Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
File: JW-mc9s74eLrq_uZbQfPSSJevAg.mft (raw, json)
Hash identifier: 4zQ39s7LhRONDwT/wodW33yuoChaWAzS5WjgATdx94k=
Subject key identifier: 14:AF:38:8D:4B:7F:9A:17:5F:DC:62:0E:5A:13:81:B4:33:82:2E:FC
Authority key identifier: 25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
Certificate issuer: /CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Certificate serial: 01A06E70FB238FD3E677DDE6ED61293B3113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
Manifest number: D2
Signing time: Fri 04 Sep 2026 22:01:32 +0000
Manifest this update: Fri 04 Sep 2026 22:01:32 +0000
Manifest next update: Sat 05 Sep 2026 22:01:32 +0000
Files and hashes: 1: 1w7jxh2aEyNaIYWXC_VHPbHo1oc.roa (hash: gsx85QJ2WG90A2G8uFzj2SzVBAenv+NakL2t0df+a+8=)
2: JW-mc9s74eLrq_uZbQfPSSJevAg.crl (hash: m7bKdofXWPkMUS+ILSXOUYaF0pqcntNhRi7OBBBp4XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:fb:23:8f:d3:e6:77:dd:e6:ed:61:29:3b:31:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Validity
Not Before: Sep 4 22:01:32 2026 GMT
Not After : Sep 5 22:01:32 2026 GMT
Subject: CN=14af388d4b7f9a175fdc620e5a1381b433822efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:3b:39:24:68:8b:63:ea:3f:bf:8d:9b:09:
ba:b8:e8:f9:e2:40:a9:ed:26:7e:b0:fe:0a:00:c4:
d3:d3:3b:27:95:d7:5f:c2:c8:87:a6:49:61:f4:b1:
46:1d:f2:ca:21:09:b4:ed:57:f7:25:ca:ce:6d:46:
02:b8:4c:b4:be:ae:74:d6:79:a1:1c:d2:18:d9:a5:
fe:84:eb:b6:81:10:c4:23:c9:9d:52:bd:cd:93:c0:
de:9b:ae:b8:34:ab:30:7c:6a:51:b3:ea:9d:ce:4a:
2f:34:2b:83:1e:33:63:02:97:d1:be:13:4f:ac:51:
33:b8:01:92:23:7b:e6:44:bd:e2:00:72:e9:5e:2b:
d7:63:de:1b:8a:45:33:90:f2:af:e4:b5:a4:92:1d:
42:e1:75:68:58:e2:1b:ec:20:8a:1a:d1:94:8e:be:
eb:bc:bc:8f:2e:15:e1:a8:dd:43:6f:3f:cd:db:85:
96:79:f5:e7:44:7e:08:17:7b:d4:40:ec:58:6c:a8:
02:31:2e:d5:bd:11:24:71:13:56:db:29:08:c8:1f:
11:6b:1e:a2:97:ca:e2:60:a1:31:dd:4c:44:e4:e6:
7b:36:45:2b:a8:4a:a3:9c:e9:2c:40:bf:84:3e:95:
2d:f4:d4:a7:a5:3e:41:b6:44:81:a7:ca:5c:24:b7:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:38:8D:4B:7F:9A:17:5F:DC:62:0E:5A:13:81:B4:33:82:2E:FC
X509v3 Authority Key Identifier:
keyid:25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:8f:be:82:0a:f7:19:44:0d:94:8d:49:d2:dc:f5:db:49:
d2:b5:c8:54:9e:10:c8:7e:9f:d4:fb:1a:b5:80:ce:ef:84:39:
ff:3a:79:94:3b:fc:9d:56:42:a7:89:3d:cd:b2:d4:cc:8f:6d:
ae:18:2f:74:ea:a7:7d:be:4b:d7:2d:cb:b9:99:5c:96:a1:35:
4c:eb:b7:d8:0d:a3:fe:31:da:73:71:e0:0a:c0:86:1d:be:bc:
02:b7:0d:66:fe:50:34:67:3a:1c:08:a0:42:17:24:d9:ba:d4:
29:27:cf:7a:1e:15:47:3e:e5:cc:c0:2b:59:f2:49:7b:b7:19:
6e:1c:70:80:06:a6:9b:94:74:6e:8b:8f:34:fa:a6:26:2b:85:
33:09:2f:63:a8:88:03:4d:50:e0:76:05:ca:97:92:03:21:21:
f4:81:df:82:53:1b:ea:5f:79:34:0f:44:af:e5:00:38:ae:01:
ec:72:d3:39:4c:8f:63:a3:17:3f:41:bb:ee:01:ec:1f:84:fa:
22:a8:c2:90:4f:42:5f:02:70:61:fc:d0:ac:81:85:63:0d:52:
ef:28:c2:c4:c2:52:65:0c:88:c6:4c:80:00:cd:7b:e3:20:ec:
3b:97:49:7c:26:eb:5b:a3:58:ea:ce:b3:2a:2f:9e:60:51:93:
e0:dd:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:29:59 2026 by rpki-client