Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: VRdXsftgHCpLoj75R06RFZvVCl9G6gaRkUBbgIRYf/g=
Subject key identifier: D5:58:FB:0B:20:B2:13:1B:F4:96:E9:E4:19:29:50:C0:2A:A5:B6:31
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019E1F113322ECED6A85281A19D51968F0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 02:01:21 +0000
Manifest this update: Wed 13 May 2026 02:01:21 +0000
Manifest next update: Thu 14 May 2026 02:01:21 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: nI4zyORKqBmq7iqGWQ2Vnhfa8u14F4UdS+iveoiUEzc=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:33:22:ec:ed:6a:85:28:1a:19:d5:19:68:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: May 13 02:01:21 2026 GMT
Not After : May 14 02:01:21 2026 GMT
Subject: CN=d558fb0b20b2131bf496e9e4192950c02aa5b631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:a4:ab:59:51:43:84:5f:14:22:11:62:7c:
11:c2:5f:5a:b4:7e:6d:5a:57:15:10:96:3a:09:1a:
cb:10:6e:b5:a9:8a:36:8c:bb:34:55:d7:6b:5b:1b:
6f:b3:d5:5a:87:00:3e:f3:b1:8e:80:b4:bf:24:5c:
47:26:4a:f7:0b:bb:79:23:b9:71:98:6e:9b:35:2d:
1b:3f:85:1b:02:20:45:60:cf:5f:00:90:09:e1:df:
80:4d:8a:47:02:64:83:18:14:e8:af:81:1d:df:8a:
2a:92:ce:e0:6f:e9:93:b2:17:03:15:8c:2f:15:fe:
8b:7f:fa:ed:58:47:69:2a:b6:ef:26:18:03:6b:a5:
83:3d:b1:ac:ec:57:47:51:85:75:a8:68:e6:66:62:
6f:57:13:41:ce:29:bf:d5:c3:4c:2e:5b:41:3e:74:
e4:1d:bd:36:b3:89:1c:7f:df:df:21:39:43:a2:26:
f5:a2:61:00:d4:46:38:ba:73:1e:45:c1:33:46:cc:
3f:e8:35:7a:e6:dc:21:6f:22:09:6c:95:16:75:ec:
96:b5:6f:0e:24:04:2e:96:45:52:86:34:49:89:29:
77:4b:de:8b:fd:f5:c6:ef:ac:ec:4f:e0:4a:1f:0d:
ce:99:bc:11:e5:25:f5:03:48:53:6b:05:ae:8b:c3:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:FB:0B:20:B2:13:1B:F4:96:E9:E4:19:29:50:C0:2A:A5:B6:31
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b9:ee:6b:34:20:98:d9:3d:95:98:37:40:ba:3f:f7:5c:52:
1c:2a:79:de:aa:22:29:07:c5:16:14:f0:fc:aa:db:d7:21:e7:
6c:e6:6e:51:54:3c:52:64:bf:3b:5e:6b:2b:46:f4:bf:4f:e0:
c1:e1:48:7d:8d:08:32:5a:df:eb:77:4c:ef:b1:13:5d:61:43:
66:65:76:c0:4b:d1:a1:4a:76:6a:67:34:16:ba:95:b4:16:e6:
8c:ab:e0:2f:f2:44:79:ed:9a:cd:8e:bc:69:49:18:9a:e2:aa:
39:00:bb:43:6d:1e:8a:72:fd:d1:05:f6:2e:79:38:4a:e3:67:
b2:a3:7d:1a:ca:7e:7c:a9:20:b3:63:c4:ec:b6:0c:62:3c:5c:
21:3f:f6:ce:5b:3f:18:76:20:fa:2c:3e:37:85:24:94:80:aa:
22:0c:f7:24:3a:12:5c:f3:ab:c6:cd:c5:d3:45:b2:e3:02:f5:
fd:c5:cc:ac:50:45:b3:79:8e:21:fb:81:70:6a:d7:6b:96:72:
6a:e1:9a:d9:d1:29:e2:49:d0:9e:4f:a5:e2:e2:a2:38:bc:f1:
f9:2c:eb:21:19:3c:c6:b6:63:0e:a5:ea:2d:de:74:9a:6c:0b:
2c:f3:61:32:1b:8a:01:36:be:1b:e0:60:13:c0:16:68:02:53:
a6:e2:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:30 2026 by rpki-client