Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: Kqb12TWo/HNJOdzhuoJFhlcO1MazNn9i6JUC19P52iM=
Subject key identifier: 88:6A:02:32:3E:17:91:FE:EF:F1:BE:46:C5:22:1E:48:1C:51:8D:E7
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019FAA5077A50EDC70E1A5BBFFC49D5568A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0A46
Signing time: Tue 28 Jul 2026 20:00:27 +0000
Manifest this update: Tue 28 Jul 2026 20:00:27 +0000
Manifest next update: Wed 29 Jul 2026 20:00:27 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: cJdX2WbrYNjrSBvHevqFazxaGyEa2QWBdWK1Zo7cX20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:77:a5:0e:dc:70:e1:a5:bb:ff:c4:9d:55:68:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Jul 28 20:00:27 2026 GMT
Not After : Jul 29 20:00:27 2026 GMT
Subject: CN=886a02323e1791feeff1be46c5221e481c518de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:ff:18:c2:09:68:18:9c:41:e7:aa:cb:e8:
22:48:43:11:60:af:45:c7:b3:5f:c9:f5:fb:02:76:
25:6d:fc:a3:68:98:58:51:ff:95:82:4d:e9:c7:61:
f3:cd:a8:3e:0e:eb:0f:71:ed:de:a3:64:ac:45:b4:
de:48:f2:70:cc:66:1d:45:f1:fe:c0:5a:a8:fc:85:
93:cb:d0:08:ef:3a:8a:f0:16:3c:7c:37:e2:10:c6:
54:53:df:60:ab:e2:6f:9d:81:4e:6e:61:eb:1c:36:
cd:0c:6c:8d:c8:45:b9:8f:63:23:af:11:52:39:2f:
04:f8:40:fa:70:bb:05:3c:f4:0b:dd:93:d9:2c:a1:
a5:51:b8:2f:69:af:88:6b:b1:80:e4:8a:e6:cd:96:
ee:90:6c:dc:dd:3d:ac:48:e4:cb:43:b9:b2:f3:01:
67:7a:4b:90:b2:1e:fb:9d:8a:d5:c9:c5:57:86:b7:
b1:b3:33:d4:b5:f8:5c:8a:b9:b1:db:80:09:f1:0a:
fa:c7:e2:72:fb:47:7b:7e:f8:1c:23:71:58:92:e5:
33:4c:9f:f7:ce:32:eb:3c:fc:37:6c:89:04:9c:0c:
6d:67:d9:17:87:aa:b0:6d:ad:3d:0a:a7:b4:17:c0:
01:45:75:82:45:63:8b:36:07:55:c4:38:1a:be:88:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:02:32:3E:17:91:FE:EF:F1:BE:46:C5:22:1E:48:1C:51:8D:E7
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7b:bf:db:e8:43:26:eb:7e:01:01:bb:92:15:52:7d:ce:81:
2a:9e:68:e3:1b:3c:da:21:56:fd:4f:77:22:01:fc:af:72:3b:
b1:73:4e:34:c5:6a:c0:93:0d:d2:4a:3c:b1:56:08:73:72:90:
d6:4f:71:05:f3:5b:a6:e2:78:ae:c8:d1:c3:8e:1e:b2:98:56:
91:2c:48:b8:e6:69:ed:cd:7d:50:aa:5b:a9:88:22:a3:3d:bf:
01:eb:4b:ff:c0:d5:23:16:12:3f:26:a8:46:ed:e7:27:dc:32:
c4:5e:5f:fc:e5:0f:2c:18:eb:77:a3:13:dc:e8:85:11:57:e4:
a9:12:f9:47:62:4c:c5:cb:14:7a:2d:42:bd:65:5c:eb:f6:40:
cc:3e:0e:3f:49:e1:fc:be:4c:e3:2a:ce:66:a6:fd:d3:35:b9:
ea:5e:1f:cd:0f:6d:41:7b:1a:e3:d6:c1:5d:64:10:7a:e8:1b:
57:b3:f8:5d:e1:8a:cd:fb:e3:29:b1:e8:a7:d6:c9:9b:73:d5:
5e:dd:c2:48:25:bc:96:dc:5f:d8:e5:48:28:b5:4b:ca:6d:c9:
7a:55:8c:e0:d5:56:ff:0a:4a:e1:1a:84:e2:73:eb:a1:3c:d8:
7d:35:10:c2:15:50:03:63:03:f2:da:12:d5:7b:4e:00:c0:36:
a1:d2:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:38 2026 by rpki-client