Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: BB8psi0KC+cV1Cpaoa0hQY8J2HvN2heHq8I08068pz4=
Subject key identifier: 6B:A9:1A:29:23:5F:06:8E:9B:65:88:8A:B1:50:29:F4:96:D7:B9:46
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 019CE55A5FC1A88F68DCFBE690527F1F3721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 04:00:30 +0000
Manifest this update: Fri 13 Mar 2026 04:00:30 +0000
Manifest next update: Sat 14 Mar 2026 04:00:30 +0000
Files and hashes: 1: SpWXQfnXhUu9qhkeG1TVG0H4SQU.roa (hash: gNWnU3IuDkhC9ei21eiBQWzWKaO3beh6JvvEKmw7ib0=)
2: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: 2clddfKg7Lm1vgyGqJXUoRhfz0DuGIszMjpOyKKs0O0=)
3: opR1RSlbkE3ELuhyBbafM8IbPaE.roa (hash: XOjjU1LJeZo/s26HxamkSPgFbekl7O6VlvxsLnn7lEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:5f:c1:a8:8f:68:dc:fb:e6:90:52:7f:1f:37:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Mar 13 04:00:30 2026 GMT
Not After : Mar 14 04:00:30 2026 GMT
Subject: CN=6ba91a29235f068e9b65888ab15029f496d7b946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:e6:54:68:d4:b6:46:2b:29:72:86:8d:ce:
58:40:c6:80:45:42:33:49:3c:1e:22:94:78:1f:b0:
ca:96:05:14:c4:61:7d:7b:4e:89:12:ed:5e:07:ba:
5d:c6:53:13:83:42:c4:9d:06:c2:16:4b:fa:ad:1c:
20:47:58:ae:ae:96:f7:8e:72:fe:c2:48:58:f0:10:
bf:b0:85:57:b6:5c:51:1f:cb:6e:6f:41:5e:2c:86:
2c:7c:12:23:4d:f0:37:4d:ac:87:55:c2:52:d1:fc:
39:2a:b0:53:51:90:9e:ba:ba:9e:68:dd:65:4f:2b:
6e:75:4a:5d:3e:cb:72:0d:58:aa:59:50:e5:7b:77:
c0:c9:92:11:52:b1:72:96:a2:ef:db:6d:b6:b5:56:
e4:28:68:42:a5:9c:15:0c:7f:55:99:a4:a8:06:38:
19:9c:16:f2:3e:49:fc:71:2c:70:48:86:d6:0f:83:
1b:38:5e:7d:b8:24:98:87:44:3d:ee:b8:07:90:bb:
31:b1:9e:e8:19:d7:d9:e3:c9:4d:14:31:2e:7c:e5:
ea:72:b5:3b:4d:57:66:95:5f:28:e4:44:82:26:ee:
0f:fd:95:4c:94:c7:bb:e4:25:dc:18:2a:43:a6:d0:
ae:82:e7:2b:f2:8e:bf:77:d9:97:7b:a1:e9:3e:ac:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:1A:29:23:5F:06:8E:9B:65:88:8A:B1:50:29:F4:96:D7:B9:46
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:16:0f:04:56:5a:0b:74:a1:b3:0a:c7:a3:0d:67:b5:ad:5a:
e7:5a:ee:bc:37:05:1e:ea:5b:8d:ed:0e:79:b7:26:62:8b:3b:
9e:fc:d3:27:ff:bc:95:41:2b:1f:7e:4f:83:01:7d:ab:9b:52:
0c:0f:94:95:3e:b3:59:bc:cc:76:28:9f:a6:04:5a:ea:09:10:
1e:c4:1b:9e:23:01:09:05:36:f6:a4:f8:c8:a6:bd:40:02:ef:
21:34:55:df:f9:23:6a:05:c8:e0:f4:6e:46:df:4b:9c:ba:19:
6e:50:af:35:5a:cf:51:24:1d:de:33:c5:1c:0d:ea:2e:69:20:
10:d3:47:f2:35:d1:7f:c0:65:d2:69:0c:8e:d2:e9:79:26:bb:
d1:35:87:21:c9:f1:44:d0:18:e7:51:7f:1d:85:da:b0:25:92:
a4:68:b6:23:00:68:72:04:32:3f:62:cd:2a:f0:4d:22:78:48:
c3:99:1f:5e:0c:5d:dc:88:fb:4f:ae:da:a5:70:7d:48:db:6d:
40:48:48:26:13:43:44:91:35:eb:bc:ce:2e:20:2c:8c:cc:9f:
f0:ad:f0:0d:1f:cb:c7:91:9b:50:cb:82:f0:a6:1b:3a:2c:f5:
bd:ea:98:65:d7:5b:1c:86:0c:89:4a:e8:b4:b1:30:27:4c:21:
9f:9a:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:26 2026 by rpki-client