Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: X28QuncyUXdCuqMUDlkpFrXFBsL+/r2NIV755Ekx8Dc=
Subject key identifier: 47:04:11:4A:FB:CF:45:E7:3B:8A:D4:9A:23:FF:FA:63:87:72:92:7D
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 01A175F088C0E1D0411DBD96297DEBE2E37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 0950
Signing time: Mon 26 Oct 2026 02:01:00 +0000
Manifest this update: Mon 26 Oct 2026 02:01:00 +0000
Manifest next update: Tue 27 Oct 2026 02:01:00 +0000
Files and hashes: 1: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: 0gmdgB4wjMZnaKjWqfD5F8eU4FBLvl945HDFG9CBk98=)
2: WVsQxFgimK0IaVgu0fCqH6Ya9j0.roa (hash: 9sCLSewlIQe4J9YBGaa7rhwdb5suwltCJKk62oK5F6w=)
3: pCSMBqmn-2xkRzGOrRbDhgjt1ZQ.roa (hash: qEIf3vrVO3maTFTQZWMGFxBk+5hFDaz1/E5BMr9cl+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:88:c0:e1:d0:41:1d:bd:96:29:7d:eb:e2:e3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Oct 26 02:01:00 2026 GMT
Not After : Oct 27 02:01:00 2026 GMT
Subject: CN=4704114afbcf45e73b8ad49a23fffa638772927d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:fd:ca:27:dc:78:04:43:96:03:e3:79:ed:
c4:5b:ec:e7:9f:05:3d:ef:93:e6:e7:8c:46:6c:dd:
df:7d:dc:01:5f:6f:af:16:8f:c1:8f:ad:a5:61:84:
a2:0c:3d:04:6a:f0:7f:64:c3:de:07:08:1e:09:70:
75:51:0d:a9:40:5d:92:1c:6d:27:20:92:c3:a9:9a:
07:94:89:9b:e5:f9:48:c0:b1:6a:be:bc:86:58:73:
c8:53:8c:80:86:1c:66:54:7e:a1:3c:18:b9:9f:c1:
c7:59:00:0f:3a:c3:f9:e6:65:e3:c1:3a:b8:86:c1:
20:4d:9a:3a:50:2f:a6:fd:ea:6d:44:14:7b:3e:48:
03:77:fe:9c:3e:59:df:04:42:b4:cb:30:f3:5d:2c:
72:55:7f:57:4d:c0:71:a2:e8:45:31:aa:0d:51:c4:
b3:a3:8d:17:64:4a:2d:1a:14:d2:58:30:73:55:63:
b3:db:eb:d3:06:e9:8d:c4:ce:ff:9f:44:29:63:53:
12:25:0f:ca:26:d3:b1:53:ea:26:46:e4:5b:0a:ea:
bc:55:46:db:fb:e4:fc:cd:a1:8c:b3:58:18:10:61:
43:36:99:ae:89:28:da:27:59:dc:ac:4e:64:82:33:
cf:39:54:2d:74:5e:6a:05:09:4b:bd:c4:29:7d:10:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:11:4A:FB:CF:45:E7:3B:8A:D4:9A:23:FF:FA:63:87:72:92:7D
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d0:55:2e:c5:25:8b:6e:ab:9e:ab:3c:2a:e8:07:bc:16:1b:
4f:b2:c7:bb:a1:b9:ab:59:d3:4c:b3:c8:49:6a:db:0b:6a:bf:
dd:3a:0b:21:19:b9:7c:97:27:1f:75:c0:f0:f7:80:fb:43:70:
74:c0:c2:6f:65:dd:cf:c0:bb:06:1f:9b:b8:51:18:62:a7:d3:
98:ee:04:84:c2:6f:a4:42:89:8d:64:7f:ac:1c:fe:45:03:55:
de:de:02:32:d5:6c:8a:ec:bb:51:4d:9c:8a:30:dc:23:c1:36:
1a:ef:9e:f0:af:bd:69:9a:07:c9:19:a6:d3:cb:67:bd:ac:a3:
04:d1:49:74:13:09:54:00:4b:87:5f:5c:d9:74:1a:b2:b4:19:
81:de:bb:4c:25:82:ab:29:d1:53:40:0f:82:4d:8a:e4:63:2c:
25:4f:20:9d:de:39:df:73:43:f7:5b:ed:4f:2e:d1:ae:93:e7:
0b:87:29:51:8d:f8:aa:a8:c2:d2:99:3c:84:e2:c9:c4:9e:ab:
9f:a7:85:38:97:2c:80:d0:49:11:4a:1e:7b:c0:63:2b:f5:b2:
03:a8:b8:90:25:2e:77:6a:f9:7a:ca:3d:b4:67:69:cf:39:92:
ae:57:2d:96:b4:8f:10:e2:f5:41:79:71:b5:10:f5:90:c7:2f:
9d:74:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:44:19 2026 by rpki-client