Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: D83dv3oXoUUvK61RYRRQssqxknWwoATQ1OaTUtlP3Qk=
Subject key identifier: 32:F2:BB:1A:C4:B1:5C:21:CE:72:4E:E6:17:B6:62:1A:E0:7D:59:E9
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 019D9B507172129F698455509C9757EC85FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 034B
Signing time: Fri 17 Apr 2026 12:00:33 +0000
Manifest this update: Fri 17 Apr 2026 12:00:33 +0000
Manifest next update: Sat 18 Apr 2026 12:00:33 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: s+ZMgClPkmYaiQu2111ZW/I1OaKk5TWrgeaLsJQrCik=)
2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:71:72:12:9f:69:84:55:50:9c:97:57:ec:85:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Apr 17 12:00:33 2026 GMT
Not After : Apr 18 12:00:33 2026 GMT
Subject: CN=32f2bb1ac4b15c21ce724ee617b6621ae07d59e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:83:be:f0:82:81:c4:88:4d:34:64:f4:de:
3e:46:fb:a8:9f:dd:43:e8:9c:89:63:00:7a:2f:80:
39:07:0d:1e:23:54:79:15:bf:61:73:81:de:46:f8:
f4:30:ab:d9:ba:8b:81:eb:53:c1:a6:41:ab:d2:7f:
9e:ff:cd:9f:16:31:aa:dc:86:16:8f:bb:19:c3:d9:
72:c4:3c:e5:49:d0:62:49:5b:24:03:2e:fd:1d:24:
af:60:43:a9:59:4c:d3:65:ca:7b:09:1e:db:73:44:
97:44:a9:c9:1a:8e:b3:2b:bd:24:e5:f7:84:dc:33:
3b:d2:85:c2:89:6a:27:3f:42:3d:01:24:40:6c:70:
11:75:05:05:11:3b:f6:2f:c2:a1:1d:4a:04:4d:30:
de:0d:b0:72:a9:d3:fc:f9:0d:76:17:3b:92:27:85:
9f:54:43:d1:bf:98:7e:72:37:d5:b6:72:fd:26:00:
b7:c9:91:ac:53:d1:9e:02:5e:0a:74:39:c1:04:d0:
16:39:d2:9e:8c:28:12:5c:06:3f:26:8b:4c:02:dd:
cb:7e:e0:10:6f:a3:f9:d6:2b:75:42:1d:a1:40:ce:
30:99:5c:00:80:ef:23:8f:79:3c:3c:ba:48:4f:ac:
6c:67:da:69:07:37:bc:fd:d0:2b:b9:ba:28:4c:e0:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:BB:1A:C4:B1:5C:21:CE:72:4E:E6:17:B6:62:1A:E0:7D:59:E9
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ab:33:53:4a:96:de:76:57:dc:f7:49:15:99:f2:81:81:72:
be:f3:8f:cd:00:03:99:1b:01:47:70:c5:85:3a:6c:25:06:4e:
63:6c:4f:8b:f9:b8:4f:ff:b2:74:76:89:8e:b2:9a:c1:50:4b:
cf:e4:ad:d0:8b:e3:b2:33:d9:8f:7b:58:c3:36:5b:c3:60:09:
05:c3:f5:b5:ed:db:07:23:23:0b:d3:e5:bb:2c:7f:b3:0e:bb:
90:9b:de:b6:51:8b:a7:e7:38:2b:2f:5f:6f:0b:f6:c6:eb:d7:
32:ef:62:62:a1:69:e5:20:77:6c:a6:cf:71:93:9a:d3:77:a6:
48:34:d6:dc:12:19:59:bb:fc:1c:6d:fd:d7:dc:23:5f:b7:7f:
38:be:f3:ad:46:34:13:6c:fb:46:7c:72:d4:dd:7d:6d:72:bb:
b8:bd:69:55:e9:41:b3:7d:ce:36:41:cc:a0:0d:10:e0:7b:ab:
2d:ab:84:17:76:a1:70:66:70:6a:20:46:f2:3b:9d:d9:07:bb:
75:58:93:44:b0:54:10:4c:72:4d:fa:1b:62:84:4e:a6:96:02:
0b:93:0c:66:35:49:f0:b8:d2:b2:ba:ac:00:41:a9:2b:60:7a:
e3:9c:f7:bd:24:1a:6f:a4:05:94:be:c2:0d:ff:0d:71:78:35:
d5:09:01:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:43 2026 by rpki-client