Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: dsxQYl+AZolOhTUlPU9FktDgYB1cJlOb6zZcrmMeYgQ=
Subject key identifier: 97:17:90:9D:6A:86:C4:E4:B6:4C:F4:EA:83:C2:36:2F:77:6C:E0:A3
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01A001A5B7CF20A264A4CFC364D1DE962BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 1949
Signing time: Fri 14 Aug 2026 19:00:32 +0000
Manifest this update: Fri 14 Aug 2026 19:00:32 +0000
Manifest next update: Sat 15 Aug 2026 19:00:32 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: dBZ64skkAIYkpt4gdlkcFBefMw9kD+rKGJ6aDP4H568=)
2: OLzTLKZWnHaNaZZXNLTfX_9MFKk.roa (hash: JRtB2SbXcPB1CPRDQRS38H4AmEHg2R09GikXd7+2l5U=)
3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=)
4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b7:cf:20:a2:64:a4:cf:c3:64:d1:de:96:2b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Aug 14 19:00:32 2026 GMT
Not After : Aug 15 19:00:32 2026 GMT
Subject: CN=9717909d6a86c4e4b64cf4ea83c2362f776ce0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:77:ec:51:bc:08:e9:db:71:f7:66:99:1e:
56:86:86:e3:48:08:92:66:9e:87:65:51:47:ec:b2:
1f:3a:26:e4:af:70:75:47:8f:77:e0:e6:29:78:26:
e0:8c:bf:9d:fd:ce:c6:3e:5a:ef:6d:ec:30:46:81:
87:9a:39:77:0e:be:4d:6a:6c:eb:48:2d:5e:f0:d5:
72:8b:40:cc:e4:b2:af:a5:21:dd:33:18:6f:55:c3:
36:12:5d:c6:80:e0:9e:1a:5e:0f:18:5a:56:83:86:
99:a5:09:fd:35:fd:70:c9:0b:e6:69:e7:d6:74:b5:
72:56:fa:de:66:be:1a:0a:2d:2d:41:4a:92:02:2c:
47:7f:b1:85:cc:d8:b6:cc:04:c6:ff:89:65:22:ba:
8a:82:9b:73:df:33:68:94:d3:a8:54:a2:4e:2a:e7:
05:89:ee:25:a7:2b:83:7f:bb:47:14:1d:93:08:62:
28:c4:42:d0:f1:23:62:36:62:96:70:c2:ed:1a:cc:
99:4f:a9:37:81:5b:54:2a:ba:86:b3:f1:60:08:e2:
6b:3c:db:69:e2:8e:dd:13:17:b4:24:79:84:8b:c2:
2d:49:3b:87:8c:71:02:0a:d9:9a:d0:65:d2:99:f3:
6d:53:83:ce:a8:b2:78:bd:48:cf:39:5e:43:80:b4:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:90:9D:6A:86:C4:E4:B6:4C:F4:EA:83:C2:36:2F:77:6C:E0:A3
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c0:32:87:50:b2:1f:c6:c0:c4:38:ec:50:c1:e3:46:71:e3:
08:6c:e7:96:17:b1:11:1d:c5:3c:ee:b5:de:cd:54:31:ba:18:
f9:5c:39:a9:19:30:05:7b:04:94:15:d4:26:0f:58:57:23:75:
c8:7b:fb:2a:b0:e6:74:86:4d:88:0f:56:ed:c3:ac:a1:6f:18:
b7:29:79:f5:89:af:c9:25:12:ce:79:be:d8:50:d1:ac:9f:3b:
d3:b1:6d:1c:f1:07:21:2d:92:ed:fb:c1:20:0b:56:b9:4c:7d:
33:e1:07:19:fb:cd:e6:1f:cf:65:0c:2b:6d:ba:f4:bf:db:5b:
04:3f:be:20:9b:40:f6:19:9a:d3:27:31:87:fc:10:a6:52:de:
7c:f5:ed:e3:f3:ca:d6:26:cd:21:cc:10:03:6e:af:fc:5e:7d:
41:43:69:5c:3b:36:9b:d1:d3:d6:d6:49:f4:72:00:4c:e9:da:
c7:a0:f9:0c:e5:b1:5d:09:b7:82:52:6c:c4:0a:62:45:18:2d:
03:62:8e:75:7a:29:c1:a8:6d:38:38:a1:be:a1:c3:a6:5c:b9:
f9:37:c5:43:5a:b0:43:b4:fc:a5:28:b3:09:49:db:76:d5:77:
f9:4c:22:d8:9a:34:46:fd:7d:0e:9d:c6:ba:fd:e1:83:b6:db:
e7:43:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:11 2026 by rpki-client