Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: uFCqn7xm3GW+wBRk8sEB0sCEHetFTu5C6tjsPDKvZSA=
Subject key identifier: 8F:D8:66:80:67:35:8E:82:33:55:D2:84:1A:79:69:99:FB:F9:2C:21
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 019FA11647C8EE50408424DF684B7A7228E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 152B
Signing time: Mon 27 Jul 2026 01:00:19 +0000
Manifest this update: Mon 27 Jul 2026 01:00:19 +0000
Manifest next update: Tue 28 Jul 2026 01:00:19 +0000
Files and hashes: 1: OEpwskwsLrz2yf1kQY123zPLnE4.roa (hash: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: /ixLWqsDmqP4J6SHsOkhHnOERORrCXizhIraJizSdfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:47:c8:ee:50:40:84:24:df:68:4b:7a:72:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Jul 27 01:00:19 2026 GMT
Not After : Jul 28 01:00:19 2026 GMT
Subject: CN=8fd8668067358e823355d2841a796999fbf92c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:a5:ae:6d:c5:05:bc:59:c8:ed:71:87:ba:
08:c8:6d:0b:9f:db:dd:9c:62:ce:41:64:a3:85:4d:
b5:fa:65:e2:6c:00:13:73:ce:f2:e8:ba:8d:32:78:
e2:bd:ec:cd:83:17:88:5b:c3:c0:10:86:ee:52:1f:
3a:4d:e0:37:59:b9:50:38:db:c1:5c:ad:c2:c9:ab:
59:9f:ee:45:c1:f0:78:76:d7:bb:64:30:fd:2a:ee:
6f:86:89:ac:5c:f6:ed:02:77:23:0d:99:a7:ca:0f:
ba:5c:4d:4f:e5:a7:1d:eb:b5:b5:71:25:a4:b9:6d:
19:82:0c:d8:91:34:db:15:98:e1:56:ed:7b:d4:cf:
90:26:11:99:88:de:ad:eb:d9:96:de:f6:d3:16:a5:
f0:44:b8:23:85:14:bc:6e:f7:b3:96:65:d0:a9:bc:
77:d1:b3:4a:20:2c:2a:87:3f:3d:18:c3:51:3a:88:
dd:db:c1:62:f5:15:b6:d7:88:d3:96:a2:a8:a8:e5:
f2:76:bb:48:d2:8a:c0:7a:97:b1:ea:c7:c1:54:5a:
6f:bb:9b:30:6c:95:06:ef:dc:ca:fe:b2:5a:a8:89:
93:60:db:91:11:2a:f9:1d:81:61:46:18:39:4f:42:
06:06:0a:0e:21:15:5b:da:25:8e:bf:35:b6:ff:96:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D8:66:80:67:35:8E:82:33:55:D2:84:1A:79:69:99:FB:F9:2C:21
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:61:8c:d6:f1:e7:b2:bf:9c:a0:49:01:5a:bb:3b:93:e8:
75:87:82:3d:17:3d:ac:ad:31:08:37:f6:67:e5:0a:dc:e1:00:
ce:2f:36:b5:70:fb:e1:2c:8a:25:9c:59:7d:f3:b9:d3:b5:48:
8a:99:3f:1c:7f:1b:dc:28:3a:12:3e:a0:a7:d3:7f:e7:51:63:
a3:4c:0a:d5:2d:7c:1d:ee:f9:57:15:df:48:0b:20:7c:f2:da:
b8:75:3e:c7:27:68:a8:a6:69:23:95:91:a1:86:80:ec:ff:f9:
0b:21:99:08:b8:43:dd:8e:4e:a2:eb:39:35:1d:e7:bd:df:89:
75:bf:bb:84:53:6f:b2:fa:79:32:ed:d3:cb:c8:25:7c:26:f4:
70:25:2a:48:af:82:c6:17:cd:ac:e6:1e:fb:a2:28:d0:9a:e1:
0f:62:cc:51:38:e1:f3:85:1b:8a:9e:53:be:55:36:69:38:33:
99:7c:87:25:9c:d6:79:cf:d3:65:5d:e4:9b:10:82:7a:0d:1c:
e8:20:ef:5c:5f:9e:a9:11:15:14:a2:32:85:35:49:4d:48:cd:
33:42:33:1d:5d:0f:57:88:16:aa:a1:b7:d2:80:b7:4d:bd:68:
ce:77:e7:cc:19:ce:2e:0d:fc:88:b0:db:d8:f4:fb:2b:22:ef:
51:69:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:06 2026 by rpki-client