Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: TQJaQmwgR9OY2WPlSKp9+Wy4B/fhZWK2iFNjAiZtl+o=
Subject key identifier: 4B:F8:33:11:0A:57:2F:10:59:68:ED:06:CC:24:B0:BA:6C:A4:8F:02
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 01A0DD2A58D92AD36E1D03EB66D864339289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 10:02:15 +0000
Manifest this update: Sat 26 Sep 2026 10:02:15 +0000
Manifest next update: Sun 27 Sep 2026 10:02:15 +0000
Files and hashes: 1: SpWXQfnXhUu9qhkeG1TVG0H4SQU.roa (hash: gNWnU3IuDkhC9ei21eiBQWzWKaO3beh6JvvEKmw7ib0=)
2: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: wLkPqPLMvfWYq9OpzgKYG4xhsJg85v3DS088VOe7Efc=)
3: opR1RSlbkE3ELuhyBbafM8IbPaE.roa (hash: XOjjU1LJeZo/s26HxamkSPgFbekl7O6VlvxsLnn7lEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:58:d9:2a:d3:6e:1d:03:eb:66:d8:64:33:92:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Sep 26 10:02:15 2026 GMT
Not After : Sep 27 10:02:15 2026 GMT
Subject: CN=4bf833110a572f105968ed06cc24b0ba6ca48f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:7b:ee:22:f9:c5:a4:42:bb:6e:2a:df:3c:
41:63:3c:7b:fd:7d:4c:5e:d1:a7:fa:29:23:92:e9:
9f:b7:85:1a:f1:86:31:ea:7b:69:55:3b:a9:8d:b7:
9d:72:3a:ee:08:fb:99:b8:43:a8:6f:72:96:ed:35:
ca:e0:78:6d:7c:1b:ad:81:a7:d6:25:47:80:2b:95:
37:28:b7:f3:99:24:c7:bb:a1:bd:e9:bc:a7:60:2e:
84:96:26:a0:7f:11:17:03:01:58:d9:7b:1e:30:1d:
ca:24:5d:7b:72:7f:e1:74:91:af:9e:bf:1f:f1:36:
f9:55:87:34:4b:39:79:e9:dd:00:f6:db:56:a5:74:
d7:73:a1:e0:d0:8a:55:5b:b9:cb:fe:2d:b7:93:cd:
40:9a:9d:0c:fc:a6:13:60:26:70:2e:42:28:9b:b0:
5d:5f:cd:29:03:18:d7:1a:66:08:dc:55:21:19:2e:
de:05:d2:b9:16:53:94:04:40:f1:97:b9:6f:7b:aa:
e9:0b:15:eb:21:5d:61:c9:a6:11:43:9c:d5:77:ab:
93:51:15:87:92:36:7d:56:6a:72:7a:54:16:18:07:
80:0a:c9:1b:58:99:38:a1:ca:cc:a5:41:e2:d5:bf:
29:71:67:b7:82:7e:5d:66:53:b9:64:e7:d9:ba:a1:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:33:11:0A:57:2F:10:59:68:ED:06:CC:24:B0:BA:6C:A4:8F:02
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:02:37:c5:99:c6:1b:0c:38:a8:5a:b4:aa:13:d6:7c:43:
16:16:19:56:c6:43:50:4e:d1:94:6e:d5:be:1b:51:92:02:36:
74:ad:16:70:4c:9a:0f:bf:80:cf:d2:31:b4:54:87:67:ad:b5:
f3:1b:28:af:8a:43:40:16:7c:ed:44:4e:f4:70:7e:e2:96:f0:
20:3a:b3:07:e2:bf:fa:5d:9f:8a:a2:30:8a:ce:d8:2e:2f:0e:
7c:d7:c1:b2:e2:bf:4b:49:46:1b:29:17:2f:0a:91:7d:fd:99:
4f:c3:83:d0:14:a7:c7:2e:93:b0:d1:03:96:5e:66:f7:3e:73:
eb:67:03:9c:66:c2:58:6e:c2:62:10:2c:93:c5:6a:9f:b9:f6:
d4:0f:24:a6:d5:f2:0e:06:28:0b:b2:52:29:57:0f:6f:77:53:
b2:e7:4e:99:7e:a5:29:f4:36:e0:4f:77:35:cf:f4:61:86:32:
c3:8a:29:86:d0:44:75:a6:9f:31:24:d6:cd:75:ad:a2:1f:29:
73:28:37:e3:e6:ab:f9:f7:5f:ed:e6:c8:30:7b:7e:d0:01:08:
40:19:67:e3:f1:9d:c3:86:a4:f2:9e:48:ad:42:f0:e6:dc:64:
d2:6b:97:8c:2c:f7:62:9a:72:b7:f5:75:77:68:15:d6:cb:e8:
39:e2:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:45:48 2026 by rpki-client