Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: EATqAtxOEqFO11fNX/A0q2kdRxXl1iBPIipi0hJpJxw=
Subject key identifier: 06:1C:20:68:70:1F:51:E0:D4:1C:73:E7:09:63:15:1F:01:C3:71:73
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 01A0024A8CF2A2CBA421E8027F76D520CB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 18E3
Signing time: Fri 14 Aug 2026 22:00:35 +0000
Manifest this update: Fri 14 Aug 2026 22:00:35 +0000
Manifest next update: Sat 15 Aug 2026 22:00:35 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: wnuE5ddQLEhaf36uvQK1H3Jes8aNvLj5FT7iKCba7ic=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:8c:f2:a2:cb:a4:21:e8:02:7f:76:d5:20:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Aug 14 22:00:35 2026 GMT
Not After : Aug 15 22:00:35 2026 GMT
Subject: CN=061c2068701f51e0d41c73e70963151f01c37173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:e3:c7:e2:6c:b0:3c:e0:67:bf:68:f3:34:
63:09:8b:ce:20:8f:fc:d9:29:53:ad:8b:b2:23:ba:
6b:43:13:95:d5:fd:9b:d2:41:9e:5e:8a:37:a6:77:
36:31:f4:3b:68:00:d3:7d:62:95:1a:82:af:bb:5f:
0a:dd:b5:e4:35:1a:05:ee:b2:96:9b:45:94:f6:ce:
4f:b6:28:88:bc:3e:af:d5:db:c2:df:ff:59:83:ff:
ed:cb:56:8a:90:ef:3f:01:b1:47:10:c2:49:13:5a:
9a:da:32:98:90:92:77:24:18:84:f9:92:3d:1b:81:
ca:78:a9:93:75:94:8c:6a:80:e7:51:4a:87:da:ca:
9e:97:5d:a7:4f:5f:0a:91:ca:b8:09:dc:90:f3:56:
88:9a:20:6e:d8:80:ed:2a:da:bd:f7:72:6d:a0:85:
ef:e8:6b:67:f2:55:a1:39:98:07:92:00:bd:bc:a4:
1c:19:3c:de:36:03:c2:a0:e9:f2:5c:7a:da:3e:3b:
34:d7:4d:4a:23:5f:9c:e6:0e:dd:3a:2e:96:49:53:
68:f3:66:64:44:ba:cb:48:2f:09:12:e9:3b:b9:a1:
52:37:0f:f5:fe:67:30:e0:ed:27:8e:ae:97:6d:18:
00:4b:3b:74:c9:10:4c:da:84:3f:77:06:76:8c:52:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:20:68:70:1F:51:E0:D4:1C:73:E7:09:63:15:1F:01:C3:71:73
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0b:a1:6a:91:88:f8:dc:bc:b6:0d:27:91:8b:40:1f:6d:3d:
b1:c0:8b:2b:9c:a4:38:5f:d6:38:d8:cb:1c:e0:4f:db:e9:2b:
c6:55:53:f1:45:98:09:1e:76:ad:e1:7b:5f:fe:97:b6:5b:c7:
e5:75:57:ef:c7:fb:44:ca:9b:a0:81:d5:cf:61:f4:f5:4f:f2:
09:c0:f8:e1:a6:85:52:df:b7:e4:af:6c:79:b6:ac:bb:4b:75:
ca:82:ee:01:db:c5:20:14:e3:3d:4c:e5:97:03:eb:40:33:59:
57:d5:8f:0c:c3:02:25:96:01:6a:11:d9:b3:dd:4c:35:3e:62:
6f:47:37:f8:99:27:bd:70:69:34:7f:6b:4e:93:0b:e8:58:63:
b6:3b:cd:44:fe:9a:f8:f6:cf:e5:54:83:18:f4:0e:c0:a0:e8:
48:b7:37:7d:41:0a:48:6c:8e:f2:5a:2b:ba:e9:47:64:e0:20:
ed:7e:7e:b7:19:d7:4e:0a:81:11:78:e8:d7:62:a8:4f:8d:73:
6f:0a:c3:a7:a8:d6:6d:b0:60:67:0a:81:59:47:a9:66:27:32:
75:af:37:ae:40:ae:b1:90:17:98:ea:70:72:71:ae:8d:48:37:
17:ed:ec:fe:e9:1c:5c:9a:19:5a:0d:e6:30:e5:a5:b2:12:4a:
99:43:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:29 2026 by rpki-client