Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: 1FJp4HmKx9qMd9acWikQJ9EerX6a4Vl2iHK4cvbqQ3E=
Subject key identifier: 03:DE:64:6F:79:04:6B:5E:9C:85:C2:4E:9C:44:B9:26:C2:82:92:0A
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019E30E10E406285235F9873FB8662E0F0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 17F2
Signing time: Sat 16 May 2026 13:01:55 +0000
Manifest this update: Sat 16 May 2026 13:01:55 +0000
Manifest next update: Sun 17 May 2026 13:01:55 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: abrOb/2iI+3OcnxZANnE/xrglfyhBrF2uQCYC7ujedQ=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e1:0e:40:62:85:23:5f:98:73:fb:86:62:e0:f0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: May 16 13:01:55 2026 GMT
Not After : May 17 13:01:55 2026 GMT
Subject: CN=03de646f79046b5e9c85c24e9c44b926c282920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:91:2a:fb:c8:c0:59:6a:b8:1a:e8:f0:ec:
95:31:b5:06:86:73:d5:23:60:4f:0b:61:8b:ed:8b:
20:cf:6e:f9:1f:26:e1:4b:10:c1:28:41:3d:1f:cf:
c2:30:4e:8f:e9:d9:78:ca:87:dd:a5:28:d3:ce:72:
4d:e7:78:09:ff:46:5d:6a:ba:26:9c:89:18:51:64:
be:08:b9:8d:50:c7:4f:95:bc:e8:69:ec:c1:7e:e2:
1b:5f:4c:ad:1a:dd:63:ce:ac:ae:c7:ba:e2:65:82:
32:3e:cf:cf:33:98:39:cc:be:4f:25:11:8e:56:8b:
d7:31:4f:e1:d0:98:62:75:41:fb:4c:59:7f:4f:ca:
8b:ab:91:83:77:86:a6:11:1e:86:00:0f:24:2f:b1:
9a:ac:b2:11:f0:71:d1:17:2e:2e:f0:83:e1:1d:ee:
5a:e7:7d:34:f1:63:a5:48:af:ad:b2:7f:3b:a2:eb:
98:8b:e4:aa:48:c7:b2:c9:df:f4:6e:9e:2c:50:d2:
fc:20:f2:e7:bb:89:b0:03:48:41:04:64:12:77:39:
1f:85:c4:a0:e5:5b:8f:7c:37:02:6a:3a:6b:09:39:
e2:c9:5e:05:35:d0:6e:35:f3:34:ca:7e:4b:32:31:
9d:3c:a7:d0:56:9b:e1:77:8b:06:d9:10:1a:c9:d7:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:64:6F:79:04:6B:5E:9C:85:C2:4E:9C:44:B9:26:C2:82:92:0A
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:bb:1d:be:36:2c:0c:6e:f5:6a:7d:15:fe:52:47:7c:93:
ed:4c:0e:ff:11:6d:af:8d:85:0f:fa:a3:43:81:cd:46:bf:97:
38:67:19:36:90:08:90:49:eb:dd:3a:d7:4e:97:f2:e8:49:51:
85:f9:38:95:be:3d:b0:fa:e8:98:18:b6:67:c0:fb:d0:c9:50:
84:fb:09:45:23:2f:da:2a:ae:2a:38:df:de:bf:d3:b8:5e:c7:
c9:c7:b8:1c:ca:f4:63:27:ae:60:bf:c7:cc:b3:60:98:ed:6f:
c4:f0:4a:69:e2:36:86:87:16:fd:e4:7e:71:bc:38:b5:97:74:
52:b5:2c:19:ff:93:38:60:99:31:2d:63:f2:f3:d0:49:45:38:
a6:8e:a8:dc:57:a8:d7:68:f0:26:b1:98:7f:4b:62:dd:46:52:
86:b5:fb:9d:41:5f:16:b7:f2:5e:7e:be:bf:fc:b8:f8:55:50:
45:49:71:c7:13:60:9e:ed:4b:9d:11:c6:f3:13:b8:02:d8:93:
16:b9:bb:07:03:58:91:f9:bd:10:ff:d1:5f:6f:f8:ca:94:56:
2a:af:dd:43:2d:79:78:0b:e0:68:c2:76:e0:e0:fe:5c:ce:d6:
14:7a:f0:25:49:2a:99:5c:f0:91:c9:a3:81:79:65:39:2d:0f:
73:fb:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:12 2026 by rpki-client