Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: xwk40yt24kgrJWAykHHN9yLmCCXNNLKLH7/e1KZoj5g=
Subject key identifier: AA:29:10:A8:B0:01:CA:3B:87:A4:F5:8F:C9:18:33:95:48:47:E3:26
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 01A1DE029A25B01D9202F24AABC1923F2BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 07:01:14 +0000
Manifest this update: Sun 15 Nov 2026 07:01:14 +0000
Manifest next update: Mon 16 Nov 2026 07:01:14 +0000
Files and hashes: 1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
2: MrTeH3244GhrsmktdFmsilQf7DQ.asa (hash: GC9kidXivmf55i4xsJViQsWGsdVImec2c8gAa1Wm8VM=)
3: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
4: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: 6lRLt8kqKwYerKRH7IXrquEOZg9nzd/5AuOjJAkEHFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:9a:25:b0:1d:92:02:f2:4a:ab:c1:92:3f:2b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Nov 15 07:01:14 2026 GMT
Not After : Nov 16 07:01:14 2026 GMT
Subject: CN=aa2910a8b001ca3b87a4f58fc91833954847e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:93:77:a5:cb:61:84:83:ab:35:90:8b:7b:
7e:ac:60:29:ec:4f:df:cd:9a:8b:89:ba:d6:67:a3:
c6:76:2f:54:88:b4:c7:b7:93:72:ca:74:50:dd:08:
82:82:37:47:30:be:27:09:0c:8f:e5:93:2d:ce:a2:
e4:b3:f7:aa:fc:a1:b0:ed:6e:ed:10:c3:37:45:72:
14:ca:72:6a:b5:3a:d0:01:b6:25:15:d1:02:c6:90:
2d:57:ae:e5:46:20:7e:34:d9:50:fa:5f:bf:86:26:
e3:5b:db:f1:44:1f:75:8c:f2:47:f3:45:d4:5f:5f:
22:76:d3:ae:72:bf:b5:20:92:a5:a8:17:91:ff:5f:
3e:df:5d:d0:92:21:17:57:0b:ef:b1:b1:e0:81:97:
10:22:57:09:25:d4:12:a2:07:ce:03:b8:48:da:45:
87:f5:ae:c4:09:7a:57:0b:70:af:5a:b9:08:fe:d8:
f6:76:5c:b6:8e:bd:a5:c2:71:fa:68:31:b4:25:61:
c1:d3:47:0e:e7:39:1b:07:6c:0d:07:a1:b1:a1:57:
9c:23:5e:59:2a:d5:70:47:76:69:6f:41:70:ec:fe:
64:9e:ce:59:bd:b5:f5:9e:13:24:13:00:7b:1c:a7:
e3:a4:42:e9:f6:1f:d1:26:a6:95:da:aa:3b:d1:c4:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:10:A8:B0:01:CA:3B:87:A4:F5:8F:C9:18:33:95:48:47:E3:26
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:21:3e:aa:da:00:0b:13:6a:c6:7b:09:6d:a1:f2:f8:f6:
de:27:23:8d:35:e3:e3:73:e4:29:9a:37:80:aa:91:b0:5b:89:
6a:1d:eb:2f:7c:49:c1:27:5b:0f:a4:f8:b9:11:f7:47:cd:c8:
c2:6c:ca:6e:68:a9:3f:5b:c8:f0:fe:9e:de:88:12:2f:94:aa:
a1:f7:c9:ed:49:49:1d:65:a2:8c:63:7f:7e:1f:85:87:18:38:
54:9e:2d:37:77:3a:bb:e9:0b:6d:25:f4:86:84:ae:0e:f9:d0:
ce:b2:07:fa:ae:fb:1b:09:f5:60:a8:cb:bc:b7:93:4b:38:02:
ab:9e:69:c1:65:60:57:8f:24:47:b4:88:26:b8:5b:ee:0d:a0:
66:35:bb:dc:55:ae:d7:19:e7:b2:9b:92:8f:08:fd:7c:0f:69:
49:90:17:e4:de:05:5f:47:09:c6:81:b2:ea:09:13:cb:80:90:
98:cb:0a:7d:b1:d5:a8:7c:f1:6d:46:97:7f:80:46:f8:d0:8d:
19:03:ec:4d:f9:be:c3:13:d8:c3:98:f7:a5:75:18:f6:a8:87:
15:1a:a3:ea:6a:a4:32:f4:7b:62:09:d6:3e:1f:7e:c1:5e:41:
7d:af:3b:75:cc:f1:36:59:02:ee:24:51:0a:e9:c5:ea:46:05:
e3:0b:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:45 2026 by rpki-client