Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: D8kicDkfpYWNofxLrFzr/cvTQ1kqi8A4MY08CQerlZs=
Subject key identifier: 06:AE:D5:36:ED:33:22:60:5D:7D:6B:7E:AC:32:CC:3D:E3:F2:77:CC
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019D389BBDB12D4D3CA7E9608CE8E1C4E41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0902
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: RBIMnSbN6dMvE0vszNZGnlzUC95SZpBb9URu6K4wDxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bd:b1:2d:4d:3c:a7:e9:60:8c:e8:e1:c4:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=06aed536ed3322605d7d6b7eac32cc3de3f277cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:c1:15:9e:ce:33:94:66:72:f7:93:34:83:
c5:22:f5:95:55:8f:23:71:90:29:a4:a4:cf:a0:dd:
60:42:5f:b9:88:f9:f8:8c:26:b0:5a:e5:a8:38:8f:
c3:53:ba:27:2f:03:03:25:0e:e7:14:9a:02:8a:28:
b0:83:b6:94:51:7d:f4:d1:62:58:3f:7b:79:8a:12:
1a:5f:0b:c9:62:a1:aa:b2:12:d7:30:b8:85:36:95:
c7:17:7a:bb:0b:a1:75:2e:7d:4a:da:d5:c6:82:a7:
2f:a6:59:da:a4:c7:d4:e7:49:f7:d8:1c:7d:a1:a5:
50:91:f2:a3:01:d2:6c:1f:be:79:ec:29:c5:d5:31:
b9:57:18:66:ea:f2:22:69:4d:72:a9:d6:ab:69:8b:
45:9c:1b:48:84:f0:7d:74:27:b4:2d:90:75:0c:8f:
b0:61:ed:89:f9:93:fb:f4:8d:7c:87:b4:fa:97:77:
61:49:0c:fa:ed:db:f9:d1:e6:d4:4d:17:b5:d2:27:
ba:39:01:f4:58:e1:2b:cd:ce:80:4c:ca:e1:a7:0e:
4d:cc:bd:b9:37:86:03:18:2e:6e:9a:d4:29:58:c6:
0a:15:44:45:02:ea:cf:61:3f:e8:10:36:1a:b9:ae:
fc:f0:31:68:0c:7b:49:da:37:a0:98:5a:10:85:9e:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:D5:36:ED:33:22:60:5D:7D:6B:7E:AC:32:CC:3D:E3:F2:77:CC
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c8:1f:a5:63:50:fc:15:1f:5f:5a:d3:d7:dc:5f:ee:16:f7:
6e:5a:45:89:e2:31:bd:b7:1d:c5:60:82:29:93:ad:e2:0a:c5:
aa:e7:7a:fe:41:20:e1:5b:fa:e0:af:a8:4f:13:23:b6:8b:aa:
f2:1f:dd:ee:18:26:74:70:1f:a9:02:19:7b:29:50:85:90:0d:
c7:2c:97:f9:55:a5:87:62:de:59:14:84:41:10:3a:69:9b:ee:
db:c4:2c:e6:3f:50:47:e9:3b:fd:bf:55:79:8d:26:3e:66:5a:
15:eb:22:eb:c1:b2:71:7b:90:8a:e7:bb:97:a9:30:66:4f:ad:
d4:7c:45:47:e6:bf:b0:2a:8f:a9:80:b7:2d:89:70:1f:57:13:
9e:2f:ab:3f:ce:c2:40:a9:c4:a9:3f:21:d0:f0:24:ef:d7:ff:
76:29:f3:cb:ed:c2:e7:7a:a6:94:b2:10:95:44:a3:69:5c:9d:
c1:f0:f1:0c:32:97:48:b8:20:71:7e:b0:58:f4:b5:eb:1b:72:
09:08:7b:4c:88:dd:68:7a:8b:e4:fd:2f:b6:50:11:49:89:cf:
2e:2d:81:18:bd:e1:50:99:66:da:13:c9:a3:6a:a8:87:fd:e7:
f4:6a:f6:84:e7:d7:02:c9:31:6d:57:ad:9c:b2:29:20:f2:46:
9c:0b:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:31 2026 by rpki-client