Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: a2zv6HOCsKHRCt77oJICdR4K5di2YT5g4MX9EBC2SKo=
Subject key identifier: 97:9E:54:18:49:A2:8F:DD:C6:F0:63:65:BA:61:1E:10:7C:3F:37:9A
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019F71069DADAE2D6123B1A7054B7B5A5B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 19B6
Signing time: Fri 17 Jul 2026 17:01:26 +0000
Manifest this update: Fri 17 Jul 2026 17:01:26 +0000
Manifest next update: Sat 18 Jul 2026 17:01:26 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: vVlYn5MUCsXz07lEu/TgbLe+ZkumqgT7RMHneSQQXzg=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:06:9d:ad:ae:2d:61:23:b1:a7:05:4b:7b:5a:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jul 17 17:01:26 2026 GMT
Not After : Jul 18 17:01:26 2026 GMT
Subject: CN=979e541849a28fddc6f06365ba611e107c3f379a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:b0:34:a8:c7:01:e2:c2:64:56:91:11:4c:
57:c7:63:58:7d:22:80:b6:ce:c3:cb:d6:c6:d9:28:
5a:f1:82:d0:0a:15:0e:89:e0:39:76:ba:69:85:39:
d9:4b:81:bf:2a:be:eb:b7:c8:31:9a:32:b6:1b:1f:
64:30:e7:90:ef:63:ba:15:ae:34:2a:d5:a9:a3:8f:
c5:61:7c:56:3b:c5:1c:9d:79:d0:cb:eb:34:40:ea:
06:c2:5e:bb:81:bb:45:72:2d:c1:37:95:ed:ed:2a:
8c:d0:86:6f:b5:17:98:f2:91:12:d9:13:89:d3:ea:
b2:3e:a9:e3:a6:d9:a4:9a:65:75:e9:2d:4f:9c:d4:
52:7f:49:43:15:f6:b4:75:2c:d8:c9:98:fa:82:fc:
77:fd:9a:f6:84:13:22:5d:bc:d9:38:7a:f8:74:fd:
84:43:07:01:22:91:eb:d6:f7:81:fc:58:86:7c:1d:
c6:4b:9b:9f:09:02:73:f3:24:ab:ec:3b:14:7c:00:
8d:e0:9a:60:01:34:e8:47:e4:9e:0d:c8:06:6b:0f:
e9:1f:94:44:f1:b3:69:57:58:f6:88:a4:3e:9d:ee:
de:df:dd:27:f2:b2:d1:56:b0:d9:1b:fa:f3:46:dc:
99:71:3d:c2:45:c6:5e:96:da:e9:17:57:64:53:bd:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:54:18:49:A2:8F:DD:C6:F0:63:65:BA:61:1E:10:7C:3F:37:9A
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:45:9e:45:53:56:f0:49:ac:1b:9f:51:af:a7:98:ae:04:
97:4d:9a:2e:b3:94:a4:40:95:ca:3a:4d:54:1f:13:e6:36:97:
df:c2:c2:00:0e:b2:9c:74:ef:1d:03:cc:f2:ce:5a:ae:16:97:
06:9a:2e:7a:b3:95:6b:57:6d:94:49:99:2a:d5:1d:16:27:cd:
e1:38:04:0a:8c:4c:4e:cf:85:60:79:20:01:ca:73:c4:b0:e8:
20:f0:c6:d3:37:e7:13:37:3b:d2:71:63:90:a1:75:5a:10:27:
15:a7:ec:cd:e6:83:5e:57:c3:54:be:d4:69:73:da:3a:15:3a:
cb:ac:dc:11:14:75:52:a4:2d:2e:4d:6b:28:97:ab:ae:3a:59:
94:11:21:23:dd:91:fd:ae:4a:10:47:42:42:15:1e:5c:06:77:
77:f0:8f:8a:a4:33:26:ea:a6:93:5b:23:98:29:32:76:f0:87:
2c:22:13:81:1f:5a:f1:fb:5d:53:69:1b:7b:87:33:8a:e7:e3:
2d:d7:a7:e0:74:79:58:da:3e:d3:00:ce:cb:0d:34:c1:4d:81:
53:14:0c:00:9a:86:0d:81:34:57:da:3d:37:59:44:9b:71:03:
d6:75:27:d2:7b:c1:bd:c4:68:9b:5e:97:99:51:0e:3a:60:fc:
c8:e6:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:28:30 2026 by rpki-client