Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: thQE/Hy/GN+4mQs/Iswe8XaKyZG7AOpuS9aL02jZhZU=
Subject key identifier: B4:59:3D:F6:F9:EB:DB:9B:EF:46:E3:7A:CC:17:33:02:01:B2:18:F6
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 019EB98F9BD563FB4F9F0ACF4CAB9B2DA3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 1457
Signing time: Fri 12 Jun 2026 02:00:56 +0000
Manifest this update: Fri 12 Jun 2026 02:00:56 +0000
Manifest next update: Sat 13 Jun 2026 02:00:56 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: geMJXkIppQMegrUn/iU4JTcKvHZ/6+EWBl91ma3JfEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:9b:d5:63:fb:4f:9f:0a:cf:4c:ab:9b:2d:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Jun 12 02:00:56 2026 GMT
Not After : Jun 13 02:00:56 2026 GMT
Subject: CN=b4593df6f9ebdb9bef46e37acc17330201b218f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:15:82:d8:f6:d3:58:27:2c:53:d3:30:f7:
dd:a6:15:f9:e9:f1:3b:55:f3:23:2d:ed:d3:06:ad:
3e:cc:e2:1e:00:f1:80:d6:53:66:88:33:e6:75:5a:
24:9c:28:4c:ba:31:f1:34:f1:17:39:e1:d3:92:3a:
a4:39:11:d6:ff:f2:cc:07:24:9d:cb:23:7c:35:57:
fd:4d:00:bd:58:99:5e:c6:a9:f1:9e:64:36:c3:d2:
45:a9:aa:38:e2:42:27:65:f7:30:5b:da:65:1e:bc:
ff:3f:a7:19:d4:3b:10:91:ee:a0:13:ff:3e:81:e0:
0f:ad:b3:af:9a:94:1c:a1:91:5e:f4:c5:76:08:a0:
02:8d:b6:d2:a8:ac:7c:a7:1a:f2:d6:ad:a0:24:a0:
54:f3:37:cb:7b:01:85:7b:1f:ff:c4:48:f6:51:98:
02:b4:0c:05:20:a4:10:92:56:a8:58:ef:53:ef:6a:
59:81:f3:cc:4e:f3:e8:6a:92:39:e5:b1:61:45:c1:
bf:a8:23:e3:ca:6f:e5:11:52:71:10:4b:cb:73:a7:
56:4f:88:b0:38:f5:78:af:84:c9:66:8c:32:ea:3f:
be:f6:ea:35:09:57:b6:ad:1e:c8:fa:3b:91:33:50:
e6:f5:0b:74:a9:f8:50:96:ae:36:3d:9c:ff:67:0c:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:3D:F6:F9:EB:DB:9B:EF:46:E3:7A:CC:17:33:02:01:B2:18:F6
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f0:65:ab:aa:18:1f:be:53:04:4d:17:f6:4c:7a:a7:63:76:
a2:40:e3:a1:00:d9:f7:dd:7c:9c:fe:06:a1:da:f5:1f:d6:a8:
50:b3:ad:87:4f:d9:31:e8:7f:27:cb:ad:8a:37:26:e7:6d:d4:
cb:59:dd:df:8c:f0:1a:4b:ee:98:ba:ec:da:c7:82:89:32:40:
f6:92:8a:be:56:b4:9a:a9:32:73:c5:9d:d9:ad:0e:96:de:16:
b5:39:53:87:13:7f:6b:ed:b2:8b:e5:6d:ad:ea:7f:ab:7e:19:
a0:ce:40:56:29:ab:d4:a7:71:c0:c9:22:fb:d1:6b:ab:4b:c6:
a7:5e:6e:1b:47:f6:8c:e6:23:14:0b:e6:8e:da:af:99:8f:6c:
4a:36:f9:2f:0c:e7:e0:4c:e1:4c:c4:67:33:c5:b0:29:9d:f3:
15:46:ef:a5:b1:af:30:7b:3f:2d:34:d8:55:a8:96:55:10:8d:
1f:7f:68:80:99:f2:14:b8:2d:4b:aa:0c:ba:af:e0:c7:be:16:
5a:4b:52:e8:45:14:69:b7:4a:5c:26:71:d2:44:4f:16:cd:e0:
a9:73:fa:da:17:e2:94:d8:f8:63:a2:62:cf:ff:10:83:57:6b:
e3:b3:70:49:25:af:7e:5c:19:ca:3b:34:02:2f:42:e3:eb:ae:
b3:82:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:54 2026 by rpki-client