4a:0d:92:c2:2a:9b:96:f8:44:4d:c6:45:
ab:bf:1c:28:88:3b:8a:d0:db:64:91:a6:2f:f7:48:94:4f:5d:
0d:5d:cd:ef:53:c7:83:b8:57:6f:e3:8c:e8:bb:c5:cb:b1:c7:
59:e5:c2:9f:cc:d8:5c:51:d6:a0:e1:48:99:a3:d2:45:5a:fc:
4a:76:d7:0d:9c:d4:f9:02:6d:d9:a3:07:ee:5f:94:43:61:7b:
cb:05:cc:a7:f1:62:6c:e2:0e:de:73:bc:c4:9e:a7:53:b0:9b:
d4:1a:2c:d1:cc:8d:07:90:74:30:eb:74:a5:ed:fb:5d:ce:f5:
a3:6e:b6:98:b0:97:47:a9:49:9d:20:59:ce:82:09:20:65:38:
70:d4:c7:46:3c:21:91:cc:57:ec:14:85:59:65:c2:9c:10:d7:
d5:0c:02:b0:2a:0d:68:6e:a8:ba:57:06:a2:47:a2:7b:41:eb:
2b:62:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:49:55 2026 by rpki-client