Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: toT/xeQz8K4L3SqP3ow2lei8qSyBI3/VcVKPG2mxlso=
Subject key identifier: 8B:03:B4:88:06:67:E8:DB:7B:B7:4C:50:1D:0A:5D:4A:26:A8:59:F4
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019D992B8AABD733AF08A7C3E84715DD598C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0934
Signing time: Fri 17 Apr 2026 02:01:00 +0000
Manifest this update: Fri 17 Apr 2026 02:01:00 +0000
Manifest next update: Sat 18 Apr 2026 02:01:00 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: RqUMUU64qiE5sf/TgDygsNmrjq7x5A0eP6tWi+xbq00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8a:ab:d7:33:af:08:a7:c3:e8:47:15:dd:59:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Apr 17 02:01:00 2026 GMT
Not After : Apr 18 02:01:00 2026 GMT
Subject: CN=8b03b4880667e8db7bb74c501d0a5d4a26a859f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:ae:4c:4a:38:9c:3a:04:95:42:31:49:cd:
38:19:48:9d:0a:5f:42:f9:17:c9:df:f8:4e:6e:78:
22:28:e6:c1:44:37:f3:8e:8f:06:56:e3:35:c6:22:
fb:00:78:54:41:20:37:8a:28:23:04:ae:59:72:9e:
48:f4:31:9e:85:ca:1a:b8:12:ff:c3:0f:dc:3e:b3:
7c:84:df:f3:3f:4e:02:e8:81:a3:78:be:cb:3f:5f:
c8:f4:ad:2d:e2:aa:14:b1:fe:86:55:81:87:e9:b4:
4a:cb:a9:2d:e1:60:fc:69:4f:21:3a:14:1c:b4:40:
8c:66:19:da:cc:bc:fa:ac:46:8e:66:35:c6:e3:8a:
62:4b:5e:e2:4a:57:71:c1:62:89:36:05:1c:8c:4e:
4c:cd:65:86:74:62:e3:62:8d:18:bd:76:4b:a9:9f:
d3:a7:21:f0:01:71:d4:00:53:e2:b9:9a:da:0b:c5:
50:dc:3a:94:c9:4f:88:9d:9a:ab:c5:46:3e:5e:2a:
6c:e5:0d:54:b0:44:10:1e:0a:05:75:ce:82:5e:4d:
d3:f6:ef:39:8f:2d:0c:93:d0:6a:2b:50:a4:48:df:
06:af:72:0b:a1:4e:d9:9e:98:8c:64:09:5f:d6:a6:
14:ec:7b:b2:fd:46:f9:5f:f3:62:e8:7d:2b:15:07:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:03:B4:88:06:67:E8:DB:7B:B7:4C:50:1D:0A:5D:4A:26:A8:59:F4
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:30:5b:3e:b6:65:50:2b:3a:f4:10:82:4c:81:93:64:6d:1b:
c2:14:1c:f8:b9:11:76:99:6a:15:55:95:1c:32:72:fa:6c:a7:
53:e6:3f:34:a5:8d:d0:ea:f8:b1:0e:71:13:fb:3e:c7:a8:a0:
87:c0:29:5c:81:d3:43:85:e1:00:f9:f5:05:be:06:8f:ab:53:
29:6e:47:4f:2e:a1:86:f8:66:fb:19:01:b6:2f:ae:bf:c5:87:
25:5a:f1:72:28:b0:d7:70:22:f5:f0:ed:91:e9:16:99:35:41:
96:f0:4a:a6:b0:46:69:03:20:04:78:21:2d:7c:54:a2:bf:b6:
81:5d:08:15:b0:b9:25:29:51:01:d7:1d:29:46:0c:5b:19:df:
2d:d9:b1:45:06:fe:c7:0a:44:dd:b8:2c:19:bb:99:57:fd:04:
6e:26:c4:dc:47:55:ca:b7:3f:6c:79:06:1f:15:37:7f:66:46:
71:1a:7b:0b:ac:44:52:19:e8:e8:6c:58:03:e3:e5:02:13:5b:
c8:82:6c:73:7e:f8:37:66:8f:d2:b6:b5:76:f1:14:f5:e4:e3:
d2:e8:40:17:c5:f0:2e:4f:da:93:a6:63:66:ce:f4:38:d1:2f:
73:e3:d0:d5:6d:28:48:9f:bd:e4:61:ad:67:e5:64:9b:6c:cd:
c1:bd:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:13 2026 by rpki-client