Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: FaDhJQK16ggcOxSSG388+P3hhkuUirqLlliN0/asBw0=
Subject key identifier: 4D:87:CB:AB:87:5C:E7:D8:28:19:88:02:84:BF:8E:4B:BC:D3:9D:03
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 01A08C0D06F57C1B3C7D1614B571C79583B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 16:00:58 +0000
Manifest this update: Thu 10 Sep 2026 16:00:58 +0000
Manifest next update: Fri 11 Sep 2026 16:00:58 +0000
Files and hashes: 1: SpWXQfnXhUu9qhkeG1TVG0H4SQU.roa (hash: gNWnU3IuDkhC9ei21eiBQWzWKaO3beh6JvvEKmw7ib0=)
2: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: auVfbVrK1U7iL2orSAgTsK7G4PSdPD58Cx29XoSLmV8=)
3: opR1RSlbkE3ELuhyBbafM8IbPaE.roa (hash: XOjjU1LJeZo/s26HxamkSPgFbekl7O6VlvxsLnn7lEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:06:f5:7c:1b:3c:7d:16:14:b5:71:c7:95:83:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Sep 10 16:00:58 2026 GMT
Not After : Sep 11 16:00:58 2026 GMT
Subject: CN=4d87cbab875ce7d82819880284bf8e4bbcd39d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:0a:2e:91:7d:ff:0f:d0:10:8f:a4:2f:92:
80:74:f5:53:fd:d5:e3:69:4c:66:3f:69:ce:1f:26:
d8:6a:92:2a:c3:29:f8:11:1f:5a:ec:e3:c1:f8:2d:
92:22:0a:be:a2:07:91:b7:9f:f0:87:de:9a:58:82:
20:02:59:6f:92:66:53:88:43:b6:13:88:7e:cc:6e:
c4:d8:85:60:f6:db:17:19:36:e4:af:d2:99:81:04:
56:88:2e:ec:e0:c9:71:11:91:09:f2:8a:8b:34:13:
b6:e7:45:c2:33:4a:f3:87:bb:26:b4:0d:71:66:80:
7a:f6:22:be:18:21:16:bb:6c:24:11:e7:58:d2:aa:
70:9d:c9:69:a6:aa:16:36:f6:77:6d:b0:ee:31:af:
21:b3:8b:7a:c2:c3:34:af:dd:e2:62:5d:46:b6:6b:
85:0b:20:42:76:29:fe:d2:6e:d5:d2:ff:fd:ba:59:
53:18:2d:c8:d0:5d:0c:a6:2a:6a:c6:46:56:7f:8f:
51:0e:2b:28:c5:db:36:fe:f9:c9:5d:73:aa:76:15:
7a:52:5a:95:db:15:e3:da:74:34:ed:4f:e5:07:27:
b9:66:a0:65:4e:bf:61:50:66:98:ef:a6:82:38:d1:
10:74:ed:39:28:64:3f:ee:b1:a9:05:c1:4d:7a:96:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:CB:AB:87:5C:E7:D8:28:19:88:02:84:BF:8E:4B:BC:D3:9D:03
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:a3:29:ee:56:7c:8f:96:dc:c4:bf:7c:a3:a3:8c:35:b1:
d2:60:2e:14:81:52:98:04:03:94:a6:40:26:08:80:41:ec:6a:
2e:ad:0f:96:2d:90:f8:ca:45:32:f5:72:8b:a7:7f:8e:9b:1e:
a6:94:da:44:54:3c:86:c3:7e:5f:46:2e:54:82:02:0d:49:b6:
cb:63:62:fa:d2:44:58:44:6b:ea:f3:0a:e2:ff:fb:61:49:fc:
ad:fd:d4:54:d1:dd:39:37:f4:bb:8a:b2:5a:f1:b1:1f:55:87:
79:9a:b5:73:a5:d1:ca:b6:30:5b:63:32:cd:42:d1:72:2b:43:
4c:f5:56:24:54:1c:b2:b5:83:3a:8c:72:8b:ae:49:02:e3:34:
b4:f1:52:d8:8c:22:31:0e:4d:8b:46:0c:6d:0a:d5:ba:e0:0a:
7d:ed:8e:fd:48:c0:29:d7:93:58:4e:9a:ef:17:65:02:2e:55:
3f:24:23:c5:0d:1b:7d:ee:44:f9:13:4b:d7:35:7f:6d:5f:3d:
1c:93:28:69:dd:46:ab:cd:c3:77:80:4e:7f:62:2b:7c:48:96:
b2:86:8a:34:6e:5d:7c:5c:11:2a:3f:b6:f7:0e:70:33:ff:f5:
f0:e7:02:49:56:04:26:70:43:c3:f2:a6:31:1b:9f:dd:d0:c8:
09:5b:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:22 2026 by rpki-client