Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File: JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier: 83O8j0ZpBLDFeUa31GdlucO95X4IheXWuyK01S0bh3M=
Subject key identifier: 44:29:55:25:37:2A:9B:35:68:1D:5D:82:5F:1C:AC:44:73:1E:F1:BF
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer: /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial: 019F84C3776B2245D6AFFF11D1C432F7237D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number: 01B9
Signing time: Tue 21 Jul 2026 13:00:30 +0000
Manifest this update: Tue 21 Jul 2026 13:00:30 +0000
Manifest next update: Wed 22 Jul 2026 13:00:30 +0000
Files and hashes: 1: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: GSZyJ2S7pYVWk+BRxFMV7GnSQV/QldCzn12QxDJHhh8=)
2: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
3: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:77:6b:22:45:d6:af:ff:11:d1:c4:32:f7:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Validity
Not Before: Jul 21 13:00:30 2026 GMT
Not After : Jul 22 13:00:30 2026 GMT
Subject: CN=44295525372a9b35681d5d825f1cac44731ef1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:3b:27:46:0a:23:44:de:86:eb:a7:f3:de:
fa:54:27:5e:25:69:ea:4b:8e:b6:99:11:16:e7:04:
a7:a2:a6:a2:cd:42:ce:6e:d1:8c:33:ba:ec:94:de:
a1:c7:37:ee:77:5f:33:7f:2a:50:9f:57:5c:44:0f:
5a:28:e9:9a:fc:15:a1:1a:d8:13:30:87:fa:f4:4c:
77:f9:80:41:d2:6d:9a:64:d1:5d:72:43:cd:51:08:
2d:82:9b:31:85:51:a5:1a:4a:e4:de:05:89:e3:05:
d6:00:30:1a:c8:58:34:21:d3:d5:12:39:34:04:c8:
45:38:65:49:72:49:e2:a5:f2:93:ae:4e:53:9b:01:
10:60:fe:41:de:a2:fb:f0:10:1c:65:ac:22:18:e0:
13:62:9a:fe:6a:c2:b0:18:8c:14:08:c2:3c:42:59:
a9:a5:f9:67:d0:dd:3e:af:b9:bb:f3:bf:74:22:46:
eb:00:67:f0:47:53:7c:80:57:de:b4:8d:2f:d1:02:
a9:00:46:b9:e0:70:c9:d0:ca:42:bb:09:3a:7f:19:
36:f2:4c:b7:ec:bd:a4:29:ae:1b:76:52:db:52:8b:
dd:56:61:fd:25:c2:a7:0d:3f:d5:49:39:10:22:5c:
f0:e5:36:45:07:6c:4b:17:28:0a:63:e1:35:07:d0:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:29:55:25:37:2A:9B:35:68:1D:5D:82:5F:1C:AC:44:73:1E:F1:BF
X509v3 Authority Key Identifier:
keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:a5:ff:99:d7:af:36:c0:41:ed:b0:8f:f4:60:9d:75:e5:
6a:fd:11:43:10:4e:b2:df:72:29:31:90:e7:3d:40:18:fc:f5:
b6:28:f9:17:8a:be:a3:4e:00:c9:72:50:3e:20:90:ab:10:24:
3f:b3:39:ca:c5:ec:3a:a0:ee:23:76:3f:cc:33:f4:4d:7e:15:
71:da:30:48:a0:e0:a6:d2:6f:01:22:91:8d:51:b5:98:41:fb:
4b:67:97:70:a2:ec:25:72:23:e5:47:b1:ec:be:e2:da:b2:5b:
b3:b0:06:ab:9c:bb:72:79:3a:01:71:c3:34:82:84:5a:df:c4:
b4:ba:1d:cc:81:d9:be:ac:f6:0d:91:0f:ec:40:31:e8:04:db:
33:ba:ba:41:bf:a4:e4:64:b8:3f:41:b8:c6:63:c6:80:af:30:
8e:7b:65:60:6f:a0:5e:e8:1f:36:2e:b1:87:28:ae:fe:0b:50:
38:05:5d:cb:b3:16:95:d4:dc:b4:24:e2:64:fc:7f:33:4a:78:
4e:08:65:00:31:df:72:a6:51:ab:cd:35:28:72:d7:73:65:7d:
24:76:ce:10:a2:37:0e:e0:f8:b4:31:00:90:64:c8:0c:03:d1:
89:72:b9:73:fa:24:14:dd:6d:30:38:71:0e:c4:f9:77:83:61:
e3:01:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:00:50 2026 by rpki-client