Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: nXFuUsnnipv3EPgUWaFDG/gesMism/makT6T+50ksi8=
Subject key identifier: 5A:20:55:5B:39:00:82:92:75:69:19:B0:5B:9F:1C:A9:33:4D:B2:B5
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019FA0A8A829B9F8397FE3BDE09EDFC0585F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0A41
Signing time: Sun 26 Jul 2026 23:00:35 +0000
Manifest this update: Sun 26 Jul 2026 23:00:35 +0000
Manifest next update: Mon 27 Jul 2026 23:00:35 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: yh5sIp1Rdz6Ds44+W1ilaHYlW7DhG8szu4AuaNqasIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:a8:29:b9:f8:39:7f:e3:bd:e0:9e:df:c0:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Jul 26 23:00:35 2026 GMT
Not After : Jul 27 23:00:35 2026 GMT
Subject: CN=5a20555b39008292756919b05b9f1ca9334db2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:6d:c5:ed:67:26:18:68:f4:3c:d9:c9:30:
af:d6:1a:34:ea:66:80:3c:ef:ef:18:bb:14:3c:98:
aa:38:43:b2:f7:5c:63:84:24:1c:41:ce:a9:c7:31:
d6:34:da:94:cc:91:dc:d3:b3:e8:e2:bd:62:ab:10:
52:22:e1:e5:63:79:00:ce:df:92:7c:b6:3a:75:98:
04:f8:09:14:08:82:73:33:2e:75:dc:97:ff:2c:c1:
c0:4d:91:02:79:1c:f0:62:7c:71:79:4f:a5:b4:77:
b5:b8:a1:f3:ee:df:93:ce:69:92:8c:12:07:70:68:
5c:7e:54:67:9c:72:8a:de:a0:af:80:25:e1:e1:6a:
f9:43:79:55:c8:9e:c2:c6:f5:b6:58:d3:18:86:bd:
04:a7:0d:74:43:76:5b:bc:d3:17:9b:01:df:13:ab:
c0:74:cc:ac:c8:96:87:c9:b4:84:8b:06:db:8e:cd:
6b:aa:fd:39:5c:79:aa:0d:33:4b:7b:a7:17:fe:f7:
97:79:60:ff:31:22:cf:f0:1b:c9:6d:a9:81:d7:4d:
e3:fa:ed:ea:64:8d:66:89:bf:d4:ab:63:31:81:fb:
1e:c0:6f:ae:ea:ab:ea:5f:2f:93:b5:ea:b9:9e:cb:
68:57:ad:05:ba:d6:04:7f:8f:92:cb:d7:33:78:2e:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:55:5B:39:00:82:92:75:69:19:B0:5B:9F:1C:A9:33:4D:B2:B5
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:05:98:37:7f:84:0a:cf:74:2b:1d:d7:08:fd:45:19:49:b0:
44:dc:2f:c3:f3:48:d9:f3:56:44:3f:97:47:cd:b9:17:2d:e4:
af:85:0f:31:e9:83:9f:d5:a3:d0:0f:94:72:25:07:f4:a2:e2:
bb:da:99:7a:9f:2f:4f:f2:53:f6:7f:d9:a8:01:37:56:be:b4:
2f:02:fd:48:ef:cb:3a:a1:86:f5:41:f2:67:0c:d9:e6:4b:d0:
1c:a5:b8:f4:e6:c8:50:17:b5:53:e8:78:a2:2b:42:c6:cc:7d:
71:db:b6:ac:05:11:79:d8:a7:06:4f:52:44:65:23:07:33:1a:
65:29:64:f9:28:58:4d:cd:86:36:cc:4e:78:24:11:91:eb:45:
db:8a:36:9c:fc:70:dd:52:71:95:0e:9c:87:f7:23:16:17:b9:
6c:ef:1a:a3:29:97:64:e1:b1:01:62:4a:14:2e:39:55:75:3c:
7e:b9:94:76:e1:4b:b6:a2:b3:f6:2e:4d:c2:40:a9:85:30:16:
77:14:34:15:12:bb:06:7a:88:2f:43:56:d8:f6:ca:e2:3c:29:
6a:67:41:04:03:35:fb:93:e5:cc:c6:66:5b:28:ca:35:73:df:
78:92:45:fb:f3:c1:4d:a0:2c:1e:3e:0f:7f:dd:24:73:b8:07:
b9:7e:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:14:09 2026 by rpki-client