
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: 0Tj+32TaW8h3SGgeH0sKg+WO55Qj/TyM3VefQrvBQm8=
Subject key identifier: 22:79:0E:98:C4:5E:A5:8B:AD:39:30:E3:D0:BA:2F:D2:A4:40:F8:1C
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 01A18F0BA6FFC4DD3B8EADE8BF0AC10177C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0B41
Signing time: Fri 30 Oct 2026 23:01:07 +0000
Manifest this update: Fri 30 Oct 2026 23:01:07 +0000
Manifest next update: Sat 31 Oct 2026 23:01:07 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: nlbt9plj5xfptgQVqg3Qvj3XNmi4XZYcHjSUpsD7qss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:a6:ff:c4:dd:3b:8e:ad:e8:bf:0a:c1:01:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Oct 30 23:01:07 2026 GMT
Not After : Oct 31 23:01:07 2026 GMT
Subject: CN=22790e98c45ea58bad3930e3d0ba2fd2a440f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:61:70:bf:a8:d3:71:70:34:4d:92:61:f1:
5f:8c:0a:88:03:ee:e9:5e:63:39:33:b5:ff:ea:fd:
79:90:6e:52:54:ce:f2:4e:42:81:d0:6a:4b:0a:69:
70:7c:63:ab:b6:81:70:bd:9c:34:01:3b:87:28:5a:
ab:a0:88:ea:90:24:61:30:ee:da:10:0a:93:e0:7e:
14:54:af:17:81:1b:59:06:9e:ce:6a:a7:a7:70:aa:
bf:65:3d:f8:e6:90:0f:cd:d6:c9:77:22:55:48:f7:
f6:4b:4b:12:aa:ca:5e:fc:93:b7:21:16:bb:b8:bb:
24:e0:ee:99:b9:84:32:63:27:a5:54:08:50:74:d7:
e2:eb:df:4f:f9:31:e0:d9:d0:56:93:f5:33:22:42:
86:9f:b4:ef:40:ae:d2:55:c1:b7:f3:b7:79:8a:81:
51:4f:d1:ac:b1:19:76:cc:e8:e5:b7:27:74:0e:de:
cf:8e:39:d7:be:a4:4a:11:5f:4b:f5:c1:f5:9f:f8:
22:b5:36:72:d0:0c:92:76:52:fc:3f:6a:6e:c3:e4:
d0:1d:d0:bd:63:40:b9:6c:b5:8c:f8:41:e3:33:85:
5e:35:68:92:02:f4:05:5d:4e:ce:84:24:e8:21:78:
d3:5f:a5:3b:0c:1d:b1:07:75:44:f1:16:86:b9:b0:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:79:0E:98:C4:5E:A5:8B:AD:39:30:E3:D0:BA:2F:D2:A4:40:F8:1C
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:63:21:9a:52:64:a1:76:35:e6:8c:72:c6:13:b5:a7:06:4a:
5c:64:20:f6:5c:38:8a:e8:67:99:ed:6a:29:fa:85:63:b4:05:
11:d4:36:91:ec:54:89:a0:93:d1:a3:27:9f:fe:09:d3:ee:ea:
52:70:4c:ed:e2:d0:eb:f8:d9:50:8d:b7:d5:c9:c4:e5:93:3f:
e1:74:9a:9d:fe:66:02:c4:de:5e:66:d5:68:22:26:2c:db:d3:
92:53:61:2d:92:93:8f:fa:f5:54:99:79:62:e2:88:49:11:72:
39:17:e6:9e:37:6d:91:72:2c:ef:cd:0a:dc:6c:ec:ed:fe:3c:
9a:ea:19:4d:7c:7c:d3:79:e6:af:3c:1e:a9:3c:48:5f:60:c0:
64:88:13:90:1c:08:ea:80:1a:ca:f4:3f:9e:34:ef:e5:76:f5:
cc:ec:cb:53:2c:c0:56:69:50:b5:4a:33:11:61:73:d0:8a:11:
f5:54:1f:0a:15:3a:f2:c1:9f:3b:66:ba:7d:16:4a:a7:e4:ca:
39:29:1c:32:55:26:75:df:70:cf:ae:81:5e:70:91:14:05:e3:
b7:7f:e3:52:1b:ee:5d:a4:a4:55:37:9a:28:6c:46:0f:e6:dd:
15:ad:f7:e9:f6:16:d2:ae:ab:65:36:74:cd:5a:5d:ec:52:4b:
de:52:34:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPC6b/xN07jq3ovwrBAXfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGFkYmEyNjA0OTM0NzM4YzdjOTY5MmEwYjNhYjdiMzBh
ODJiYjIwHhcNMjYxMDMwMjMwMTA3WhcNMjYxMDMxMjMwMTA3WjAzMTEwLwYDVQQD
EygyMjc5MGU5OGM0NWVhNThiYWQzOTMwZTNkMGJhMmZkMmE0NDBmODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM9hcL+o03FwNE2SYfFfjAqIA+7p
XmM5M7X/6v15kG5SVM7yTkKB0GpLCmlwfGOrtoFwvZw0ATuHKFqroIjqkCRhMO7a
EAqT4H4UVK8XgRtZBp7OaqencKq/ZT345pAPzdbJdyJVSPf2S0sSqspe/JO3IRa7
uLsk4O6ZuYQyYyelVAhQdNfi699P+THg2dBWk/UzIkKGn7TvQK7SVcG387d5ioFR
T9GssRl2zOjltyd0Dt7PjjnXvqRKEV9L9cH1n/gitTZy0AySdlL8P2puw+TQHdC9
Y0C5bLWM+EHjM4VeNWiSAvQFXU7OhCToIXjTX6U7DB2xB3VE8RaGubAbqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ5DpjEXqWLrTkw49C6L9KkQPgcMB8GA1UdIwQY
MBaAFI8K26JgSTRzjHyWkqCzq3swqCuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEt
N2JhZmRlNGM0YjI0LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEtN2JhZmRlNGM0YjI0
LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmMhmlJk
oXY15oxyxhO1pwZKXGQg9lw4iuhnme1qKfqFY7QFEdQ2kexUiaCT0aMnn/4J0+7q
UnBM7eLQ6/jZUI231cnE5ZM/4XSanf5mAsTeXmbVaCImLNvTklNhLZKTj/r1VJl5
YuKISRFyORfmnjdtkXIs780K3Gzs7f48muoZTXx803nmrzweqTxIX2DAZIgTkBwI
6oAayvQ/njTv5Xb1zOzLUyzAVmlQtUozEWFz0IoR9VQfChU68sGfO2a6fRZKp+TK
OSkcMlUmdd9wz66BXnCRFAXjt3/jUhvuXaSkVTeaKGxGD+bdFa336fYW0q6rZTZ0
zVpd7FJL3lI0AA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:18:00 2026 by rpki-client