Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier: 0SBzGGep/BBvAIdGrLkhTUdtzFZ6JiP+bRzXihh7SjE=
Subject key identifier: BC:9D:DF:A8:69:D9:9C:08:50:49:97:B2:A7:98:6B:C0:F3:F9:9E:E1
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 019D382DEFA1A3EAE7AE1438D6F87FB73D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number: 1491
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=)
2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=)
3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=)
4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: XITsam8GR5jkmC+/mOn4ESfhbWJJTjueNwi4yEtcPAI=)
5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ef:a1:a3:ea:e7:ae:14:38:d6:f8:7f:b7:3d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=bc9ddfa869d99c08504997b2a7986bc0f3f99ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:4f:52:29:0f:d0:da:1b:f4:e5:b1:40:1e:
0a:c4:e1:03:23:82:96:66:29:cd:8d:a4:ec:d5:79:
75:cf:e4:33:8a:fe:2f:01:ed:6c:f8:0b:17:26:40:
72:7f:a7:77:3c:0d:6a:50:0a:c9:9d:7e:68:ce:39:
98:ba:ae:fc:83:00:8d:d2:1a:24:58:96:5d:81:f5:
5c:4e:79:25:25:e7:dc:d2:42:5a:45:d3:cb:da:a5:
70:4a:18:c6:c9:f7:6d:75:44:3e:c9:f7:6b:58:1f:
a4:6b:28:ef:54:8e:eb:68:32:d3:08:fa:52:4a:4a:
b8:57:02:4c:65:2d:f0:96:75:d7:a5:3b:dc:fa:e9:
59:96:85:56:04:1a:03:95:3e:21:96:5e:c0:37:58:
a0:04:f2:d4:6b:86:c9:02:3a:19:1a:9a:75:da:33:
84:33:b5:40:ab:85:b4:e3:14:f6:f8:24:77:10:a5:
01:20:a0:86:04:65:90:90:33:54:c7:01:62:ad:d9:
75:1e:b5:7a:98:9a:f7:44:89:d6:61:b4:0e:d9:f6:
4f:9e:42:fd:c4:03:f1:cd:6d:20:ee:2d:16:3a:4f:
fb:b8:a2:e9:fa:30:1d:0a:d7:38:f5:9a:cc:3a:9c:
84:a5:0a:55:47:e8:d1:fe:cf:5a:2e:7f:fa:07:dd:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:DF:A8:69:D9:9C:08:50:49:97:B2:A7:98:6B:C0:F3:F9:9E:E1
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:dd:d2:fd:6f:62:3f:77:28:0b:c3:52:ee:d7:c4:98:9b:
7c:63:c1:1a:27:57:26:8f:f8:2c:2c:98:85:a0:43:86:75:3d:
1d:b7:60:ab:bc:aa:d8:d4:3b:83:a7:a6:40:65:9c:ca:51:bf:
c5:3e:49:2b:c3:b0:69:c1:44:33:a3:54:34:bf:69:e1:21:ca:
c1:a9:72:06:d5:23:9e:e6:b8:b9:35:4d:7f:b6:25:7e:51:dd:
58:0d:4d:7e:d5:a5:84:67:4c:12:7b:f2:57:ab:5c:26:47:3c:
f5:b8:d2:db:41:57:76:00:e5:64:d4:0f:70:e6:05:93:d5:18:
c8:e0:31:79:a4:a9:92:d8:8f:c1:26:cd:99:99:20:6a:7a:0c:
19:d2:37:57:86:14:33:06:3d:41:3d:de:85:24:f0:be:29:56:
b0:d8:fa:d0:8a:cb:9c:b7:31:ad:5f:f3:30:27:8d:e3:f4:a1:
7d:8f:20:dd:e5:b1:75:35:5a:fc:83:92:41:68:af:dd:35:bf:
70:a3:c7:51:6b:31:70:f8:52:98:cd:f9:41:a3:f5:7b:11:f0:
2d:b4:f0:df:72:61:bd:c1:90:33:05:fa:aa:a6:7c:97:df:ff:
fa:d6:6a:ed:eb:c5:3e:b0:b5:8a:5d:c3:cf:d6:1c:10:6f:34:
7a:34:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client