Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: rzsJa6RTLgNBid185LrDxcxKB041qetpFdH+vfmnq90=
Subject key identifier: D6:DC:B6:56:3A:42:34:3E:CE:3E:5A:9B:40:DE:18:AD:D4:FF:6A:F7
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019FFCED39FE1B909E3119B2384F798C7E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 0429
Signing time: Thu 13 Aug 2026 21:00:32 +0000
Manifest this update: Thu 13 Aug 2026 21:00:32 +0000
Manifest next update: Fri 14 Aug 2026 21:00:32 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: JJqz++rOyhJu2VUi1fmcKEO2/pgxON8qy49pelzp43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:ed:39:fe:1b:90:9e:31:19:b2:38:4f:79:8c:7e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Aug 13 21:00:32 2026 GMT
Not After : Aug 14 21:00:32 2026 GMT
Subject: CN=d6dcb6563a42343ece3e5a9b40de18add4ff6af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:3c:26:ee:ff:52:32:80:5f:84:b3:c0:97:
4f:de:02:af:24:49:a4:56:d8:27:03:80:a4:e9:4f:
0d:cb:1a:78:11:7f:e6:b1:b5:ed:bb:6b:79:a3:b5:
ba:32:39:3d:fd:ea:5f:cf:0c:c8:e0:51:b5:28:bf:
a5:11:c5:cc:e6:7e:e0:7d:d5:fb:61:0f:6d:a5:b8:
ee:29:d2:8e:87:98:86:02:b8:50:d0:85:f7:29:39:
e8:ec:9c:18:a8:88:91:4b:96:09:c4:f1:b7:53:41:
66:f7:6d:da:81:ad:c1:f8:e5:d8:36:37:61:4e:ac:
14:27:44:9c:11:e2:56:44:d8:22:02:3c:ef:de:80:
d1:4e:66:92:c0:ee:e2:90:3c:7f:f2:2e:31:97:f9:
36:04:01:7e:af:08:ba:e8:d9:41:df:dd:3e:01:0f:
ff:7b:8f:c0:7a:5e:d8:3b:a0:f9:bd:e5:49:b2:9f:
d0:11:d5:d4:63:53:86:da:26:15:22:9c:f0:11:1b:
55:87:ea:ba:3e:b2:e6:2a:eb:92:c2:c5:11:60:7e:
b9:30:89:c8:e9:a1:cb:68:6e:f8:ab:0f:a4:f9:a7:
ed:99:d0:4a:32:57:c8:bb:84:a6:55:b5:67:be:50:
54:f1:88:95:62:ab:06:57:ae:8a:01:23:e8:b5:20:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DC:B6:56:3A:42:34:3E:CE:3E:5A:9B:40:DE:18:AD:D4:FF:6A:F7
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:85:b3:f5:22:db:4a:ea:9d:78:db:22:46:a5:2e:24:c4:a3:
78:95:97:17:43:3c:5b:bf:05:a9:55:db:7e:74:96:13:6e:53:
5a:47:2d:9f:f3:6f:bb:5d:0b:fd:91:a2:35:95:21:b5:46:7d:
24:d4:7a:46:bd:f7:94:8e:a1:98:e3:7b:00:3e:f7:a5:d8:f0:
80:08:8d:4d:43:8e:ff:de:89:a9:6f:be:f6:0f:29:4f:b3:af:
64:51:c1:3a:4b:28:bb:be:8e:13:e9:a5:d0:c5:93:97:c2:17:
ea:12:6f:02:d6:8a:23:a7:ef:14:49:f3:1d:d3:b4:ff:d2:85:
6b:9f:64:19:4e:cd:93:3a:d4:9b:d2:e3:8d:9f:5e:8f:d7:9c:
6b:92:f5:af:3b:17:e3:99:c7:4d:cb:0e:ab:5d:5a:6b:29:18:
11:38:97:29:c1:42:ae:ec:d6:2c:18:54:58:68:0a:75:0f:85:
e4:72:ea:9a:20:0a:f0:79:de:2f:02:75:63:83:05:e6:94:27:
86:13:20:33:0f:48:73:d8:5a:bd:f3:41:1a:32:77:71:f6:97:
a0:9a:f7:54:53:af:59:99:65:37:d9:36:10:ad:ac:77:f2:70:
c2:a8:61:a0:c5:24:8c:b9:0a:c6:50:1e:cd:33:4e:80:4b:16:
3f:3e:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:37:11 2026 by rpki-client