Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: mC1aCnrt1mTYVbbTROPB9yVWMXQGWdj8njfVtwhK4Vw=
Subject key identifier: 2B:16:2F:A0:1F:B3:5F:0E:14:07:0C:2C:5B:51:6B:32:98:F0:01:AF
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019D984FBC103EEFE4B3609681B56490ABCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 17A3
Signing time: Thu 16 Apr 2026 22:00:55 +0000
Manifest this update: Thu 16 Apr 2026 22:00:55 +0000
Manifest next update: Fri 17 Apr 2026 22:00:55 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: /VDMaOY24eZ1bPRwnUleBEaFDeaQcov66aKpgez8dpk=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:bc:10:3e:ef:e4:b3:60:96:81:b5:64:90:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Apr 16 22:00:55 2026 GMT
Not After : Apr 17 22:00:55 2026 GMT
Subject: CN=2b162fa01fb35f0e14070c2c5b516b3298f001af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:a2:2f:9c:d3:9d:60:6f:2b:f9:79:8d:7f:
ae:df:d2:d7:b3:0e:d8:46:f2:d0:79:dc:ad:61:20:
17:e6:86:93:60:df:a6:0c:3c:6a:aa:87:25:36:67:
35:3d:b7:69:b3:81:35:55:3c:94:c0:e5:a9:ac:af:
66:12:fc:ac:cc:38:00:89:46:cd:9b:23:55:e3:ff:
83:b2:30:69:46:7d:7c:6d:3f:e4:24:db:5a:08:5f:
00:70:cc:a7:19:0c:4b:8d:d9:e3:eb:db:0e:d5:e4:
35:5d:b7:c4:49:2f:04:8b:10:00:8f:53:a4:7c:cd:
cd:1c:7e:fb:ea:ea:73:e7:f1:b4:b0:8e:d9:b9:da:
54:52:37:f2:9d:28:ad:a9:24:01:14:81:e4:7c:50:
fe:01:5c:28:f0:5a:8f:1c:85:45:9b:20:3d:eb:02:
a7:ff:2e:f2:10:08:95:21:e5:ef:68:bc:da:fd:f5:
f5:dc:e8:cc:ca:20:4c:87:ab:43:ae:e3:d1:5a:f4:
c1:3e:90:22:7b:e3:c6:15:95:ce:f1:60:56:81:39:
2f:2d:27:3a:a6:b9:61:d8:63:94:86:fe:49:45:8f:
76:ce:39:bc:20:76:38:6e:70:e7:3e:d5:94:f6:e8:
5b:bc:9f:0b:d1:e5:62:80:4b:b0:97:60:e1:dc:7f:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:16:2F:A0:1F:B3:5F:0E:14:07:0C:2C:5B:51:6B:32:98:F0:01:AF
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:96:38:b1:e0:17:fe:06:3d:15:03:b4:63:c3:c0:34:33:7a:
66:e3:27:3e:1a:2b:96:5c:e8:e2:56:90:6d:82:4e:97:f2:e0:
eb:84:16:52:c7:0e:0b:5f:7f:65:04:df:cb:fe:11:b0:6b:c7:
e5:c3:5b:e2:c0:07:fa:0d:df:b6:bb:56:d5:fb:a9:75:0d:dc:
c2:1a:41:c8:39:3f:4b:84:14:8e:b5:07:d9:ed:d0:77:ee:9b:
d3:87:32:f7:c5:56:15:bb:40:e2:2d:42:62:b6:ea:50:3d:40:
21:6e:3c:b7:3b:8a:e4:ce:e3:f4:6f:4d:d1:86:95:37:72:a8:
0a:f1:ce:5c:75:ee:4e:00:82:05:60:d6:3d:65:1b:47:b3:74:
ab:04:b7:9d:cf:0d:bc:36:6a:17:e7:49:0b:2c:f7:f1:43:46:
35:b3:84:16:6e:e4:df:22:a6:8b:81:c0:12:6e:78:ba:40:dc:
ee:40:eb:58:44:a6:6e:5b:84:8b:19:d5:d6:fa:c2:1a:93:ed:
48:c9:62:f8:4e:98:e1:62:63:2a:50:68:77:7b:f9:c5:38:28:
bd:98:22:3c:71:49:08:cb:f3:52:57:c8:00:85:14:ac:c4:db:
62:e1:73:37:d0:a0:27:90:7f:54:f6:6f:34:b4:ee:56:5a:1d:
02:6d:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:10 2026 by rpki-client