Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: Q0lUxa1dq1PO0Lc1ccR+ovG1OEdy9ZxEX/jc/e8VXMI=
Subject key identifier: 76:69:84:44:8F:C0:8D:BF:B4:30:6E:33:9B:AC:E9:2C:33:C7:47:9F
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019D37C07FC415506C62035BDF4F074551FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1771
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: 43UBabUHMXdQ0jIHBoZfdkspsLDrs58kdiY3UWBNigs=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7f:c4:15:50:6c:62:03:5b:df:4f:07:45:51:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=766984448fc08dbfb4306e339bace92c33c7479f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:71:d5:81:bc:df:50:63:49:db:c7:ef:f5:
71:2b:24:08:aa:57:2e:df:47:f0:f0:a2:93:4d:7e:
cb:91:8e:e8:3a:ec:7b:94:0d:cc:06:b5:09:0a:3e:
c7:de:d8:e9:37:90:a3:46:12:90:d6:62:0c:32:a0:
1a:47:d2:fd:41:23:e9:b9:18:13:1c:40:72:ec:1c:
32:9a:88:76:ab:00:da:4e:23:da:c4:af:30:2a:0e:
8e:53:b5:2a:e6:50:fa:21:cd:db:24:ef:74:b4:2b:
e3:94:f7:4f:62:6e:49:b7:e8:d7:11:a2:ac:40:84:
34:f0:1b:55:9d:50:f8:86:bc:05:2f:06:a8:64:29:
d2:25:56:4d:9d:b4:a6:0d:0a:70:ab:2b:37:bc:8f:
65:11:e2:71:f9:25:3f:42:78:40:dc:46:d9:a5:45:
62:d8:c1:a8:70:f2:20:3c:7f:f3:46:f2:e9:5b:59:
6a:61:89:7d:13:6f:e9:76:0f:ec:e9:3e:24:a2:e2:
df:91:c2:f3:d3:72:ef:4e:d3:00:67:a9:89:79:a3:
82:50:af:7b:ca:ef:e8:7d:4d:b0:2a:98:0b:25:d2:
0a:54:3d:2d:eb:2c:ad:6a:62:2c:00:a8:17:78:36:
15:1f:c4:1e:4e:49:14:0c:21:f2:b2:e6:ab:77:0a:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:84:44:8F:C0:8D:BF:B4:30:6E:33:9B:AC:E9:2C:33:C7:47:9F
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:c3:cb:18:28:dd:42:20:da:87:c4:c5:75:84:6a:4d:29:
d9:29:f8:a5:54:52:fc:bf:51:b5:83:cc:30:92:76:41:6a:26:
72:b5:bf:33:10:c5:d2:77:1d:9a:f9:6a:69:63:ad:d0:82:46:
3f:c6:9f:32:a3:60:44:b0:0c:ab:76:f7:b9:40:31:c5:d4:01:
fe:f6:19:68:f6:6d:24:b6:37:09:a2:78:08:1e:25:2a:4d:2f:
3a:a1:22:8c:35:00:8c:0d:86:1c:3b:c9:f7:5f:75:ca:3a:e0:
fb:44:dc:2c:77:70:4e:9d:e0:40:cf:2a:8d:aa:70:a8:a2:38:
93:db:9b:8c:d5:e2:32:00:90:76:f6:5f:bc:04:d8:be:d2:06:
fd:f5:f7:8f:1f:35:5e:f2:3c:6b:5d:d5:dc:6b:5a:1f:7b:81:
50:20:b5:81:73:73:1e:8d:92:b3:67:7c:ae:28:3c:52:82:fa:
a9:44:7e:bd:84:d8:8b:2b:0e:80:48:a1:59:d2:36:56:e8:54:
69:31:bd:a3:1e:89:8b:ea:63:68:82:17:d9:df:b0:88:05:28:
14:8e:20:ff:f3:97:72:60:10:47:cf:9b:23:3c:f7:22:9a:1d:
cc:16:1e:0d:b2:a4:08:ae:a4:9c:9e:e2:80:b7:4c:03:cb:ca:
a2:41:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:23 2026 by rpki-client