Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: 2oO8zcGIHBMBXeokfeLJTmjSfoNKHOw2p5DvQYP6UAM=
Subject key identifier: 61:2E:9F:B4:D0:F5:69:4D:A8:93:ED:AD:66:4A:15:E7:69:3D:47:40
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019CABA24EE85775121FA5631B33B651C3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 08B9
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:06 +0000
Manifest next update: Mon 02 Mar 2026 23:01:06 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: YcLrffsgAMCkMoh4e3dJQW+IZ6BmpyLiwPcTSJV/m9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4e:e8:57:75:12:1f:a5:63:1b:33:b6:51:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Mar 1 23:01:06 2026 GMT
Not After : Mar 2 23:01:06 2026 GMT
Subject: CN=612e9fb4d0f5694da893edad664a15e7693d4740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:68:29:3c:3b:e6:7d:cc:2b:c8:46:e9:e1:
57:81:9f:06:b8:92:5d:4b:9f:a3:91:8a:c6:49:cb:
ea:13:bd:ce:45:5c:7a:e4:fc:50:64:0c:54:24:f4:
77:d2:03:fa:eb:cd:f1:28:db:b3:4b:27:65:e5:00:
98:0c:a2:e3:c0:e3:7e:fc:0f:fc:ee:84:71:00:a4:
ac:6a:9e:d3:7f:9d:10:81:cd:0f:ba:a4:1a:ae:d6:
09:e9:65:86:36:80:f5:80:3f:40:c0:1d:97:64:f3:
de:58:0a:1e:93:ce:26:5d:98:c3:a9:eb:c9:77:d3:
30:73:0f:ce:89:5d:02:2c:1b:c8:83:c5:2d:c1:1b:
a8:4c:28:ea:f9:67:a4:43:53:56:0e:0b:1f:4b:95:
a0:31:bc:37:70:8c:94:85:37:86:03:9c:61:bb:3c:
12:78:38:94:a2:fb:da:75:6d:32:c2:8f:e1:b5:bc:
0c:2e:a7:4d:89:9c:d0:7e:e7:16:91:6c:93:fb:12:
38:21:20:ab:df:6b:74:9f:10:38:78:1b:dc:86:f0:
3c:ae:cb:6b:2c:bb:f5:76:03:49:2b:95:44:6a:5f:
4b:55:6b:31:0b:cd:0d:d8:e5:8d:fa:bd:90:12:13:
a4:cd:4a:8e:d5:bb:b4:17:cd:1d:a3:a0:3e:ce:1e:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:9F:B4:D0:F5:69:4D:A8:93:ED:AD:66:4A:15:E7:69:3D:47:40
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:41:29:ab:b8:1f:dd:8a:86:fe:6b:52:97:fc:90:bd:0d:19:
50:d1:76:a7:75:22:72:8f:37:96:1d:87:a9:dc:d1:be:e0:08:
96:bd:aa:37:eb:72:1d:78:03:3e:37:6e:7a:cd:00:82:69:ea:
29:fc:89:fb:f4:9c:9a:2d:98:8f:97:df:2f:3b:ce:6e:e9:e3:
07:22:cc:ad:82:b3:3f:f9:9f:6c:24:94:b0:c2:5c:f4:2f:ec:
4e:44:ff:27:a8:99:75:fc:cb:ce:e9:6f:e4:d9:51:24:37:08:
db:d6:30:d2:06:a2:3a:6d:ca:64:d9:a6:33:fe:18:af:02:99:
3e:3c:12:66:5c:84:cb:0c:43:aa:8c:f4:da:6f:da:6e:23:43:
96:5f:39:b2:86:1f:b2:1d:93:41:40:9e:97:14:4b:89:38:a0:
4b:76:1d:07:d6:22:e2:0c:32:5c:e2:c3:f7:08:0c:a2:92:33:
5c:83:24:f4:75:1a:0c:77:48:26:d4:dc:4b:db:c0:f9:56:db:
83:a7:f5:e7:68:1c:3c:e1:57:8e:59:b7:9c:bf:50:34:ca:37:
85:44:47:ed:73:b7:1e:b8:dd:13:86:6b:d6:b8:0a:da:61:d4:
25:a6:41:9c:6d:9b:86:22:1c:76:1f:ad:7f:f1:63:d2:87:74:
85:9c:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:27 2026 by rpki-client