Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: S2KIMbtRP51l42PEYEiDkhd8aWFOkhA41aMUVANojhk=
Subject key identifier: B3:64:9F:D0:9A:3E:D7:84:BF:49:25:AE:9E:FF:31:AD:37:51:1D:0C
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019EC29225E5CD2569A0D5BC56B85C698BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 09CE
Signing time: Sat 13 Jun 2026 20:00:18 +0000
Manifest this update: Sat 13 Jun 2026 20:00:18 +0000
Manifest next update: Sun 14 Jun 2026 20:00:18 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: 7JMNNqZH1pPaDmAriUGSVRzeLlDfLTYMUR7A8O5DSL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:25:e5:cd:25:69:a0:d5:bc:56:b8:5c:69:8b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Jun 13 20:00:18 2026 GMT
Not After : Jun 14 20:00:18 2026 GMT
Subject: CN=b3649fd09a3ed784bf4925ae9eff31ad37511d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:13:c8:97:d0:b8:92:f2:73:d4:91:33:96:
bf:f2:3b:53:06:42:17:da:81:ec:2f:5d:cc:78:cf:
63:4c:f4:ec:ea:be:36:5c:0b:b4:e6:37:e7:fb:f4:
02:6b:df:48:09:c0:4d:66:e1:fc:1c:da:da:6e:12:
05:09:f8:af:96:ee:70:c5:ca:80:38:de:43:a3:5d:
db:da:69:58:72:21:59:88:66:73:03:ee:37:ba:21:
5e:27:48:ad:a9:18:e9:36:d5:57:43:2c:14:f2:a6:
0d:50:4b:9d:b4:1f:0a:b1:8b:40:b7:e3:d0:85:56:
a7:7b:a9:5f:a2:5d:75:9a:3d:68:9d:9b:0c:56:be:
ec:ae:d0:7f:29:dd:96:f5:8a:29:04:94:41:76:f0:
23:7d:22:d9:7e:d2:f8:07:93:b4:9b:83:f1:bf:d2:
72:16:34:25:a7:a1:10:47:e0:4b:98:7d:56:13:7f:
d0:7b:bf:61:26:2c:9d:19:9f:a7:94:66:de:1d:84:
cb:7e:49:c5:00:11:8e:96:48:8d:3c:f2:f6:70:f0:
15:dd:54:71:19:a2:86:7d:d7:1e:17:56:e2:a1:21:
05:aa:d1:8c:31:36:02:71:88:8f:12:37:1b:6e:55:
d3:6f:35:51:f9:7f:66:ce:08:1e:1d:08:be:2b:aa:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:9F:D0:9A:3E:D7:84:BF:49:25:AE:9E:FF:31:AD:37:51:1D:0C
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:f1:49:15:4a:88:a7:77:2c:ff:1e:df:a1:93:83:96:6b:
da:11:32:20:6e:f4:4e:dd:d0:58:38:6a:25:e7:4a:94:af:ed:
cd:fd:84:24:e0:e1:8d:1c:ad:fe:3f:79:ad:33:53:dd:ff:21:
5b:33:c8:4b:09:75:d9:d8:4a:30:f9:5b:bf:4d:c3:74:f3:d8:
17:d6:cb:ef:2d:0b:4c:74:1d:cd:53:8a:ee:bf:bb:49:a1:75:
f9:a4:aa:8e:a0:47:ef:d5:ff:9f:9a:3d:0d:78:0b:7e:f4:49:
5c:17:e1:11:55:81:43:23:a0:49:94:14:21:6e:90:04:67:19:
ea:e4:4d:62:b2:72:a9:21:35:08:80:38:39:f4:92:be:04:77:
0f:a8:43:db:25:b3:6e:dd:16:50:c1:a7:99:48:9b:9b:22:bb:
46:39:2a:ad:6e:d2:1a:ff:44:a0:56:f1:0e:78:64:cd:26:c0:
a8:2c:e8:e9:ce:7e:ac:09:a6:d1:77:b1:dc:db:66:9a:bf:81:
dd:66:01:5b:bb:18:77:7c:6e:7b:0f:24:89:bc:0d:e1:da:8a:
10:78:2e:22:28:a0:eb:1d:09:1b:cb:a2:75:f3:8b:9f:8e:96:
1a:30:7f:c5:1a:d7:d1:6b:1a:e6:bc:df:ef:d0:86:82:ca:a1:
e6:6b:a6:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkiXlzSVpoNW8VrhcaYvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGFkYmEyNjA0OTM0NzM4YzdjOTY5MmEwYjNhYjdiMzBh
ODJiYjIwHhcNMjYwNjEzMjAwMDE4WhcNMjYwNjE0MjAwMDE4WjAzMTEwLwYDVQQD
EyhiMzY0OWZkMDlhM2VkNzg0YmY0OTI1YWU5ZWZmMzFhZDM3NTExZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkATyJfQuJLyc9SRM5a/8jtTBkIX
2oHsL13MeM9jTPTs6r42XAu05jfn+/QCa99ICcBNZuH8HNrabhIFCfivlu5wxcqA
ON5Do13b2mlYciFZiGZzA+43uiFeJ0itqRjpNtVXQywU8qYNUEudtB8KsYtAt+PQ
hVane6lfol11mj1onZsMVr7srtB/Kd2W9YopBJRBdvAjfSLZftL4B5O0m4Pxv9Jy
FjQlp6EQR+BLmH1WE3/Qe79hJiydGZ+nlGbeHYTLfknFABGOlkiNPPL2cPAV3VRx
GaKGfdceF1bioSEFqtGMMTYCcYiPEjcbblXTbzVR+X9mzggeHQi+K6qKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNkn9CaPteEv0klrp7/Ma03UR0MMB8GA1UdIwQY
MBaAFI8K26JgSTRzjHyWkqCzq3swqCuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEt
N2JhZmRlNGM0YjI0LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEtN2JhZmRlNGM0YjI0
LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCvxSRVK
iKd3LP8e36GTg5Zr2hEyIG70Tt3QWDhqJedKlK/tzf2EJODhjRyt/j95rTNT3f8h
WzPISwl12dhKMPlbv03DdPPYF9bL7y0LTHQdzVOK7r+7SaF1+aSqjqBH79X/n5o9
DXgLfvRJXBfhEVWBQyOgSZQUIW6QBGcZ6uRNYrJyqSE1CIA4OfSSvgR3D6hD2yWz
bt0WUMGnmUibmyK7RjkqrW7SGv9EoFbxDnhkzSbAqCzo6c5+rAmm0Xex3Ntmmr+B
3WYBW7sYd3xuew8kibwN4dqKEHguIiig6x0JG8uidfOLn46WGjB/xRrX0Wsa5rzf
79CGgsqh5mumDA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:24 2026 by rpki-client