Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier: 63FEyooy6s1wWt2d4Dmp0xZOK6I8dvErlFJEsKUE0L0=
Subject key identifier: 28:8D:79:99:06:98:71:CF:FC:24:36:75:91:1F:8A:5A:40:A1:18:F3
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 019E1EA34487F90A7CFCFC458126FD1A2A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 00:01:16 +0000
Manifest this update: Wed 13 May 2026 00:01:16 +0000
Manifest next update: Thu 14 May 2026 00:01:16 +0000
Files and hashes: 1: 9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (hash: GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=)
2: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: 5CTvnozt5XU3gbimrgPMLttPfsQHqOwodCSt03PwfNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:44:87:f9:0a:7c:fc:fc:45:81:26:fd:1a:2a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: May 13 00:01:16 2026 GMT
Not After : May 14 00:01:16 2026 GMT
Subject: CN=288d7999069871cffc243675911f8a5a40a118f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:50:10:11:13:ec:d4:2f:f2:0e:77:2f:df:
61:2b:f9:2c:11:3e:68:08:de:95:cb:b2:6d:4c:9b:
4d:5b:db:d3:fa:ed:80:2a:a5:bf:14:56:8a:7b:6e:
a3:34:4a:07:0c:af:f2:90:b9:19:bd:1a:57:3f:68:
f5:53:85:b6:68:b2:82:8c:85:31:a9:9d:29:15:a4:
4a:f3:42:1c:50:2e:4d:14:69:63:b8:01:05:4e:af:
e4:7b:fd:00:56:6d:4f:56:e3:cd:42:f1:49:e0:7a:
8b:28:72:7c:c3:88:03:f8:f4:f9:39:3e:87:cd:50:
f2:2f:62:14:ef:3b:78:59:8d:9f:16:23:23:3c:9d:
cd:16:1c:29:6b:db:bb:fa:7a:08:25:f9:f8:b1:89:
c8:9b:79:20:b7:e2:7c:ae:d0:e9:31:67:75:bd:6e:
7c:96:f6:df:e5:e8:1e:2f:06:76:a7:67:49:38:a7:
6e:04:6f:da:45:04:12:50:57:97:b1:89:34:77:1f:
90:6c:b0:73:ee:a1:9d:92:9a:c1:4e:15:af:50:f3:
6f:4f:c9:c3:f1:fe:c7:27:25:7d:4f:f6:35:bb:72:
5b:72:ea:5d:d7:41:ef:37:09:b9:06:35:91:92:24:
1d:02:49:85:e5:22:ef:f0:43:d5:2f:6d:19:7d:d7:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8D:79:99:06:98:71:CF:FC:24:36:75:91:1F:8A:5A:40:A1:18:F3
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:26:2a:c1:56:b2:4d:27:08:1c:f5:9e:78:b5:45:69:f7:0c:
39:61:2a:80:c2:47:13:80:64:a6:4c:8b:b1:45:30:c5:67:fc:
b5:41:a2:7a:a3:27:39:ab:e4:e8:d5:7d:ed:7a:c4:1d:d5:cc:
33:0d:02:70:7c:29:8b:d3:31:02:c0:20:26:10:6d:f5:84:8d:
79:a6:ed:2e:66:ff:ae:e6:44:16:1d:b9:0c:fb:97:24:69:7e:
3e:90:d1:a8:4b:23:c7:c8:00:ea:66:a3:59:f5:33:44:e1:cc:
cf:17:be:25:d0:f8:12:c4:2a:00:77:ad:3f:96:8a:2d:bc:3f:
bb:45:5a:3c:27:48:92:02:12:cb:36:6b:21:11:4f:ba:c2:c9:
a5:0e:e3:c5:f2:17:fd:b9:29:da:9a:70:23:fa:54:4f:d2:13:
ef:f4:7b:23:26:b7:55:05:80:b1:7b:ab:dc:d9:0b:54:46:03:
34:7b:47:33:c5:b9:05:35:fe:c7:9a:55:ce:20:ce:84:4c:c3:
bc:73:28:fe:cf:a6:53:51:3e:70:2b:6d:f7:cf:ed:f7:e6:b2:
82:d1:33:52:17:0b:57:22:25:3e:b8:68:d7:5d:eb:5c:ac:b1:
44:c0:86:8c:76:ed:c9:d7:f7:fd:03:a0:e4:63:ce:e9:b8:61:
59:f9:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:56 2026 by rpki-client