
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: xej565cBgMVhk8ABjBys4Ovz+aEFpQHodGBG0OUj+98=
Subject key identifier: 98:7E:F3:22:F7:AE:D3:99:CE:F0:E2:AF:4F:CE:ED:A6:A0:C0:6B:25
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 01A089B1158875070DA884008B440D9527EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 05:01:18 +0000
Manifest this update: Thu 10 Sep 2026 05:01:18 +0000
Manifest next update: Fri 11 Sep 2026 05:01:18 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: 6L09JeH+hvFe3bWL58WRvCDXW2ci4cWUN0k1OPiLlRE=)
2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:15:88:75:07:0d:a8:84:00:8b:44:0d:95:27:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Sep 10 05:01:18 2026 GMT
Not After : Sep 11 05:01:18 2026 GMT
Subject: CN=987ef322f7aed399cef0e2af4fceeda6a0c06b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:5f:0e:21:bf:94:13:2c:af:4b:8b:49:89:
3f:d8:5c:09:9f:ab:b8:b7:2e:9b:52:19:b2:0f:98:
24:91:a1:a4:39:e8:27:00:6d:ce:03:a8:c8:89:5e:
57:c6:fa:5c:ef:8a:aa:cb:a7:56:be:e9:16:23:48:
8e:2e:18:26:b0:02:9c:7f:50:e6:e1:67:3e:24:9d:
91:a9:c3:4a:af:80:b1:8a:c9:3f:be:de:7c:d7:e6:
55:81:7c:cf:20:17:a4:ab:3c:47:4e:ae:bb:12:ec:
21:d3:37:e7:22:a1:80:59:6c:85:a1:b7:71:49:8e:
ac:3c:37:9b:e9:a0:0f:31:59:fb:6e:af:09:4c:b2:
c9:ff:81:6b:f1:2f:c7:26:44:77:dc:6f:3f:28:bb:
67:29:12:be:41:41:c0:30:72:75:04:c0:41:fe:96:
f0:1a:e3:66:a1:f7:ad:c7:1b:27:af:1f:37:7a:cf:
a8:e6:51:da:89:b5:7f:d3:3a:d4:2a:39:dc:17:d5:
2e:95:7f:ac:76:e8:97:98:6e:a9:ab:87:c4:b4:f9:
f0:d6:74:98:7b:c3:ca:cf:f5:52:af:6a:f4:24:13:
b5:59:ac:0d:a2:f8:b3:33:e8:b1:3d:76:31:f7:77:
83:e0:0e:38:8e:dc:ed:d7:73:0d:be:79:5f:0a:04:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:F3:22:F7:AE:D3:99:CE:F0:E2:AF:4F:CE:ED:A6:A0:C0:6B:25
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:07:61:33:11:d8:d0:e3:2d:2e:20:8f:e3:ab:d6:2f:2d:58:
11:93:ff:50:ab:4e:4f:d4:ca:67:bd:28:f6:a4:d5:68:81:42:
9f:74:f6:fc:15:79:de:f3:d0:21:ee:a8:1e:de:31:c3:88:f6:
8d:d9:42:e1:6f:54:8e:ce:34:5f:62:5b:68:13:28:67:23:65:
c9:be:0a:25:60:92:fd:95:35:46:20:ee:7b:8d:d2:d0:c2:2d:
30:f4:39:b2:3e:32:12:82:ea:23:48:ed:4c:3a:c8:87:86:66:
61:19:1e:98:0c:27:69:b8:de:f0:3b:fb:80:f5:a7:ec:77:15:
33:0f:e6:d3:8b:09:92:11:c2:73:ec:e1:b0:93:43:ba:ce:d1:
9f:3a:33:3f:fc:f2:17:5b:a6:42:c5:70:41:2f:82:ae:b9:f2:
0a:13:fc:48:ec:be:74:d2:5a:4f:dc:c0:a0:70:96:91:50:21:
26:61:f1:d7:e2:5e:9d:95:cf:ca:fe:c4:7f:d2:19:e8:ec:93:
af:df:13:96:98:08:1e:7e:bd:86:bb:e3:75:bf:3b:d0:73:10:
da:2d:d9:42:5c:07:63:59:03:a2:fb:e7:80:8b:d3:68:00:07:
2c:db:25:cb:c5:61:eb:f7:fa:d1:7c:de:09:92:11:83:0f:32:
23:58:93:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJsRWIdQcNqIQAi0QNlSfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MjgwY2M1MzQ1MTZkMWMxZDllYTAyNGVhYWZiZDAxZmRj
NjhjOTcwHhcNMjYwOTEwMDUwMTE4WhcNMjYwOTExMDUwMTE4WjAzMTEwLwYDVQQD
Eyg5ODdlZjMyMmY3YWVkMzk5Y2VmMGUyYWY0ZmNlZWRhNmEwYzA2YjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5pfDiG/lBMsr0uLSYk/2FwJn6u4
ty6bUhmyD5gkkaGkOegnAG3OA6jIiV5Xxvpc74qqy6dWvukWI0iOLhgmsAKcf1Dm
4Wc+JJ2RqcNKr4Cxisk/vt581+ZVgXzPIBekqzxHTq67Euwh0zfnIqGAWWyFobdx
SY6sPDeb6aAPMVn7bq8JTLLJ/4Fr8S/HJkR33G8/KLtnKRK+QUHAMHJ1BMBB/pbw
GuNmofetxxsnrx83es+o5lHaibV/0zrUKjncF9UulX+sduiXmG6pq4fEtPnw1nSY
e8PKz/VSr2r0JBO1WawNovizM+ixPXYx93eD4A44jtzt13MNvnlfCgRV8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh+8yL3rtOZzvDir0/O7aagwGslMB8GA1UdIwQY
MBaAFCcoDMU0UW0cHZ6gJOqvvQH9xoyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUt
MTViNzliMDI5NDNlLzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUtMTViNzliMDI5NDNl
LzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1QdhMxHY
0OMtLiCP46vWLy1YEZP/UKtOT9TKZ70o9qTVaIFCn3T2/BV53vPQIe6oHt4xw4j2
jdlC4W9Ujs40X2JbaBMoZyNlyb4KJWCS/ZU1RiDue43S0MItMPQ5sj4yEoLqI0jt
TDrIh4ZmYRkemAwnabje8Dv7gPWn7HcVMw/m04sJkhHCc+zhsJNDus7RnzozP/zy
F1umQsVwQS+CrrnyChP8SOy+dNJaT9zAoHCWkVAhJmHx1+JenZXPyv7Ef9IZ6OyT
r98TlpgIHn69hrvjdb870HMQ2i3ZQlwHY1kDovvngIvTaAAHLNsly8Vh6/f60Xze
CZIRgw8yI1iTsg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:39:21 2026 by rpki-client