Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File: JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier: 61rOwfQKaFVa3JQ3wLfcB/IGu8GjHlG426zcCJY+PwM=
Subject key identifier: F3:6C:7D:C5:5C:9B:CB:51:37:71:52:59:41:7B:24:8D:F7:75:AC:E3
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer: /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial: 019D39AF495D8D8C3E4E6243DE4A6F842927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number: 89
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: KMX1oyzZJXxLwEgpJm+1wzyGZTNGn2//iplWThwHqFI=)
2: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
3: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:49:5d:8d:8c:3e:4e:62:43:de:4a:6f:84:29:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=f36c7dc55c9bcb5137715259417b248df775ace3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:08:5f:0f:a2:14:df:7c:45:d9:1f:9d:93:
1a:d8:1e:81:26:f5:54:34:b2:52:b1:04:2d:c0:7d:
de:20:29:79:ab:23:36:ef:bb:75:fb:91:51:ce:b4:
a8:5f:df:df:75:ad:5c:85:4b:c4:b8:b7:49:fe:47:
10:26:d4:1f:11:90:e2:e6:ac:3e:a8:e7:12:8f:96:
61:f6:ab:bc:b4:1b:a4:de:cf:e1:88:41:38:87:80:
d5:04:24:8a:95:b2:c2:3b:50:a5:3f:6e:3d:c1:e8:
82:3d:3c:2a:5a:07:04:a8:2e:14:55:30:8a:e2:85:
de:46:c3:9e:4b:d3:f6:ab:bc:9e:23:21:ef:67:4c:
6c:11:29:b2:e1:d6:ec:41:bd:a9:b9:7d:c1:f4:99:
a4:6b:9e:4e:2f:d1:fe:ce:8a:b9:a1:62:3c:54:24:
57:ee:e8:f5:8a:70:47:ab:c2:5c:68:fd:57:7b:e7:
2f:dd:9e:95:df:9d:75:36:32:ba:ae:0d:69:84:df:
1f:03:cf:13:45:d9:04:bb:ed:e4:ca:e1:4a:7c:ad:
51:ae:38:55:14:04:ee:bf:71:a2:40:b7:0c:09:b6:
82:00:27:8e:83:ad:ca:72:c5:89:a6:20:40:59:8b:
84:d8:b2:8a:e8:d9:22:c1:01:8e:d4:85:3d:65:38:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:7D:C5:5C:9B:CB:51:37:71:52:59:41:7B:24:8D:F7:75:AC:E3
X509v3 Authority Key Identifier:
keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:28:5d:2a:9a:38:a7:85:e2:ab:f6:6d:0b:8e:df:a3:2c:23:
69:56:c1:46:df:24:1a:29:89:ff:67:e7:15:31:a3:d3:83:e9:
24:53:51:a5:0e:d1:9d:ad:b9:f5:08:ad:7e:87:70:4f:b5:fc:
d3:44:62:90:68:e4:2c:82:4e:e5:fb:7d:a9:20:b4:e6:c3:3a:
7e:f5:06:cc:b1:3c:15:43:a2:a9:3d:9d:01:c2:19:17:3b:e4:
f5:e5:46:58:82:83:ce:5b:1f:8a:03:fd:2b:10:94:b3:64:0c:
2c:34:63:32:14:07:6b:75:97:8c:1c:d3:26:80:6f:e7:c9:9d:
14:16:15:63:9a:3d:1f:9e:09:5f:d4:23:78:2c:66:98:0d:aa:
83:f4:cd:6d:42:89:78:7d:98:fe:ca:0f:3f:91:ca:4e:69:82:
a0:9c:96:b9:a3:fe:82:16:69:d1:6e:3c:c3:6d:9a:8e:11:06:
82:7f:22:cb:61:62:51:e2:a1:2a:48:1b:5c:bb:26:73:b8:33:
54:d8:33:7c:88:1d:8e:c8:4b:43:ff:da:e2:4c:71:17:20:16:
df:7b:80:43:b5:ce:20:8e:7e:89:73:ed:66:37:2d:54:68:1a:
36:c2:1f:f3:a7:1d:b0:2f:50:5e:31:2c:4a:f7:4b:9c:90:dd:
08:98:15:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r0ldjYw+TmJD3kpvhCknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODk0MWEzMzdiOGNhMTVmY2FlOTE2ZmNiNDIwYzU4ZGYy
ZTBiOWMwHhcNMjYwMzI5MTMwMTIyWhcNMjYwMzMwMTMwMTIyWjAzMTEwLwYDVQQD
EyhmMzZjN2RjNTVjOWJjYjUxMzc3MTUyNTk0MTdiMjQ4ZGY3NzVhY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+AIXw+iFN98RdkfnZMa2B6BJvVU
NLJSsQQtwH3eICl5qyM277t1+5FRzrSoX9/fda1chUvEuLdJ/kcQJtQfEZDi5qw+
qOcSj5Zh9qu8tBuk3s/hiEE4h4DVBCSKlbLCO1ClP249weiCPTwqWgcEqC4UVTCK
4oXeRsOeS9P2q7yeIyHvZ0xsESmy4dbsQb2puX3B9Jmka55OL9H+zoq5oWI8VCRX
7uj1inBHq8JcaP1Xe+cv3Z6V3511NjK6rg1phN8fA88TRdkEu+3kyuFKfK1RrjhV
FATuv3GiQLcMCbaCACeOg63KcsWJpiBAWYuE2LKK6NkiwQGO1IU9ZTiTAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNsfcVcm8tRN3FSWUF7JI33dazjMB8GA1UdIwQY
MBaAFCWJQaM3uMoV/K6Rb8tCDFjfLgucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYt
NDc3NWJiNjY4YjA0LzEvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYtNDc3NWJiNjY4YjA0
LzEvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUChdKpo4
p4Xiq/ZtC47foywjaVbBRt8kGimJ/2fnFTGj04PpJFNRpQ7Rna259QitfodwT7X8
00RikGjkLIJO5ft9qSC05sM6fvUGzLE8FUOiqT2dAcIZFzvk9eVGWIKDzlsfigP9
KxCUs2QMLDRjMhQHa3WXjBzTJoBv58mdFBYVY5o9H54JX9QjeCxmmA2qg/TNbUKJ
eH2Y/soPP5HKTmmCoJyWuaP+ghZp0W48w22ajhEGgn8iy2FiUeKhKkgbXLsmc7gz
VNgzfIgdjshLQ//a4kxxFyAW33uAQ7XOII5+iXPtZjctVGgaNsIf86cdsC9QXjEs
SvdLnJDdCJgVxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:19 2026 by rpki-client