Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: QjrKseslb1p+2TV76cfGaB3gQPj+poSuNP4FmAOqkBI=
Subject key identifier: 23:B6:62:4F:05:8D:A7:29:16:4C:6A:FE:D8:CB:C4:A6:62:69:17:22
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019ED506D30458561CC5894EB7CD03A332AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1847
Signing time: Wed 17 Jun 2026 10:00:54 +0000
Manifest this update: Wed 17 Jun 2026 10:00:54 +0000
Manifest next update: Thu 18 Jun 2026 10:00:54 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: rgZTwUvyuTW16W7I4cOxGcMWN9PB9CMxB+4JvXl4L9g=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:06:d3:04:58:56:1c:c5:89:4e:b7:cd:03:a3:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jun 17 10:00:54 2026 GMT
Not After : Jun 18 10:00:54 2026 GMT
Subject: CN=23b6624f058da729164c6afed8cbc4a662691722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:a4:b1:bf:00:90:3d:9c:c4:41:76:13:49:
3b:8a:23:53:e5:f6:42:11:ad:30:ba:74:fb:5e:39:
3f:9a:4c:fd:2c:d0:74:2c:20:bb:05:f6:d1:c2:00:
e1:33:42:f8:b1:b3:d0:24:15:46:eb:36:20:f8:35:
e3:55:c9:fb:1e:b3:ba:dd:e2:c8:dc:25:d1:cf:19:
83:8b:21:27:fb:5c:32:1f:5f:ee:65:f0:7b:93:27:
3d:6d:65:0a:fd:06:f4:4e:2e:17:b2:19:a8:a8:a7:
10:ca:ae:02:33:4d:db:ac:58:2f:da:3e:0d:ba:16:
08:a8:d8:cc:f9:52:89:04:ef:d8:b1:64:52:85:2a:
df:cb:cb:2e:7e:3a:13:de:32:63:49:7a:ac:8c:3b:
56:6d:8d:f4:82:3f:9c:39:f8:4f:89:41:a9:72:34:
2d:6f:8a:78:13:72:7e:63:75:fd:e2:76:82:58:d8:
5e:2c:86:64:9b:c0:00:15:6e:95:16:7d:50:0c:5f:
d4:a0:ab:ad:7b:7e:eb:b0:f2:47:7c:d3:6c:ca:af:
cd:2a:6e:18:2c:3e:f7:21:75:cf:1d:50:ed:38:97:
5e:a7:f2:3c:f4:2a:1a:94:32:15:ec:19:3f:9f:4c:
b9:a0:74:1f:35:29:d4:10:8e:03:c6:f2:f7:f5:d7:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:62:4F:05:8D:A7:29:16:4C:6A:FE:D8:CB:C4:A6:62:69:17:22
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4a:f1:bc:a4:41:fd:4f:9d:e8:ed:78:30:c0:53:93:a2:92:
0f:0e:5d:73:b2:27:bb:82:1c:37:e7:04:75:e7:70:ee:64:98:
61:ee:03:b8:27:dc:54:85:06:b0:05:7e:da:2e:80:29:2c:b3:
1b:c6:c7:31:9c:05:a9:e4:31:da:47:b3:fb:33:85:2e:53:95:
60:94:74:96:6d:0b:1a:1a:b5:21:5d:80:ee:a2:bb:f7:4c:e3:
16:0c:9d:db:07:d3:58:31:79:f5:84:70:79:92:6d:2a:30:4f:
93:3b:5e:b3:1f:cf:b3:b3:8d:7d:6d:c6:79:c3:71:70:98:80:
09:49:79:35:95:e4:8c:9d:1d:f4:36:cc:98:7d:ad:01:41:18:
e2:ca:15:88:ac:8c:ae:a8:8e:49:9c:55:00:51:e3:87:95:08:
66:7d:e8:ee:1b:8b:d1:2c:1a:8f:59:ea:d9:1b:91:af:13:36:
35:6e:16:26:83:92:66:3f:32:ba:4c:a7:24:ae:7e:ce:20:16:
5b:45:81:1f:ed:8e:3f:ca:a1:aa:3c:d0:c3:66:f5:6e:cb:69:
76:f9:36:e6:c8:57:ae:c3:5f:4d:e9:36:ff:a1:e8:30:be:8e:
7c:cb:db:bb:44:ca:3b:9a:cf:2e:88:9f:72:2a:c8:c4:07:02:
42:7d:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:38:37 2026 by rpki-client