Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File: JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier: qby1RjYAeIt7De59yZ6ejwc8mdXaj58AqNf/Sq3lVIM=
Subject key identifier: 0D:3B:66:A1:64:29:55:38:13:3A:B2:33:99:F9:D9:4B:EE:4B:11:D6
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 01A10700D43B3F1B231EC14BD642C0303685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number: 19DF
Signing time: Sun 04 Oct 2026 13:00:57 +0000
Manifest this update: Sun 04 Oct 2026 13:00:57 +0000
Manifest next update: Mon 05 Oct 2026 13:00:57 +0000
Files and hashes: 1: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: FpUh8zEfy1wOBNsDELieVkAQOPxZ4VmLAsAi8GGmqPQ=)
2: XsoOkS5cVinDKGylaIEe4V2iJiI.roa (hash: yUEIW+aXADdubfFegT02HQm/MXVHfJjhRJSJMZb2fr0=)
3: d9SsK9JFe4erW3mFTzDPmAS0ODY.roa (hash: eDnr+btVqcRjIrpyGoGoaGlmtxJe33quRXxSlU0qhfA=)
4: lcmCUf_CgzeIR8L7taeEF8YZZn4.roa (hash: WXtKI31hDy0GKZrnRRKtBFDImlVMPaG1/eg9VugOcII=)
5: lhg5zVYrNMLRf5rtCyfanPHKWCo.roa (hash: tJ2WDHFTAECq/EoCtDCOE9Vj8E1Ebzh5Ex98VPbUM4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:d4:3b:3f:1b:23:1e:c1:4b:d6:42:c0:30:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Oct 4 13:00:57 2026 GMT
Not After : Oct 5 13:00:57 2026 GMT
Subject: CN=0d3b66a164295538133ab23399f9d94bee4b11d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:bb:f2:99:6c:c6:8a:5c:8e:eb:8b:09:68:
34:23:63:cf:6e:f1:86:7c:a7:43:1f:5e:50:e6:a5:
84:5c:cd:83:a5:bd:2b:e8:da:57:ea:87:b8:b0:9e:
fd:c0:cd:20:9d:9b:b1:21:02:79:48:f3:d9:7a:cb:
5a:45:38:1e:4e:d6:d4:d8:15:34:e6:5a:bb:4f:12:
79:71:b9:91:30:63:83:8a:f9:74:d1:e0:f5:82:12:
b3:4f:bd:19:5e:87:3c:e6:1b:cc:72:80:a0:da:2d:
f4:5b:a7:3b:1a:8f:67:4e:c0:45:26:fe:c9:bf:fd:
29:c3:0a:8f:fe:21:20:a6:a5:2e:4c:dd:b4:a7:01:
f4:13:b4:07:cb:5f:fc:f7:b2:d5:34:3d:15:2a:e9:
41:74:9b:af:06:27:0f:0a:fd:59:46:6e:a7:39:6a:
4f:42:c4:7b:88:7d:ca:e5:90:b7:48:81:a9:a3:cf:
66:3f:aa:93:9a:0e:df:da:9c:88:c4:33:27:5a:93:
49:1a:be:20:17:14:03:20:d6:8d:ad:c0:e5:e1:e7:
58:98:de:66:fe:5c:cb:80:1c:3f:45:6f:97:48:13:
f5:e8:9a:c5:ba:79:15:4a:20:46:45:b4:42:f7:1d:
7d:29:ac:da:13:c7:db:dc:95:41:41:3f:3b:19:ef:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3B:66:A1:64:29:55:38:13:3A:B2:33:99:F9:D9:4B:EE:4B:11:D6
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:e1:08:c3:dc:05:d0:e0:47:13:54:53:81:31:9d:fb:f7:
9f:b9:1d:47:5c:37:64:f0:ed:f3:b6:5a:fd:e7:8e:39:2d:7b:
5e:16:42:37:79:76:8e:02:be:9e:9e:7e:f4:b9:55:9d:dd:5f:
80:08:52:b2:c0:e4:ba:b1:72:ed:ad:71:76:79:d5:68:b7:e5:
5c:16:97:a1:60:cb:d0:0b:e0:07:c7:03:e1:5d:31:56:c1:41:
03:12:83:19:e7:ad:fb:db:a6:e1:f8:df:ce:e6:8d:13:21:6e:
97:bb:a2:f6:df:ef:6a:f5:e2:2e:f4:84:84:3d:02:24:f3:2a:
d6:70:80:4b:88:06:11:53:ee:a0:0b:5f:7d:23:bc:8d:8c:54:
15:c4:a4:e9:42:5a:e4:4d:d8:6f:5a:5b:cf:b2:2a:52:45:d7:
dc:2b:73:4b:fc:1f:3b:55:ae:d2:44:a5:b6:ac:bf:10:29:91:
c6:c8:d2:75:af:c1:dc:46:a3:7a:fa:2b:97:b9:bb:78:2d:45:
3b:82:67:c8:58:64:50:c1:c7:25:ec:fe:96:26:6b:62:b9:4b:
30:ba:cb:07:06:77:63:7e:2b:0e:08:a4:1f:b5:af:58:cf:92:
80:f5:ca:39:70:47:5e:bb:35:e6:96:10:87:02:30:4f:97:5e:
ac:06:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:04:51 2026 by rpki-client