Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: OXdneEeXsTEgjBJeGZQxqQI9z+HnUYyCMbRQXjcL9ZI=
Subject key identifier: 16:79:26:94:61:73:3D:32:36:8A:FD:85:AF:8E:D9:95:C5:D6:2F:10
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 01A17C28D9D114A1B3D750BB769A1E31FF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 1621
Signing time: Tue 27 Oct 2026 07:00:14 +0000
Manifest this update: Tue 27 Oct 2026 07:00:14 +0000
Manifest next update: Wed 28 Oct 2026 07:00:14 +0000
Files and hashes: 1: OEpwskwsLrz2yf1kQY123zPLnE4.roa (hash: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: 43NsU6U05X+gQVBCQ1JfrCBi4ryZIoGLnRkfnk6LDBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:d9:d1:14:a1:b3:d7:50:bb:76:9a:1e:31:ff:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Oct 27 07:00:14 2026 GMT
Not After : Oct 28 07:00:14 2026 GMT
Subject: CN=1679269461733d32368afd85af8ed995c5d62f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:f6:21:8d:a8:36:dc:2b:22:e6:9f:5a:86:
be:8b:2e:58:20:90:6e:2c:d7:91:ab:78:c5:d4:24:
ae:6f:7f:27:1e:54:09:2e:83:5d:13:e7:5c:c5:37:
b3:b8:d3:f8:54:10:2c:21:4a:1a:b6:40:eb:86:9a:
35:e9:5d:eb:aa:44:4d:37:7d:b6:53:74:a8:94:3e:
e3:db:b3:8e:37:ae:21:7d:ce:12:84:45:f4:8b:49:
22:96:2d:56:e2:af:02:c5:88:89:f4:d5:af:77:86:
cc:93:b1:ad:f3:45:01:ab:a9:ba:00:bb:a2:09:5f:
75:9f:a5:98:d9:44:22:fa:3a:5b:19:f0:9e:28:1c:
7c:df:85:f3:9b:6f:63:c7:1e:f0:01:d5:f4:ca:6a:
52:31:bd:92:81:46:ba:13:dc:c9:3b:e5:7c:f2:90:
af:d3:fb:72:ce:7f:b2:6b:1a:a5:be:27:98:0c:df:
a6:29:91:5c:1c:d4:b8:06:6b:6d:1d:7f:0f:2f:25:
a1:a5:e0:a6:b5:41:c6:30:5f:9f:ef:8e:5d:1a:94:
71:9b:c7:b3:c7:23:19:69:f0:2e:10:3f:83:6d:07:
0d:08:11:4c:c8:79:13:0f:98:85:51:cb:93:5c:b8:
0d:03:a8:e1:07:03:85:fd:2b:6c:d9:e7:23:3d:10:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:26:94:61:73:3D:32:36:8A:FD:85:AF:8E:D9:95:C5:D6:2F:10
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e1:a8:4f:23:1e:08:3c:c5:d4:64:5c:d0:0c:bc:c5:9c:cd:
95:8d:ab:2c:c8:ae:a8:c8:61:68:e0:20:de:e1:88:9c:d8:16:
ad:bb:fe:cf:a0:f5:77:d6:95:e8:1f:df:27:2c:95:df:b6:30:
6c:7f:d6:3b:9a:1e:fd:81:e4:2b:e4:63:32:94:c8:52:a5:1e:
1f:38:a0:54:46:58:dc:d6:89:f9:30:db:02:75:c8:fc:a8:78:
8e:88:9a:f1:4c:a5:cf:f2:57:f0:05:87:db:aa:6d:e1:77:db:
af:e1:b7:dd:9f:c4:ca:b7:5e:54:eb:ed:c2:c5:ec:ab:8a:4f:
b6:a7:9d:0c:ee:2d:d6:a9:de:f6:18:f3:3e:54:66:a2:46:d3:
f7:05:01:ae:ae:f0:cf:c2:14:fa:9c:98:be:12:f9:22:fa:64:
43:e7:38:8a:77:dd:6e:75:08:64:fd:43:3e:23:f9:7c:a3:bd:
30:10:b4:ad:83:df:08:42:ea:5a:2c:92:84:b8:e5:da:4f:b4:
e2:6b:6c:af:f1:e6:74:e6:d1:af:93:1a:cf:9b:d3:76:86:fd:
94:e8:29:97:63:bd:df:79:6e:c3:47:a1:4d:3c:34:24:69:19:
53:df:57:8f:3d:c3:a0:69:e4:0f:da:f7:12:47:33:a7:bc:76:
49:e7:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:52:01 2026 by rpki-client