Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier: lgY0Sp9KghuWJzCULLpqSrAaYWNhOY9pCazA5OusjOk=
Subject key identifier: 4D:DB:A8:E5:99:4D:03:1E:1D:96:36:87:26:88:17:F0:7D:23:F9:44
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 019D386683C3CA47CCDD4B43690B94F85878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number: 052D
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: 7AHIpDEp/AOsV1uCHGR0liwnNgVZp7gt9PmkQl5xUqA=)
2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:83:c3:ca:47:cc:dd:4b:43:69:0b:94:f8:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=4ddba8e5994d031e1d963687268817f07d23f944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:22:f5:b2:5b:c0:fd:76:95:63:a6:8e:57:
e6:49:72:ce:ec:19:cb:d0:a9:8a:58:27:d0:d9:77:
7f:bc:28:2a:8f:13:8b:81:e9:29:61:49:55:91:2a:
5d:70:8f:76:98:55:17:24:bd:4c:4a:eb:6e:87:e2:
ee:60:5e:56:ce:76:91:7e:f6:1b:af:48:74:50:b6:
b1:19:6a:43:70:5c:68:63:62:ed:28:1e:ed:2e:ed:
f1:9e:51:43:c8:f0:1e:ac:43:8d:72:d3:e9:3e:38:
36:89:dc:47:dd:85:2c:c2:43:e1:4f:37:6f:c0:b7:
20:6a:41:6a:ea:6d:e0:0b:50:94:2b:2d:4c:59:df:
55:bd:40:3c:c9:c1:7f:25:de:6c:43:22:3b:89:8f:
5e:af:c6:9d:7f:fd:ed:e1:ce:23:99:04:9b:d6:b8:
f4:ae:39:84:b6:22:4f:47:4b:2e:5f:ad:07:a6:8f:
45:40:e2:b1:15:ca:33:4a:50:05:ea:79:47:01:8a:
70:8d:e2:00:c4:e5:f3:a1:25:b4:83:f0:ba:00:55:
79:4f:be:b9:5f:84:44:75:53:ee:30:02:c5:46:b2:
6b:06:c4:f7:85:39:b1:91:3f:6d:5d:1a:00:22:c2:
3b:0d:23:0c:25:a9:68:7f:9a:1c:0b:51:82:8d:eb:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DB:A8:E5:99:4D:03:1E:1D:96:36:87:26:88:17:F0:7D:23:F9:44
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:27:59:a9:5e:58:62:d4:f6:62:34:3e:58:f7:2c:0f:5a:bb:
a4:74:fc:30:09:a5:14:a7:9f:30:1d:94:27:1b:71:d3:79:85:
61:58:10:96:db:cc:9f:27:24:15:5b:f4:71:1d:69:f2:a0:e4:
95:db:bd:95:7c:fc:49:c5:ef:ca:f4:01:0e:23:fb:e6:68:a8:
65:12:e9:04:d7:b2:00:5d:a2:49:c3:79:65:76:77:14:08:54:
32:7b:d9:64:27:1c:cf:ea:a2:df:96:fd:86:38:b7:af:d3:48:
9f:eb:27:de:9b:89:29:7f:c1:8d:b6:68:71:b4:8d:4b:b5:e7:
fc:fa:93:92:aa:dc:2f:07:27:3f:fb:f0:c9:33:3a:f6:93:a0:
da:10:2e:f3:17:81:98:32:28:2f:89:4d:18:22:79:83:55:9d:
80:98:fa:b5:f9:8a:35:7b:ed:b5:e4:c4:9a:a3:cd:c3:e2:f7:
4a:36:33:4a:21:a7:8b:7b:7d:e3:37:fc:14:bf:f0:d0:8e:d0:
e3:5a:03:4a:bf:79:94:8a:26:b0:3b:36:e0:a8:fa:54:c9:51:
38:90:2b:d4:ba:08:e8:38:21:54:42:f1:e0:bc:07:21:71:94:
bc:e3:ce:cf:7a:17:b1:b0:ad:bb:61:01:5a:9e:73:d3:c7:c2:
92:0f:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:09 2026 by rpki-client