Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: ETbDIySgQwkIe7XO310t0UNSyhVCBQMcORgMYQ3S5tA=
Subject key identifier: 2F:A7:EB:88:74:6E:ED:A7:D2:21:10:49:F0:48:DA:37:99:21:0F:E8
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 019FACACA4154DEB5EA13955683884A8BC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 191D
Signing time: Wed 29 Jul 2026 07:00:23 +0000
Manifest this update: Wed 29 Jul 2026 07:00:23 +0000
Manifest next update: Thu 30 Jul 2026 07:00:23 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: cCONUV1l/qzuT0Sd27r9cmQCGZ6tSlSAbBvC5c+K9vA=)
2: OLzTLKZWnHaNaZZXNLTfX_9MFKk.roa (hash: JRtB2SbXcPB1CPRDQRS38H4AmEHg2R09GikXd7+2l5U=)
3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=)
4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:a4:15:4d:eb:5e:a1:39:55:68:38:84:a8:bc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jul 29 07:00:23 2026 GMT
Not After : Jul 30 07:00:23 2026 GMT
Subject: CN=2fa7eb88746eeda7d2211049f048da3799210fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:f5:db:0f:46:48:a8:6e:e4:d0:e1:d6:89:
a3:3b:46:ad:ad:81:4d:ec:26:eb:59:ba:73:6a:34:
7c:04:de:ec:bc:50:a7:5d:84:22:07:9a:27:50:6d:
95:1b:53:3e:84:a8:27:66:99:28:ca:8f:b2:95:60:
fb:ea:69:d7:b4:d3:eb:60:ff:fe:db:d9:14:4b:e0:
b5:18:76:a1:b5:e5:d6:76:8a:96:11:5c:ad:b7:0a:
59:b1:09:d9:16:7f:ff:f3:28:4e:7e:13:89:1d:73:
15:4b:fc:9a:72:66:49:96:70:98:68:32:83:9a:5a:
56:13:5c:27:26:f5:02:fc:fa:47:91:56:d9:61:01:
3f:e9:d9:46:0b:77:44:78:89:c9:7b:13:98:f4:2f:
24:3a:ed:f7:52:7e:63:e9:66:8b:16:51:59:4b:63:
88:a1:04:2d:fb:95:06:95:55:04:0e:10:94:7c:24:
f8:b0:f1:3a:af:2b:d0:98:dc:52:98:a4:72:dd:e9:
8c:8f:6b:b6:95:6f:38:99:bb:28:1a:af:5b:c2:ea:
f1:b9:15:6f:fb:e3:0d:1b:e0:73:3c:1f:9c:c2:61:
df:8c:61:ee:9b:b3:3c:20:09:39:e8:e9:aa:d5:3d:
e1:2f:d8:b3:3d:ae:7f:cd:42:3f:6c:ce:29:cb:84:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:EB:88:74:6E:ED:A7:D2:21:10:49:F0:48:DA:37:99:21:0F:E8
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bc:01:b0:77:2e:f6:a1:59:bd:29:17:57:44:29:5e:40:9e:
ba:51:22:c4:6f:b8:88:26:13:a2:cb:57:23:ae:78:de:9e:47:
aa:d9:6f:43:96:a2:41:87:6b:a7:e6:e0:26:ca:58:0c:e1:65:
cb:5a:1a:cb:e3:b9:73:3d:11:1b:1b:e8:8b:a8:30:de:84:57:
8e:f2:67:de:11:3b:96:dc:67:04:18:2f:54:bc:ac:91:b7:ef:
c3:c8:fc:34:92:ae:64:e0:80:62:72:e3:c8:1f:fa:9e:0a:e2:
15:81:97:83:c6:a6:7d:2c:83:ed:22:22:dc:12:79:66:99:29:
6b:e5:e2:59:45:17:f8:8a:9a:f4:85:19:a8:4b:9d:d6:70:c2:
95:d7:af:b8:39:57:65:79:1f:73:de:ad:b7:13:41:fc:67:62:
fe:00:96:e9:61:13:80:48:e5:e7:6d:2d:a7:5e:6d:7e:55:39:
4a:44:c4:7e:24:4c:e6:4d:da:f9:24:9d:26:4a:8c:e1:67:58:
3e:53:7b:32:34:2d:96:6c:c0:5f:8a:9f:7c:44:94:aa:80:b1:
65:dc:b3:b8:be:df:16:ac:5d:6c:30:5e:47:84:bb:79:66:35:
b3:33:0c:f1:2b:e0:e2:4a:f5:2f:d6:5e:e1:af:78:5a:12:eb:
83:ed:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:32 2026 by rpki-client