Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: Pl+uuJvcKp9S2v+uk6S0Sfg19A4mm9AqmVJnfIwzrKQ=
Subject key identifier: AC:2C:A5:AA:14:9F:D8:82:90:28:CE:DE:5A:CE:5B:49:CE:6E:33:C3
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 01A14A981701D2B1B34B3114ACBBBF14E22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 198D
Signing time: Sat 17 Oct 2026 16:00:43 +0000
Manifest this update: Sat 17 Oct 2026 16:00:43 +0000
Manifest next update: Sun 18 Oct 2026 16:00:43 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: 7VUs6YZqT6dhHQY+rOeVFiePhG0+qqK/84zgLukpSpw=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:98:17:01:d2:b1:b3:4b:31:14:ac:bb:bf:14:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Oct 17 16:00:43 2026 GMT
Not After : Oct 18 16:00:43 2026 GMT
Subject: CN=ac2ca5aa149fd8829028cede5ace5b49ce6e33c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:6f:7a:13:4d:ce:b0:45:57:88:2a:30:bd:
a2:6a:15:80:db:02:ae:be:8b:1b:ec:3b:4d:97:cc:
7f:b1:57:7e:bc:f0:57:69:a4:f2:46:c0:87:2b:6f:
64:5d:98:e1:43:d1:68:33:17:e6:ee:d4:65:c0:70:
11:b5:68:92:7f:4e:96:a0:41:72:1b:85:1a:bd:a8:
ff:74:e0:91:ac:f3:7a:85:8b:f2:be:83:41:2c:14:
1d:2f:4a:44:be:55:cf:2f:b4:04:a8:33:7d:e5:ab:
01:6c:39:db:76:ae:34:af:7f:55:17:98:96:10:f7:
c4:cb:a2:83:74:14:9f:4b:c9:b9:95:c0:b0:ac:cb:
c4:cd:b1:ef:19:90:5b:e9:ac:e5:d3:af:cc:ab:a4:
0d:49:2d:ab:b7:31:48:3c:f6:d7:ca:ee:6b:a7:90:
8c:41:e3:cc:d9:19:c0:75:19:11:06:8e:aa:a1:36:
a5:ae:68:dc:43:38:d6:b0:9a:5c:32:01:1b:1b:ef:
89:fa:bf:36:db:34:5a:58:01:61:66:71:4a:63:fe:
62:c6:14:f2:e3:db:99:ef:79:5f:ff:4a:78:c7:03:
97:a1:7d:e6:a8:1e:11:cb:43:49:d3:1c:0b:12:4f:
eb:6e:6f:9f:4f:70:0f:a0:c0:2c:1b:e7:b7:8b:c6:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:A5:AA:14:9F:D8:82:90:28:CE:DE:5A:CE:5B:49:CE:6E:33:C3
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:64:76:fb:72:d7:b8:1b:0b:d7:55:0f:63:d8:13:18:44:d5:
c2:0a:cf:b0:59:96:83:55:c4:60:48:f5:d0:c0:56:2d:26:cf:
57:f1:89:d5:8f:74:39:30:31:b7:40:7f:31:da:73:bd:2f:78:
e2:a0:c7:51:7c:c4:fb:94:bb:f3:e0:75:41:8f:4f:82:c6:2e:
ce:b0:21:26:ab:ad:48:26:e5:96:a0:cd:5f:f0:33:56:09:7f:
0f:de:49:6d:95:cd:58:1d:f1:96:e5:23:0d:49:b1:50:29:47:
83:d1:84:6f:40:3a:69:10:69:99:a6:e7:24:49:25:09:bd:92:
41:07:3d:75:31:dc:72:67:b3:ff:46:18:8c:c8:6c:8c:e0:d0:
1e:0f:e7:61:94:e3:6c:87:c5:2d:fc:78:3f:eb:b6:10:f1:9b:
84:65:3f:a4:9d:f8:53:dd:83:25:ca:f2:36:23:c0:7d:b2:1a:
cd:1c:29:6a:ea:1b:93:2c:b5:81:b9:18:0a:e5:a7:ee:8c:03:
68:f2:48:b2:45:07:61:8d:66:20:e7:31:88:30:11:31:13:c4:
4c:94:a4:e5:26:24:5f:e8:cd:c3:73:a6:29:17:ca:30:2d:a7:
31:a5:30:89:f9:34:c8:75:bd:6e:7c:42:ae:36:29:cc:85:ab:
82:73:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:11:24 2026 by rpki-client