Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: 74VILoOZocqcVa34aFvJi8amqiL3B2RXpnXPuYvWd9E=
Subject key identifier: 97:07:45:9D:DC:AC:9B:38:EC:9E:0B:39:07:01:E9:33:CF:0F:29:C4
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019EB6FC2F99ACE99B86D0A867E1F222A452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 09C8
Signing time: Thu 11 Jun 2026 14:00:40 +0000
Manifest this update: Thu 11 Jun 2026 14:00:40 +0000
Manifest next update: Fri 12 Jun 2026 14:00:40 +0000
Files and hashes: 1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: KDg6tI2EvJBEncl2Rzx9+2i67CoQ+orn835+G+OkUpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:2f:99:ac:e9:9b:86:d0:a8:67:e1:f2:22:a4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Jun 11 14:00:40 2026 GMT
Not After : Jun 12 14:00:40 2026 GMT
Subject: CN=9707459ddcac9b38ec9e0b390701e933cf0f29c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:6a:da:a8:22:b8:a1:be:2e:59:7b:b1:3f:
9b:f5:be:3a:d4:aa:41:b0:ea:97:2c:d1:c3:9b:b9:
c1:87:57:1d:3f:3a:7e:c0:ce:03:de:c4:9d:4f:80:
ff:22:22:63:3f:92:7c:a1:16:c0:56:bf:c5:29:7d:
9d:f2:ca:93:fa:20:77:0f:f5:89:c2:62:fa:0f:b3:
70:ce:dc:9b:0b:a7:e0:73:89:ba:00:cc:5d:68:bb:
de:c9:5f:e2:93:2a:e3:c7:b6:4d:5b:e7:ad:98:00:
75:73:02:43:4d:ea:dc:38:70:8c:6c:b9:d2:11:a8:
12:ac:df:2c:8f:93:19:c7:c3:af:d4:9e:52:b3:16:
42:07:ca:a7:cc:ff:52:a4:f7:da:e0:7d:cf:0f:b7:
f2:b5:2b:31:2f:6d:bd:ca:e9:5a:e1:31:de:3d:61:
c2:76:ea:ab:c5:ef:7b:ff:1f:2a:99:2f:8a:0b:ec:
06:b9:24:10:77:e7:2c:61:a0:5a:ee:87:a7:4c:e6:
fc:46:0a:79:c9:59:9c:57:20:2f:d2:90:56:98:96:
9e:85:5b:e4:d9:3c:b7:37:14:ce:7a:d1:d6:d8:26:
b4:d9:f7:33:0f:a6:96:67:3c:af:86:3b:f4:a4:30:
cd:ee:fb:1c:24:a3:3e:2c:e3:23:de:c4:12:5e:8e:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:45:9D:DC:AC:9B:38:EC:9E:0B:39:07:01:E9:33:CF:0F:29:C4
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:69:64:15:b5:69:dc:7b:e9:91:93:ab:28:aa:19:5e:cc:ca:
ee:c8:d6:99:42:91:05:82:27:82:dc:b0:7c:87:36:0a:32:03:
77:40:4b:91:37:27:43:3a:ac:09:ff:e5:bf:6f:b1:1e:3a:46:
25:99:f5:f8:ae:5f:3c:7a:0b:ea:09:ba:06:6e:c0:dc:41:84:
c3:8f:33:f8:73:1c:87:9a:ed:9a:54:0d:f1:f6:1f:34:38:2b:
4c:e2:ac:95:57:9a:90:25:9a:28:47:00:1e:0d:7a:47:b9:23:
d4:66:4f:54:d9:9a:0b:21:3e:15:f9:2d:30:6c:69:ef:fb:e2:
d2:c4:8d:45:5d:92:14:ed:05:64:04:89:06:43:34:e0:10:6b:
98:89:87:f1:e2:a8:89:89:5c:6e:c6:c2:57:09:dc:cd:11:a4:
87:65:dd:5f:3b:c3:0c:4f:ba:89:5d:a7:a0:3d:a8:fc:bf:71:
5e:43:69:9b:58:dc:6a:1b:db:72:80:b3:ff:9a:e5:3a:b7:0e:
f6:8d:e5:74:b9:81:b4:94:86:ab:68:13:cb:e9:c5:d0:90:2d:
94:1a:b2:d5:00:a4:c6:4c:99:fc:d3:07:84:2d:51:27:7f:8c:
bf:34:e8:2b:26:ff:20:4a:cc:62:71:b0:78:97:0f:e9:16:bf:
4d:2c:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:54 2026 by rpki-client