Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: bY4ZsTNzhXfbwZ7MFFjIJjTvIcP8Yt1mii36Cn+/xxo=
Subject key identifier: 0C:72:9C:C6:80:DA:53:1B:8D:F7:4D:66:D0:C3:32:C2:03:07:04:9F
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 019DCF0777AAB68DF38F15970EE289525659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 186F
Signing time: Mon 27 Apr 2026 13:01:06 +0000
Manifest this update: Mon 27 Apr 2026 13:01:06 +0000
Manifest next update: Tue 28 Apr 2026 13:01:06 +0000
Files and hashes: 1: SpWXQfnXhUu9qhkeG1TVG0H4SQU.roa (hash: gNWnU3IuDkhC9ei21eiBQWzWKaO3beh6JvvEKmw7ib0=)
2: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: vCxsuu5P/ENiT6Zl98Jd+lBjn0fRDr2hZPaU1Qta3z4=)
3: opR1RSlbkE3ELuhyBbafM8IbPaE.roa (hash: XOjjU1LJeZo/s26HxamkSPgFbekl7O6VlvxsLnn7lEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:77:aa:b6:8d:f3:8f:15:97:0e:e2:89:52:56:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Apr 27 13:01:06 2026 GMT
Not After : Apr 28 13:01:06 2026 GMT
Subject: CN=0c729cc680da531b8df74d66d0c332c20307049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:06:00:22:1a:82:43:8d:73:11:b5:fa:f9:
55:16:d1:a2:86:a2:2b:58:4b:42:74:67:b4:97:c6:
3e:72:08:2c:16:3e:d5:cc:f8:8f:7d:75:56:15:3c:
1c:af:6d:15:fe:33:e8:0d:5c:d5:ee:9d:1f:17:84:
fa:bb:db:b6:f9:e2:64:73:94:04:83:7e:83:96:50:
61:31:47:af:03:fe:30:8a:3a:a9:f9:79:82:0b:38:
e3:fc:88:24:93:23:83:82:5b:42:6a:36:39:86:e5:
1b:6f:7d:2e:c6:8b:1d:6c:fb:01:24:db:b2:b8:8c:
33:bb:1b:73:37:2b:16:3d:3f:c8:1f:88:49:87:e0:
fe:0e:52:67:13:05:b9:56:b8:0b:96:fc:bd:ef:2b:
09:8a:f1:51:ee:e2:8d:2f:0f:21:38:5f:7c:62:e7:
05:8e:fa:e6:56:8b:6d:37:f5:59:a4:8e:59:f6:20:
93:bd:e9:8f:ab:74:73:7b:60:27:94:46:5b:8e:c8:
b7:c6:b0:9a:e3:b8:43:6a:2f:cb:a9:97:c6:ed:ee:
e2:25:98:ca:54:c7:23:d5:da:ae:98:ad:24:df:55:
0e:c5:c5:b6:d6:a6:e2:dd:41:1c:84:f2:ae:a6:45:
9a:e7:b0:7a:9e:ac:e7:11:20:57:79:7d:3a:1b:34:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:9C:C6:80:DA:53:1B:8D:F7:4D:66:D0:C3:32:C2:03:07:04:9F
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8c:cd:be:f4:61:ff:71:f1:76:9e:ef:20:93:0e:fa:27:69:
01:49:c1:e1:22:2a:1f:61:3a:d6:59:c8:80:e2:d2:6f:e4:26:
13:f1:ce:7d:5f:8b:71:43:09:4e:ff:86:6e:4f:01:fd:84:80:
b0:44:38:03:be:67:3c:0c:37:9f:e8:1a:ce:2b:00:b9:93:b3:
61:90:8e:0b:d3:17:66:df:e9:74:b0:7d:4b:6c:9a:49:f5:71:
12:59:d6:a5:01:23:45:38:89:11:90:a6:9f:9a:e6:a1:12:16:
50:83:2b:eb:36:19:ef:34:1a:2c:78:f9:33:28:39:a5:c7:97:
f6:10:9f:98:eb:19:ac:58:d5:a6:aa:6a:f1:0a:f5:2a:a9:00:
58:fa:3e:49:fa:d5:9d:cf:a1:b9:5b:22:fb:23:09:7d:eb:f0:
6c:42:b8:aa:ff:16:c8:db:ab:3f:ff:dd:bd:39:f9:1c:8d:2c:
74:34:0e:cc:9f:00:3f:26:9e:d6:d9:ce:a3:20:9b:d3:7f:f3:
85:d1:81:d3:fb:47:5d:dc:a2:80:2c:97:23:0e:ce:fb:3e:54:
7d:fc:0d:b2:c7:a8:e3:91:34:d4:f1:ee:a0:72:06:ce:64:19:
0d:2d:56:1f:79:1b:7b:23:b8:d3:f7:2e:35:ce:81:21:53:d4:
2e:4d:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:28:43 2026 by rpki-client