Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: E9hhxQDDRNx3pDjsYENcqWSYhaD7JIzPCkitmwo/DqY=
Subject key identifier: 16:29:CF:FF:62:CA:2A:10:9B:11:A4:79:FA:46:A5:50:0A:89:6B:A9
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019F84C4177B160273202C51892304481784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 138E
Signing time: Tue 21 Jul 2026 13:01:11 +0000
Manifest this update: Tue 21 Jul 2026 13:01:11 +0000
Manifest next update: Wed 22 Jul 2026 13:01:11 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: bZWk4AhB-ix13SfItg99WGR-iHE.roa (hash: /vtIcpptaY2u+l35mug1F/OipcmBaaaq9NSFgSW4I9A=)
4: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: L30c59PCTf0c3CcCDeenchqceKS2vduKkrr3ToCtER0=)
5: rP1URTYVfd_9XdYb3WISbeQbVvs.roa (hash: IQMQ/usDnC3qoYl80XNrpZJSW6cDKlPPV05RatnNmDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:17:7b:16:02:73:20:2c:51:89:23:04:48:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Jul 21 13:01:11 2026 GMT
Not After : Jul 22 13:01:11 2026 GMT
Subject: CN=1629cfff62ca2a109b11a479fa46a5500a896ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:4f:1e:25:35:a7:04:83:9e:e6:97:2a:49:
3a:8a:06:1f:b7:4e:e7:a2:f2:15:84:c6:83:3f:86:
5f:7c:c8:20:b9:44:ae:4c:2d:f3:8c:d2:c2:66:21:
3a:84:c9:84:cc:43:a1:21:5b:70:fe:f4:7a:b9:3d:
ca:be:51:7a:ca:0b:24:2c:8f:16:fa:e4:f9:6c:f5:
30:40:5a:3a:0f:a7:f8:0e:61:ea:be:bb:e0:87:46:
51:ac:ba:54:65:39:e1:ba:6c:67:93:11:6b:ca:d2:
78:59:ea:dc:1d:12:62:69:c0:da:11:55:c3:f8:13:
30:77:49:a0:79:f5:11:95:96:13:5c:5b:fe:01:4e:
53:7f:8e:be:34:25:01:11:3b:6e:b9:03:6c:dd:61:
98:e5:4e:13:f9:a9:1f:d6:1f:3b:04:0c:be:15:83:
3f:d4:70:a1:63:be:0d:7d:1e:86:17:7e:d6:b2:1d:
fa:4e:d3:61:13:70:9a:2c:8b:2d:6c:68:d5:22:69:
93:16:77:8d:17:6c:0c:0d:7a:74:b8:8c:51:aa:2f:
4b:4e:ef:49:64:e2:5b:8b:fb:fc:c5:04:75:3f:ae:
b3:48:31:14:af:83:cf:66:97:b9:5e:04:83:b1:86:
28:d2:b0:79:45:98:36:74:bd:64:9b:2d:55:5e:52:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:CF:FF:62:CA:2A:10:9B:11:A4:79:FA:46:A5:50:0A:89:6B:A9
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:50:c3:19:22:e7:cd:0f:7d:bd:2d:15:56:93:14:e0:87:e8:
2d:b1:fb:e4:a7:ed:76:c2:78:1d:d1:06:4b:bf:5f:e3:2c:50:
18:fd:df:2f:98:48:5b:9a:2b:5f:14:8f:fb:d0:e6:ff:82:28:
12:69:6b:1d:3c:bb:84:fe:27:fb:f2:ad:cf:47:e7:0e:08:88:
9c:88:4a:3f:a1:fd:a0:d8:41:47:04:c4:d9:a5:dc:71:59:1b:
99:23:f2:d2:30:27:73:eb:1b:e4:38:77:6f:4b:63:bb:1d:e3:
0e:c2:f5:c7:3b:f7:42:aa:65:1f:75:f1:71:41:fb:28:5c:b2:
a5:49:da:e3:8a:ad:80:d9:4e:23:6c:b3:a1:99:99:cc:7c:77:
62:9b:7f:4f:64:52:8d:52:92:b4:c5:d9:aa:e3:32:24:c7:e8:
4e:52:b4:34:99:8f:f6:7b:77:c4:42:22:c6:37:df:e1:5c:c4:
a8:1b:76:29:dc:75:91:f3:94:c6:45:11:57:28:15:8a:fd:46:
15:a9:b1:12:ab:ee:f0:90:60:02:ca:4e:a6:8e:e1:44:60:fd:
8b:a5:e4:0d:06:5d:9e:95:73:eb:51:bd:a9:ab:53:21:7d:b0:
f9:79:cd:aa:3a:e9:6b:a7:2f:10:c3:87:53:7e:c3:ef:81:50:
b1:f2:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:50:24 2026 by rpki-client