Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: NdY4gTiiEfqsxCyaLm2zjUKx8Tn7s0TGclfAea+TxVQ=
Subject key identifier: EB:D7:EE:B9:AF:01:C6:14:B8:A7:1B:9C:62:7E:2F:F2:0D:42:ED:33
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 019E1E34CC9351C10A8CDA7E3118638E94CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 22:00:36 +0000
Manifest this update: Tue 12 May 2026 22:00:36 +0000
Manifest next update: Wed 13 May 2026 22:00:36 +0000
Files and hashes: 1: SpWXQfnXhUu9qhkeG1TVG0H4SQU.roa (hash: gNWnU3IuDkhC9ei21eiBQWzWKaO3beh6JvvEKmw7ib0=)
2: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: ytcUk8MX/P56CkPUAwupNB3tHb0Cvr4nCWlzfSBEHDU=)
3: opR1RSlbkE3ELuhyBbafM8IbPaE.roa (hash: XOjjU1LJeZo/s26HxamkSPgFbekl7O6VlvxsLnn7lEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:cc:93:51:c1:0a:8c:da:7e:31:18:63:8e:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: May 12 22:00:36 2026 GMT
Not After : May 13 22:00:36 2026 GMT
Subject: CN=ebd7eeb9af01c614b8a71b9c627e2ff20d42ed33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:43:99:91:8c:2b:59:6b:bd:19:4b:19:19:
da:f2:81:bb:32:36:f7:b2:bc:c6:46:d4:50:72:6f:
9e:14:7b:3d:16:a6:93:f9:3b:c9:4f:e7:0d:6d:57:
af:63:43:78:5d:29:2a:60:51:9a:1d:34:ef:4a:d2:
1d:83:36:a3:0b:27:32:a8:e2:8e:ec:22:72:b9:b4:
80:8c:05:05:73:ed:f1:98:f7:b5:43:53:94:cd:ce:
e1:ed:87:8b:e4:4d:bf:b0:61:af:92:33:f7:6d:28:
81:1f:d7:a8:1b:c2:b9:eb:49:54:e0:01:bf:c1:75:
0c:19:b6:6c:05:34:bb:13:4d:4c:80:e2:50:90:24:
f6:25:fd:75:af:bd:bd:df:e6:d7:01:9f:03:49:d6:
fc:0b:be:88:63:5b:89:8d:77:c3:95:65:8e:ae:6b:
63:f3:36:03:1a:d4:27:ed:69:b5:0b:c0:62:a4:e8:
a5:54:a6:88:f4:99:28:c0:3e:c4:b1:69:c9:5c:1b:
df:1b:ae:ca:d4:c7:02:1d:fa:16:f5:f0:f2:aa:36:
9f:b2:9f:e4:a3:da:52:a3:8b:5f:ef:c3:49:6e:b5:
bc:2d:a4:0a:47:75:f7:ce:13:dc:e4:67:44:9f:50:
96:3f:d5:ff:5b:41:16:ff:7f:65:52:81:65:2c:92:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D7:EE:B9:AF:01:C6:14:B8:A7:1B:9C:62:7E:2F:F2:0D:42:ED:33
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:ec:cc:d3:b7:96:62:7f:58:1f:bd:34:de:86:f9:15:d9:
4f:69:e2:91:0c:19:5a:a5:d3:8e:e8:a8:6b:55:f5:f0:af:3b:
89:36:0a:63:5d:a8:ab:00:d4:4d:69:9e:e9:28:7d:5d:ce:fd:
eb:5b:bc:0e:88:21:98:82:4a:32:e5:3a:a3:af:5d:5a:97:a1:
40:23:6f:59:4b:c3:95:dd:c2:7a:65:fe:5d:1e:06:ad:28:72:
cc:c1:66:8d:0b:49:70:f8:60:c6:16:3e:a3:95:65:13:29:7a:
09:15:2b:89:ff:4f:e7:ef:b2:0e:ce:14:97:85:f3:dc:80:e3:
8e:7a:1c:ed:56:51:b8:6a:18:1a:04:6e:54:ce:ee:0b:17:dc:
ee:fd:07:e8:87:d0:e5:af:75:57:5a:89:0b:c1:71:32:15:17:
8c:36:0a:b3:78:34:9f:c5:9c:4f:d6:37:52:14:f2:18:53:09:
b0:60:ee:a9:80:b9:d3:7e:e8:87:3d:1d:6e:57:bf:43:6a:56:
9c:76:d6:0e:45:f6:9e:18:92:bb:6e:23:bd:f1:38:a0:92:54:
93:79:cc:75:b6:df:f5:a4:6c:ab:1f:5d:60:38:4c:b7:ef:68:
24:c9:68:99:21:55:52:fe:55:dd:17:1e:31:d5:91:4b:9e:a3:
26:81:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:14 2026 by rpki-client