Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: b+ymePxwTvym1dHXSHZXhl61TANqrUM797yqQze8ffo=
Subject key identifier: 36:F8:70:A6:44:D4:64:24:16:1F:41:AE:57:B5:D0:D6:84:0D:4F:63
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 019CE4EC8312A0A505B397940FD6BEBF2E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 02:00:31 +0000
Manifest this update: Fri 13 Mar 2026 02:00:31 +0000
Manifest next update: Sat 14 Mar 2026 02:00:31 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: B2FBOGyl861gdxEw9+iSCVj49HVYUmuKDU/a0sYCIcQ=)
2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:83:12:a0:a5:05:b3:97:94:0f:d6:be:bf:2e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Mar 13 02:00:31 2026 GMT
Not After : Mar 14 02:00:31 2026 GMT
Subject: CN=36f870a644d46424161f41ae57b5d0d6840d4f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:17:53:40:54:1c:94:b9:59:1d:a2:c0:b9:34:
b8:ea:46:24:2a:e3:16:79:54:c3:1b:a9:c1:c5:73:
8e:f9:71:b5:82:c2:83:2d:a1:17:05:b7:c8:d7:3d:
1c:98:6d:57:64:4f:f9:66:e6:33:9a:1a:a8:63:66:
e6:91:84:56:0e:0b:f0:58:0b:f9:6e:c7:ba:d5:af:
15:12:33:67:9b:81:f9:7a:7a:e3:4b:44:3b:cf:69:
54:ea:e6:28:65:7a:20:3f:b1:49:57:df:e5:05:8a:
6e:e7:80:ea:34:f4:b3:ee:c0:e5:d8:f5:1a:ba:a2:
b7:ff:95:f3:f8:05:ef:43:da:c0:d1:ff:f7:90:1a:
82:62:e8:83:7d:9d:d0:70:d6:47:59:30:1d:6a:90:
05:18:7b:48:81:60:24:8f:f1:d8:8d:bf:b4:0d:49:
31:60:8d:c7:6a:1b:8b:76:4f:73:b3:20:3b:06:73:
9b:78:83:aa:1e:1b:c6:42:86:70:98:af:fd:31:e2:
77:af:57:d6:1c:40:3e:7f:64:b2:0c:86:3e:e7:91:
ac:7f:36:65:b3:1a:6f:53:12:28:96:58:3e:fc:54:
cd:90:27:54:bd:78:a4:95:91:48:9c:71:ce:67:ac:
9e:cc:6a:8c:98:23:19:36:51:c4:70:50:7d:11:f2:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:70:A6:44:D4:64:24:16:1F:41:AE:57:B5:D0:D6:84:0D:4F:63
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b9:f3:17:41:6e:a4:e2:cb:32:f3:36:f5:75:0c:b7:ed:30:
b9:ba:13:da:c8:71:ce:9d:ef:4e:26:0d:a9:c3:6f:fd:d8:02:
02:df:ed:d2:40:84:0f:e7:f1:bc:e9:32:25:ac:b7:26:4e:ed:
c7:63:c7:30:48:bd:7e:2a:92:df:32:8e:be:5f:81:50:1c:cb:
c6:99:3b:11:f5:6e:ef:ed:96:f9:b7:2d:d3:3f:49:90:8d:17:
68:08:db:ef:4c:bf:37:a7:f8:aa:5c:03:24:97:45:e9:b8:76:
d3:3e:d8:64:23:26:0e:d2:6a:e5:c7:82:8a:21:d6:aa:ef:d6:
fb:1a:4e:73:62:d9:be:06:2b:cd:b6:ea:76:a4:24:92:69:f3:
f4:35:df:5a:3f:ab:40:7e:66:a7:2e:e7:b8:a4:a1:6d:a4:9d:
dd:e8:fb:12:49:27:5b:2d:16:dc:72:c5:8c:8d:8b:ac:83:d6:
1e:f0:3e:7b:32:9e:38:82:e6:b8:f6:04:8e:58:82:fb:7d:93:
fc:0b:bf:66:c4:1b:73:1f:39:10:91:d1:6a:50:96:8c:fe:cb:
88:9b:4c:e5:c6:6e:2c:c9:eb:9e:ca:a2:ec:95:78:5c:75:82:
17:1e:b3:9c:4a:0e:b5:c4:9d:68:5e:b5:3d:26:52:1b:f3:c6:
a8:78:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:19:51 2026 by rpki-client