Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: iYygwiDqNuS43FROXh4l9o6NrOcsLJge9NN/ADv/T/E=
Subject key identifier: 8F:C7:2E:FF:D6:DD:FC:05:94:AD:C0:E6:2D:0E:A3:78:10:D3:B1:EC
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 019DCE9955FDA7A0DB756F971325B498E1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 11:00:48 +0000
Manifest this update: Mon 27 Apr 2026 11:00:48 +0000
Manifest next update: Tue 28 Apr 2026 11:00:48 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: /xWiMHtsIYiH+1redPpptG+bk9lMD8/PR1t2hMrt0k4=)
2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:55:fd:a7:a0:db:75:6f:97:13:25:b4:98:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Apr 27 11:00:48 2026 GMT
Not After : Apr 28 11:00:48 2026 GMT
Subject: CN=8fc72effd6ddfc0594adc0e62d0ea37810d3b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:d2:cb:65:10:28:74:d0:d9:00:00:20:ee:
46:50:c1:06:47:c0:6e:45:67:c4:16:7d:db:62:88:
93:01:17:cd:c6:49:2f:cc:2b:07:4f:8a:ae:41:de:
3d:ab:a8:af:e6:e6:32:ae:9d:a8:15:e4:cd:34:0e:
1c:79:b9:28:eb:92:c7:12:81:c3:45:88:2f:14:5a:
66:7a:a4:0c:c4:b6:4b:c8:ae:87:91:1d:e2:b8:20:
8c:e1:d6:1b:06:3b:c0:37:15:00:df:44:da:b2:e1:
4d:a1:d6:3f:db:5c:77:a4:8e:b3:c9:60:e4:d0:1c:
ab:ab:f3:12:03:29:01:15:e5:99:62:e9:f2:13:15:
a8:23:c6:5e:04:e4:ef:6c:71:45:4a:04:1f:ea:2c:
ab:9a:a5:24:e6:b6:4a:c6:ec:9a:6f:c3:e6:2a:0e:
66:67:46:bc:58:1d:03:86:8f:9c:02:a1:cc:53:d4:
79:35:fb:32:98:fc:27:5d:c9:c2:08:f7:90:34:be:
37:f4:fe:2f:a1:6b:aa:d2:f7:ba:3c:01:c5:86:70:
77:71:5c:71:27:04:aa:7d:41:de:fe:41:fd:a0:85:
8c:53:5e:c1:81:ca:67:bd:bc:62:83:9d:20:10:f8:
2f:31:b6:57:e2:72:77:1a:e8:64:65:36:37:2f:6b:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:2E:FF:D6:DD:FC:05:94:AD:C0:E6:2D:0E:A3:78:10:D3:B1:EC
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:57:42:9a:d9:36:85:05:3d:36:23:25:42:4c:36:7f:68:96:
4a:9a:3c:88:83:ae:ea:d8:30:38:55:85:f2:ff:2e:f1:f6:59:
26:f2:03:51:50:d2:73:dd:70:75:ee:7a:a4:b5:b5:2d:bc:ef:
d1:b2:a6:26:17:dc:4b:9f:f7:6f:a5:2b:62:73:1f:f2:75:f0:
e5:8d:04:e0:11:c3:93:af:e7:d8:43:b6:c8:23:45:02:2d:7c:
6a:ae:5c:df:42:ce:b1:c3:30:93:bb:b2:c4:d0:20:e5:7e:fc:
c6:7c:f7:c1:0e:7b:74:02:d6:a5:af:4a:13:e6:2d:a1:ff:ac:
63:3b:c0:ab:4a:4c:f5:5e:33:3d:6d:d2:22:6c:80:7d:f9:c1:
38:af:48:86:9c:e4:95:e2:4c:cf:33:2b:b1:68:ff:ab:8d:86:
bb:e6:35:55:e8:61:98:33:a6:74:c4:04:63:75:30:7a:30:68:
0c:6d:fd:66:22:5a:88:69:c8:42:90:d8:8b:45:9c:ed:df:23:
e1:40:05:aa:d5:cc:5a:cd:d6:72:fc:04:21:04:03:69:c1:83:
da:c5:e6:6e:b0:1e:51:6a:1d:80:79:ce:d3:11:06:39:71:c7:
b7:f2:de:27:33:d4:69:d4:0b:e2:d8:bc:59:71:78:62:44:9d:
ab:d9:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:39:54 2026 by rpki-client