Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: 4LqnRV8voMXj2RRiYtoOsxmDGXeb3zCMHd9vcs0FFc0=
Subject key identifier: 09:9A:E4:A4:B7:35:B5:E9:28:35:FB:CD:33:91:DC:7B:9E:61:05:BE
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 019DCF74ED2D9FE95E5AAF0F96C9C464571B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 0366
Signing time: Mon 27 Apr 2026 15:00:39 +0000
Manifest this update: Mon 27 Apr 2026 15:00:39 +0000
Manifest next update: Tue 28 Apr 2026 15:00:39 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: 4WkQ+bj232Vs3Hf9rw7JTDA5PQTM0IlEI55xw4wn0F4=)
2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:ed:2d:9f:e9:5e:5a:af:0f:96:c9:c4:64:57:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Apr 27 15:00:39 2026 GMT
Not After : Apr 28 15:00:39 2026 GMT
Subject: CN=099ae4a4b735b5e92835fbcd3391dc7b9e6105be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:a1:28:1c:d7:a8:43:f6:e2:38:5f:ce:2f:
0c:3f:7d:8d:24:bf:3b:ef:dc:74:7b:a5:80:3b:d2:
01:ad:fe:8c:ee:5b:c0:3f:5a:c4:60:2d:63:e0:38:
b8:64:a2:15:8d:15:01:00:2d:b5:ca:f9:69:d9:1f:
57:50:cb:1c:64:fb:87:55:e1:c9:19:8b:98:5d:f2:
c1:bd:d0:07:97:22:be:af:71:68:44:47:09:22:68:
73:a8:12:57:2d:bd:4e:e9:5f:3a:b4:f9:19:32:bb:
a0:00:71:0c:61:6f:f2:5d:b4:8e:08:c7:aa:fb:65:
ed:9c:8c:73:24:b5:f1:54:de:97:2a:a9:c1:34:c6:
9c:7d:e0:60:b8:67:78:e7:da:24:8a:7d:7e:78:5b:
d5:4c:2e:d2:9d:78:58:df:d6:1a:a4:10:a8:9f:3e:
47:1c:73:36:42:3a:c0:c8:aa:31:c2:b1:28:01:cf:
45:af:69:61:e8:54:98:7f:67:bf:d0:0f:ef:31:d2:
8c:8e:c6:0e:91:fb:df:5c:28:4b:20:c1:b0:eb:3f:
75:40:22:d8:07:72:2c:f8:0f:29:11:cc:1d:a0:f7:
9c:48:66:92:86:30:fd:9f:70:9a:db:80:58:8f:f5:
68:d4:d1:3d:d5:10:2a:c9:9b:b4:00:1f:1a:f2:08:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9A:E4:A4:B7:35:B5:E9:28:35:FB:CD:33:91:DC:7B:9E:61:05:BE
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:50:0e:49:3c:f0:96:70:8b:ba:6b:75:15:ea:62:68:4b:
95:04:08:40:77:e6:8b:84:50:a6:2c:fd:f7:12:ec:f6:ed:9a:
53:36:47:d5:0e:0f:f5:e8:64:dc:d6:c2:d5:6c:8e:d5:14:71:
36:fd:54:70:59:95:3e:91:9b:ec:77:b4:06:4b:a2:85:dc:5f:
11:b3:d6:88:a9:38:0b:fa:f7:10:d2:48:22:90:90:16:12:fc:
75:f0:3e:7b:fb:1a:2a:6d:26:de:0d:77:52:82:1e:d5:54:04:
9a:4b:67:64:31:d6:02:e9:2b:c4:54:ae:c5:fa:0b:4c:c6:ff:
a7:8d:23:b9:1a:a0:dd:03:b8:30:17:00:9e:bf:57:1f:1e:52:
f2:75:b8:d1:17:ce:63:8e:58:0d:d5:ff:a9:9d:d3:09:a7:5b:
4a:43:a5:a3:d8:00:36:37:5c:c8:35:d0:fa:c9:c4:fd:a3:b2:
91:ae:29:a3:cd:2a:99:d4:98:91:a1:dc:28:1f:67:8a:e5:80:
f8:72:a4:4b:0c:4f:24:b0:aa:89:d8:ff:cc:aa:9a:28:b2:da:
bc:7b:01:24:f4:8f:0c:32:83:07:8e:73:0c:9d:4a:0d:45:66:
fd:72:6a:95:d8:b9:45:42:40:81:52:17:f5:66:6e:28:2c:f0:
79:2b:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:09 2026 by rpki-client