Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: 1u7bJYMjN1rUYXemraoZ7g6kQaikIF/WCctviN45Eag=
Subject key identifier: EC:25:BC:E7:6E:F3:E2:CA:1C:C4:8F:47:48:76:2E:78:B4:EF:ED:90
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 01A08A8D0EC56268E439AA00EFA68217FDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 04D0
Signing time: Thu 10 Sep 2026 09:01:35 +0000
Manifest this update: Thu 10 Sep 2026 09:01:35 +0000
Manifest next update: Fri 11 Sep 2026 09:01:35 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: B9r8c/rf21jMgK+M0jzRmhHwjuj60pCfcARxj23kRcw=)
2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:0e:c5:62:68:e4:39:aa:00:ef:a6:82:17:fd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Sep 10 09:01:35 2026 GMT
Not After : Sep 11 09:01:35 2026 GMT
Subject: CN=ec25bce76ef3e2ca1cc48f4748762e78b4efed90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:90:e2:6c:30:8d:58:a5:a3:d2:8e:60:1d:
fc:1f:46:f1:4e:1a:ce:c8:23:dd:35:36:ba:81:c5:
bd:fd:4e:f7:93:fd:da:ba:99:a1:34:d0:87:8c:43:
b9:c3:81:10:bf:b0:2f:26:d1:7e:d3:ce:8f:92:2c:
88:44:22:79:e3:d5:66:84:a8:3c:5a:1e:ef:30:1d:
47:34:7e:19:bc:35:95:6f:8f:c1:de:fd:cb:d1:7f:
47:f4:45:83:9f:77:67:5f:5a:66:d5:76:4a:c0:d3:
0c:25:27:1b:65:9e:0d:e5:ea:7e:4b:86:51:0e:5e:
04:ef:8d:54:aa:6d:3f:8d:cd:5a:92:a6:6b:e0:c9:
42:1b:a5:f3:a1:ff:e3:85:f4:ac:74:41:72:eb:f3:
a9:12:93:d8:fe:0d:eb:8a:ea:ca:13:03:db:1c:04:
a0:c4:01:4d:d8:95:b6:26:21:8c:f8:7f:7b:53:96:
d1:5b:46:5d:ef:37:00:8d:83:6e:ca:d4:3f:46:7e:
76:ca:eb:ec:14:e4:11:98:88:df:7a:fa:8a:19:e8:
93:23:8a:41:90:44:33:f2:95:d7:c8:3f:77:c3:84:
f4:fa:c1:49:e2:79:12:57:80:e6:36:6d:34:fa:ce:
45:25:8f:ff:52:84:a5:de:d0:d6:e3:10:47:d5:2c:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:BC:E7:6E:F3:E2:CA:1C:C4:8F:47:48:76:2E:78:B4:EF:ED:90
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ab:68:08:2a:27:67:04:35:92:0f:8b:8c:f0:30:a5:aa:3f:
95:0b:b3:94:5b:30:c9:6c:2f:8b:64:76:88:de:35:bf:ff:2d:
37:d2:35:d7:77:c0:3b:15:d4:e1:5a:f2:c7:50:59:12:8b:04:
b8:a1:38:9b:32:de:b0:da:ab:fe:98:7d:58:74:0f:06:3b:91:
6a:7d:f4:6d:18:dc:fc:19:b4:5e:f2:5b:ab:f5:b1:ce:6d:9f:
b3:d6:ae:7a:9a:12:c3:15:db:ed:23:55:62:49:ba:28:4d:13:
59:7b:b0:15:6c:a4:81:22:fc:9c:1c:63:6f:b3:3b:12:df:63:
e4:33:97:4a:08:46:f3:4b:b6:6c:46:b1:a7:25:53:74:1f:79:
30:64:4f:5d:71:f9:c1:ad:75:94:a7:3b:0f:9b:50:a9:e1:33:
66:b0:ed:91:71:de:05:bc:c7:ca:94:5c:d6:bc:01:0e:dc:15:
0e:36:20:9d:ab:8d:56:5e:d8:11:25:71:d6:b7:0b:59:76:6b:
2c:d4:60:18:53:1f:40:59:1f:7d:ae:6e:ef:68:28:e2:59:09:
e3:6e:36:c3:ff:8b:fe:5e:27:48:83:ea:29:cb:5f:89:09:fc:
85:7d:88:cf:0f:72:17:91:98:ad:56:1e:f2:82:0f:34:aa:b9:
5c:ac:8d:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjQ7FYmjkOaoA76aCF/3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm
ZDRiMDEwHhcNMjYwOTEwMDkwMTM1WhcNMjYwOTExMDkwMTM1WjAzMTEwLwYDVQQD
EyhlYzI1YmNlNzZlZjNlMmNhMWNjNDhmNDc0ODc2MmU3OGI0ZWZlZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoqQ4mwwjVilo9KOYB38H0bxThrO
yCPdNTa6gcW9/U73k/3aupmhNNCHjEO5w4EQv7AvJtF+086PkiyIRCJ549VmhKg8
Wh7vMB1HNH4ZvDWVb4/B3v3L0X9H9EWDn3dnX1pm1XZKwNMMJScbZZ4N5ep+S4ZR
Dl4E741Uqm0/jc1akqZr4MlCG6Xzof/jhfSsdEFy6/OpEpPY/g3riurKEwPbHASg
xAFN2JW2JiGM+H97U5bRW0Zd7zcAjYNuytQ/Rn52yuvsFOQRmIjfevqKGeiTI4pB
kEQz8pXXyD93w4T0+sFJ4nkSV4DmNm00+s5FJY//UoSl3tDW4xBH1Sy6QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwlvOdu8+LKHMSPR0h2Lni07+2QMB8GA1UdIwQY
MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt
MDQ2MmI2NDg0ZDYwLzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw
LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMatoCCon
ZwQ1kg+LjPAwpao/lQuzlFswyWwvi2R2iN41v/8tN9I113fAOxXU4Vryx1BZEosE
uKE4mzLesNqr/ph9WHQPBjuRan30bRjc/Bm0XvJbq/Wxzm2fs9auepoSwxXb7SNV
Ykm6KE0TWXuwFWykgSL8nBxjb7M7Et9j5DOXSghG80u2bEaxpyVTdB95MGRPXXH5
wa11lKc7D5tQqeEzZrDtkXHeBbzHypRc1rwBDtwVDjYgnauNVl7YESVx1rcLWXZr
LNRgGFMfQFkffa5u72go4lkJ4242w/+L/l4nSIPqKctfiQn8hX2Izw9yF5GYrVYe
8oIPNKq5XKyNAw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:54 2026 by rpki-client