Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: 9HDqKa0wteOcyZCjQBT3yZGjuH/ancVY3gsVDLK+454=
Subject key identifier: A8:86:5D:05:38:4E:8B:F2:8C:C9:17:9C:42:B7:65:00:3C:B6:07:75
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 01A0C745C136A44CD1D3AF07A720471EDD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1949
Signing time: Tue 22 Sep 2026 04:00:32 +0000
Manifest this update: Tue 22 Sep 2026 04:00:32 +0000
Manifest next update: Wed 23 Sep 2026 04:00:32 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: 9qimwlPRa283IFT+dpP34mrKHV49lhkD7ldlPEwK6fU=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:c1:36:a4:4c:d1:d3:af:07:a7:20:47:1e:dd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Sep 22 04:00:32 2026 GMT
Not After : Sep 23 04:00:32 2026 GMT
Subject: CN=a8865d05384e8bf28cc9179c42b765003cb60775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:6d:a7:82:c3:13:02:e7:36:19:a2:dd:21:
fb:81:96:06:f1:1f:0c:b4:37:a7:62:75:37:26:1c:
f9:45:23:54:57:77:00:22:be:f7:6c:71:e6:d6:d4:
d2:b4:10:a6:4c:1d:f8:0e:85:9c:62:07:69:3b:52:
96:17:f2:eb:c3:25:76:2e:b9:46:24:4a:3a:45:c7:
f4:bb:b9:64:4b:99:a0:d3:c2:32:41:62:9b:c0:56:
2f:2b:7d:07:9f:77:f1:6f:66:2f:a5:a1:1f:1b:77:
b0:7c:b8:b4:9c:aa:a9:d4:82:2f:85:93:4d:72:44:
34:ed:84:ca:07:59:87:04:6d:7b:11:ca:9f:07:4d:
37:5f:7e:bf:18:66:9f:fb:7c:a0:7a:ac:ef:b4:f2:
80:7a:ef:65:da:09:24:a6:f0:5e:eb:ad:b8:41:0e:
bd:84:9c:b1:95:0c:e5:11:3a:ff:ab:e3:24:9a:dd:
2c:56:93:65:74:15:9d:03:83:5b:ba:01:35:cb:86:
85:79:5c:cf:ef:7b:96:74:f0:ed:84:66:18:2b:cd:
97:b7:93:2f:4b:59:67:49:1a:7f:bc:f6:24:9f:fd:
67:f3:b0:5d:6f:7d:e8:51:0f:9f:a7:f8:d4:21:25:
e0:1a:38:87:62:94:db:75:03:57:af:27:d2:09:d2:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:5D:05:38:4E:8B:F2:8C:C9:17:9C:42:B7:65:00:3C:B6:07:75
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9b:59:b0:8f:4b:81:6d:05:7a:49:d7:81:f3:41:53:74:df:
ee:7d:76:df:ef:eb:9c:1f:e4:97:f6:aa:a8:98:5f:49:5a:07:
8f:ed:c1:65:02:ba:c0:d9:52:cc:5c:ef:f0:02:be:ff:55:b5:
41:bf:aa:de:5d:f6:1d:d8:85:1e:08:f9:86:f4:93:51:0c:e9:
e0:7e:bc:3b:55:5a:52:48:29:e8:dc:bb:c8:79:53:3c:02:b5:
d9:eb:a1:7b:e1:00:82:fd:77:16:0f:09:31:3f:df:14:06:ab:
54:85:f9:82:b5:d3:5f:4e:1c:39:49:11:e9:b5:9f:66:82:c3:
66:3d:53:95:17:6d:f3:95:50:7f:f5:0e:b5:1a:b2:6a:90:33:
b3:31:94:c7:2f:f7:9e:1d:8b:cd:a8:ce:d6:1a:7d:9b:fc:f4:
63:58:19:6a:70:cb:16:31:f9:31:b9:d1:77:2f:b5:7d:0e:78:
aa:66:30:14:2d:2c:c0:02:92:d5:e0:38:65:25:12:ff:9e:4f:
fb:b0:48:60:06:73:36:0c:ca:16:88:5c:ba:db:36:c9:d2:c3:
25:b8:a4:64:1d:45:c0:93:18:c7:90:ac:ef:79:ae:a3:b4:a7:
91:fe:19:f8:5e:13:c5:ed:e6:f1:5b:2b:b4:11:b1:1d:79:af:
8d:3f:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:49:10 2026 by rpki-client