Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: 9mhYBNc3fszguP7Am8wR3g+DDoJgHVc+ihH7Rnir/O0=
Subject key identifier: 55:42:0C:BF:F3:2D:9D:29:D6:83:EC:26:69:3D:D6:6F:3E:AD:0A:D4
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 019CAFB5A48A4E38BFCF90DE08F03FF6A3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 02D1
Signing time: Mon 02 Mar 2026 18:00:42 +0000
Manifest this update: Mon 02 Mar 2026 18:00:42 +0000
Manifest next update: Tue 03 Mar 2026 18:00:42 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: 3uNcGZPpuXFDBsFBhivW75lt3sZd4qFyDNZCh3rMaQ4=)
2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:a4:8a:4e:38:bf:cf:90:de:08:f0:3f:f6:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Mar 2 18:00:42 2026 GMT
Not After : Mar 3 18:00:42 2026 GMT
Subject: CN=55420cbff32d9d29d683ec26693dd66f3ead0ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:ed:77:3a:f2:d0:96:71:1c:5e:d9:9e:b2:
2c:a7:af:45:cd:3e:25:e2:3a:69:58:7e:fc:8a:6e:
cf:51:80:2f:61:d2:16:04:08:43:0a:ad:a4:5a:77:
11:6c:08:9f:64:d1:0a:37:50:83:37:ec:f7:7a:c3:
8c:10:58:85:ac:0e:61:9b:fe:e9:c8:4a:15:ed:77:
10:b4:66:2b:f2:d0:1f:eb:15:3a:2d:d8:dd:ee:98:
cd:1c:3f:da:46:87:13:95:8a:96:63:bb:81:0d:78:
5d:89:a9:57:ee:ba:12:a2:f7:8c:6d:65:4c:06:ed:
d0:01:1f:a3:da:f0:b9:34:40:69:1e:20:e3:10:e6:
f0:34:b8:d1:03:48:5a:ba:72:7d:9e:84:93:e3:fb:
8a:4c:eb:58:9d:13:37:bc:4e:85:5b:c7:34:01:bd:
5c:5d:87:9e:6f:01:8c:6f:1f:7a:56:cd:0e:0e:35:
ef:03:a2:36:d2:04:ca:eb:21:67:34:35:8b:63:c6:
b2:bf:db:c4:69:1f:92:bf:71:33:60:83:96:0c:af:
2c:d9:1e:fe:b2:78:de:6d:e6:7a:1e:f6:62:2d:bf:
b3:b1:93:ea:47:83:c8:f3:37:75:57:ba:5b:e3:c5:
11:9c:ba:1e:71:41:09:d5:45:f0:49:cf:98:5f:20:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:0C:BF:F3:2D:9D:29:D6:83:EC:26:69:3D:D6:6F:3E:AD:0A:D4
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:db:4a:0f:a9:5e:53:3d:75:13:17:6d:74:f8:2e:93:d8:
ad:4b:b2:8c:76:18:dd:b9:69:d5:02:bd:c5:4e:87:61:2d:75:
2d:5e:a1:7c:e7:5d:de:3f:a7:61:dd:fb:29:39:9e:87:13:f4:
d3:59:d2:88:89:5b:76:03:cb:31:3d:b6:ac:c1:fd:85:60:0b:
fb:91:77:a8:28:f4:be:36:08:dd:3f:a9:47:1f:77:7b:d8:d0:
8e:67:1a:4c:60:5f:56:3b:6e:e8:aa:93:1b:ed:f9:eb:1c:1d:
ca:11:a0:d3:01:2f:19:4d:81:1d:d0:d8:ad:ba:dd:d9:cf:e0:
ae:33:c2:6e:38:11:3a:9f:5d:14:9f:1f:df:d7:ee:43:47:53:
27:ad:4f:43:db:2c:17:a1:f3:a3:31:c4:34:6f:1d:86:d1:ab:
cb:25:ba:c1:9c:12:c1:14:04:96:5e:2a:ef:74:4d:67:c1:f2:
b8:a4:7a:9c:9f:db:9d:30:a8:48:f0:4a:72:a3:a8:00:32:28:
93:2a:43:50:d1:a4:c2:81:da:ac:c5:e7:c9:81:94:a9:2e:fc:
4b:d6:89:dd:fe:78:d6:96:05:f3:35:f9:b4:72:fc:49:6c:ea:
73:c5:ca:08:25:a1:6e:26:89:e3:6d:15:48:f3:a4:aa:0d:3d:
c4:58:1a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtaSKTji/z5DeCPA/9qP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm
ZDRiMDEwHhcNMjYwMzAyMTgwMDQyWhcNMjYwMzAzMTgwMDQyWjAzMTEwLwYDVQQD
Eyg1NTQyMGNiZmYzMmQ5ZDI5ZDY4M2VjMjY2OTNkZDY2ZjNlYWQwYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArevtdzry0JZxHF7ZnrIsp69FzT4l
4jppWH78im7PUYAvYdIWBAhDCq2kWncRbAifZNEKN1CDN+z3esOMEFiFrA5hm/7p
yEoV7XcQtGYr8tAf6xU6Ldjd7pjNHD/aRocTlYqWY7uBDXhdialX7roSoveMbWVM
Bu3QAR+j2vC5NEBpHiDjEObwNLjRA0haunJ9noST4/uKTOtYnRM3vE6FW8c0Ab1c
XYeebwGMbx96Vs0ODjXvA6I20gTK6yFnNDWLY8ayv9vEaR+Sv3EzYIOWDK8s2R7+
snjebeZ6HvZiLb+zsZPqR4PI8zd1V7pb48URnLoecUEJ1UXwSc+YXyCQfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVCDL/zLZ0p1oPsJmk91m8+rQrUMB8GA1UdIwQY
MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt
MDQ2MmI2NDg0ZDYwLzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw
LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJITbSg+p
XlM9dRMXbXT4LpPYrUuyjHYY3blp1QK9xU6HYS11LV6hfOdd3j+nYd37KTmehxP0
01nSiIlbdgPLMT22rMH9hWAL+5F3qCj0vjYI3T+pRx93e9jQjmcaTGBfVjtu6KqT
G+356xwdyhGg0wEvGU2BHdDYrbrd2c/grjPCbjgROp9dFJ8f39fuQ0dTJ61PQ9ss
F6HzozHENG8dhtGryyW6wZwSwRQEll4q73RNZ8HyuKR6nJ/bnTCoSPBKcqOoADIo
kypDUNGkwoHarMXnyYGUqS78S9aJ3f541pYF8zX5tHL8SWzqc8XKCCWhbiaJ420V
SPOkqg09xFgaEg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:06:56 2026 by rpki-client