Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: fYpnmHLubeomOQTlldzM+mq6fKyBfkl7CnRrb6bFkDw=
Subject key identifier: 8E:F9:1B:7F:EE:1F:5F:42:E7:26:31:04:0A:17:80:1F:0E:D3:BF:15
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 01A012D1760F99A014F88631032DAAA70597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0D55
Signing time: Tue 18 Aug 2026 03:01:52 +0000
Manifest this update: Tue 18 Aug 2026 03:01:52 +0000
Manifest next update: Wed 19 Aug 2026 03:01:52 +0000
Files and hashes: 1: Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa (hash: QYPBK9tLe2NLf5ToJsGlVRXUrRctKZptQZU1FwtQfmU=)
2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: Q7MoZWka7aLQ6XPjEkS2mD0Irp5dkzEOKN0bTkN5P24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:12:d1:76:0f:99:a0:14:f8:86:31:03:2d:aa:a7:05:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Aug 18 03:01:52 2026 GMT
Not After : Aug 19 03:01:52 2026 GMT
Subject: CN=8ef91b7fee1f5f42e72631040a17801f0ed3bf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:11:2e:2d:30:93:58:27:df:6b:c5:aa:7f:
69:42:1d:d2:aa:cc:e2:59:8b:06:92:4b:00:4d:a8:
87:ca:53:a3:4e:92:44:ac:e2:bd:0c:5f:ea:a3:fb:
fe:77:aa:35:cb:5f:98:10:c7:7e:13:eb:b9:78:41:
a9:4c:1f:e3:5c:09:00:8d:1e:10:18:8d:46:a7:36:
fb:d5:90:9a:9c:bd:e5:50:f3:12:e9:9c:e9:1c:89:
08:6d:3f:b8:04:91:94:dc:cb:a7:cb:46:5e:ad:6e:
cc:9a:a3:8e:42:2e:6c:83:1f:ca:98:94:d9:0c:9f:
9d:56:5d:d0:d0:4d:86:49:fa:fc:37:dc:ae:55:42:
c8:bb:e9:be:64:37:33:e3:fa:e1:44:c9:bb:dc:30:
1c:67:e2:8b:6b:c3:58:aa:be:f9:3f:ec:e3:03:a2:
c7:52:d2:8a:b1:5d:a0:71:23:69:d2:1e:79:cf:7e:
90:73:56:6a:ef:27:68:ec:89:78:1a:72:9a:47:8c:
31:71:1e:45:f0:bd:fe:4a:6a:49:e1:ac:7c:e1:9a:
b6:51:81:85:c0:99:3a:86:45:c5:26:b4:f5:ee:86:
18:2e:2c:83:82:69:76:97:b6:f8:3d:0f:e0:e2:88:
8c:13:d8:fa:93:3c:af:20:65:c7:11:24:74:f0:55:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:1B:7F:EE:1F:5F:42:E7:26:31:04:0A:17:80:1F:0E:D3:BF:15
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a3:a4:27:22:a2:8f:ce:27:02:98:01:c7:43:1c:47:6a:d3:
3c:66:70:4c:37:1c:d8:53:bc:da:e9:cb:d3:c9:5e:9a:31:21:
b6:91:4a:a7:3c:6f:03:ed:b9:d0:87:b9:2e:8f:d8:aa:25:c1:
b7:ec:d8:5f:ca:d4:da:a5:7e:9a:0d:59:94:32:bc:ed:ce:fe:
37:c6:79:00:ca:e5:2e:4a:55:9e:37:2a:0d:fa:ee:87:51:eb:
f3:ad:16:cd:64:e2:f5:44:e0:ca:01:77:f4:6f:6a:62:ad:58:
08:ab:d1:c7:eb:b6:5e:a6:d6:51:81:4a:da:d5:c8:23:ee:78:
05:d3:f2:07:cc:8e:22:39:6f:1b:f7:b4:ef:4d:4b:42:9d:1a:
34:95:ef:fe:1a:1f:75:a5:48:d4:3f:d5:17:13:2b:a5:e0:52:
9c:6b:37:9e:81:34:05:49:b3:a4:e3:96:6d:db:54:ef:05:1b:
34:5e:96:70:3b:0c:97:1e:18:3b:2b:56:84:6c:16:c2:0a:f7:
76:de:10:23:09:be:5c:04:b3:3a:47:b4:23:12:e0:69:64:e2:
45:30:35:15:ce:c8:79:63:47:42:eb:6c:e1:fb:35:2e:67:f7:
b5:47:83:a5:55:47:ea:23:99:88:33:03:75:9a:2a:c7:de:00:
2e:db:f6:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAS0XYPmaAU+IYxAy2qpwWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OGYwNzUzYzAzM2MxYWYwOTE4NjZkMDk0MjY0NTEyNjk2
Y2E2OGIwHhcNMjYwODE4MDMwMTUyWhcNMjYwODE5MDMwMTUyWjAzMTEwLwYDVQQD
Eyg4ZWY5MWI3ZmVlMWY1ZjQyZTcyNjMxMDQwYTE3ODAxZjBlZDNiZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixwRLi0wk1gn32vFqn9pQh3Sqszi
WYsGkksATaiHylOjTpJErOK9DF/qo/v+d6o1y1+YEMd+E+u5eEGpTB/jXAkAjR4Q
GI1Gpzb71ZCanL3lUPMS6ZzpHIkIbT+4BJGU3Muny0ZerW7MmqOOQi5sgx/KmJTZ
DJ+dVl3Q0E2GSfr8N9yuVULIu+m+ZDcz4/rhRMm73DAcZ+KLa8NYqr75P+zjA6LH
UtKKsV2gcSNp0h55z36Qc1Zq7ydo7Il4GnKaR4wxcR5F8L3+SmpJ4ax84Zq2UYGF
wJk6hkXFJrT17oYYLiyDgml2l7b4PQ/g4oiME9j6kzyvIGXHESR08FX3swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI75G3/uH19C5yYxBAoXgB8O078VMB8GA1UdIwQY
MBaAFCWPB1PAM8GvCRhm0JQmRRJpbKaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQt
MmMyZjBkMjRmOTM2LzEvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQtMmMyZjBkMjRmOTM2
LzEvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaOkJyKi
j84nApgBx0McR2rTPGZwTDcc2FO82unL08lemjEhtpFKpzxvA+250Ie5Lo/YqiXB
t+zYX8rU2qV+mg1ZlDK87c7+N8Z5AMrlLkpVnjcqDfruh1Hr860WzWTi9UTgygF3
9G9qYq1YCKvRx+u2XqbWUYFK2tXII+54BdPyB8yOIjlvG/e0701LQp0aNJXv/hof
daVI1D/VFxMrpeBSnGs3noE0BUmzpOOWbdtU7wUbNF6WcDsMlx4YOytWhGwWwgr3
dt4QIwm+XASzOke0IxLgaWTiRTA1Fc7IeWNHQuts4fs1Lmf3tUeDpVVH6iOZiDMD
dZoqx94ALtv2LQ==
-----END CERTIFICATE-----
Generated at Tue Aug 18 05:03:44 2026 by rpki-client