Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: WXUg0pkoV3hpVkpOipFymNdgPJ3Px57z/WdCOwXFocE=
Subject key identifier: BA:50:BE:85:9B:ED:1F:72:FB:1D:D4:4B:BD:7F:8D:05:A3:83:EA:AC
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 019D28F2005F7726F8EA75BDB997FE016CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 07:00:41 +0000
Manifest this update: Thu 26 Mar 2026 07:00:41 +0000
Manifest next update: Fri 27 Mar 2026 07:00:41 +0000
Files and hashes: 1: SpWXQfnXhUu9qhkeG1TVG0H4SQU.roa (hash: gNWnU3IuDkhC9ei21eiBQWzWKaO3beh6JvvEKmw7ib0=)
2: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: 6xls8AamAaZ7xsEJXwcq1XKr6cZg3wpkdQcxaLSt4ew=)
3: opR1RSlbkE3ELuhyBbafM8IbPaE.roa (hash: XOjjU1LJeZo/s26HxamkSPgFbekl7O6VlvxsLnn7lEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:00:5f:77:26:f8:ea:75:bd:b9:97:fe:01:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Mar 26 07:00:41 2026 GMT
Not After : Mar 27 07:00:41 2026 GMT
Subject: CN=ba50be859bed1f72fb1dd44bbd7f8d05a383eaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:cd:f1:fb:fb:67:a5:2d:50:0c:f8:f3:72:
99:91:bd:dc:fd:6b:50:44:8d:c5:0e:da:3c:26:e8:
8f:ee:3f:41:d5:5a:45:de:f0:65:01:35:9d:31:ca:
26:4a:7a:78:0b:0f:96:08:9d:96:31:96:99:7e:83:
db:9f:e4:f5:9d:8e:32:73:25:ed:86:51:06:48:90:
f6:d0:9c:51:a1:61:25:77:b6:ad:cb:44:71:9e:1c:
b6:f4:d3:49:11:77:a5:77:a0:0f:b5:39:a4:25:ed:
23:a8:38:b2:54:f8:dc:b8:39:5b:78:83:9a:e9:43:
06:83:45:e8:2c:fd:c9:f3:1f:49:c9:00:0b:aa:e3:
dc:49:95:ad:1c:77:0e:29:4d:21:b3:5f:ae:25:5b:
fb:c5:f0:bb:99:b3:50:4a:be:db:f2:6f:df:ba:8c:
9c:2c:8a:d6:14:c4:ca:d5:43:54:02:72:e1:28:4d:
48:98:4d:9d:1f:1a:9a:0c:b3:c5:28:cc:fa:c0:2f:
d4:2c:25:79:74:96:35:f6:c2:c6:d1:aa:ee:bd:42:
26:88:8e:c7:5e:56:b8:d1:65:c1:cf:68:ad:19:94:
d8:30:33:ee:79:52:e4:ba:17:24:21:72:22:c8:cc:
7e:5a:8b:b2:96:53:cf:a1:b0:df:67:a0:8d:7f:59:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:BE:85:9B:ED:1F:72:FB:1D:D4:4B:BD:7F:8D:05:A3:83:EA:AC
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0e:ff:f5:d0:c8:60:d9:d2:55:5f:64:8c:3b:2e:88:7c:73:
5f:63:3b:3b:3c:e5:4c:0e:0e:d6:06:fb:cd:8b:f5:7e:40:c5:
9b:2e:ec:0b:8f:d4:b3:b9:54:5b:1f:f1:b4:fd:a0:94:27:57:
f9:e7:e7:35:ff:1a:26:bb:08:8d:55:41:64:7b:b2:bf:e3:74:
2d:d4:50:72:c0:8d:6d:2c:93:39:97:04:37:c7:23:7c:63:d5:
09:29:3b:45:c4:3d:33:aa:95:f6:f2:9d:6a:f2:fd:7c:49:0e:
79:09:65:7d:2c:7e:60:af:9b:96:0a:e9:e7:85:a9:90:73:f2:
de:3d:57:41:6c:fc:d8:48:de:52:6e:af:69:cf:39:cf:05:a8:
75:61:95:e4:e2:d3:46:b0:26:b1:d3:b1:7e:8f:cc:d7:22:11:
7e:75:50:0f:15:3c:30:05:78:f0:8c:b5:77:2d:49:8a:07:06:
9d:82:f1:e5:75:f6:57:ae:ae:d8:47:66:74:ca:b6:d6:ab:05:
1b:df:44:aa:9c:ef:64:fb:96:b7:f8:7c:75:aa:25:12:65:c6:
c5:b4:3a:9e:b9:3e:ba:83:f5:f3:de:8c:46:c3:8c:a7:44:49:
4b:03:66:5c:63:d7:6f:61:f5:bb:8c:62:be:a8:46:5f:b5:e5:
e9:05:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:34 2026 by rpki-client