Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File: jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier: 9tkRZKttaOz9bU8Rc4rEDyTKOOOZZKmBZm8ixL4suxw=
Subject key identifier: FF:CF:C0:D7:0C:19:C1:A0:9F:57:96:43:13:27:AE:D2:1E:5F:21:E3
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial: 019D371B3DA8A48926CC9B9D9A40C5E62C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number: 038D
Signing time: Sun 29 Mar 2026 01:00:25 +0000
Manifest this update: Sun 29 Mar 2026 01:00:25 +0000
Manifest next update: Mon 30 Mar 2026 01:00:25 +0000
Files and hashes: 1: 0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa (hash: 5FuZkazkiJGDrvBOsL3FrqVNzaE9M0HyAMUTf9d4FZQ=)
2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: p0A5clZh3n6AxFSVW5wa8oW5u0fQEZosKTQafd62mzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3d:a8:a4:89:26:cc:9b:9d:9a:40:c5:e6:2c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Validity
Not Before: Mar 29 01:00:25 2026 GMT
Not After : Mar 30 01:00:25 2026 GMT
Subject: CN=ffcfc0d70c19c1a09f5796431327aed21e5f21e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:49:52:ff:5e:67:e3:03:f4:10:78:b9:ad:
61:f9:92:46:d1:bb:b1:74:cf:38:75:f4:5e:02:8f:
6b:bf:cd:59:9d:4f:79:7f:c2:ae:d1:87:24:be:5b:
c5:c2:e5:e4:bd:19:36:94:66:f9:3b:b1:e3:24:0e:
76:c9:24:69:ad:be:1e:83:73:8f:a8:a6:2e:26:67:
96:50:d9:13:48:bd:90:9c:d0:c2:11:eb:d5:78:cd:
72:8a:70:1c:b8:ee:99:3a:b3:81:82:ec:4b:82:a9:
0e:1b:97:22:52:f8:d8:dd:9e:0d:2b:f0:65:46:4c:
a4:ee:3f:d1:f6:41:48:e0:5f:99:2f:46:6a:ff:24:
fd:ea:7d:a3:8c:0b:70:3c:d4:fc:7a:c9:5a:83:6f:
6b:cf:7c:da:7d:e5:ea:50:4d:35:7b:bf:cf:dc:35:
22:72:61:43:40:49:25:66:a5:9d:a6:e6:4a:3a:d5:
21:11:0c:e8:59:e3:bb:1f:2f:a2:25:6d:34:cf:34:
5f:2d:a0:ac:f5:24:ec:bb:65:58:10:a9:11:6f:62:
c7:5e:d0:23:b2:64:f7:7c:d0:56:ae:50:54:92:3d:
ec:86:5b:01:e8:c4:79:3e:f4:6e:56:59:d3:51:90:
a1:d1:07:3c:72:2f:67:87:ff:94:95:32:7e:a4:74:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:C0:D7:0C:19:C1:A0:9F:57:96:43:13:27:AE:D2:1E:5F:21:E3
X509v3 Authority Key Identifier:
keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a7:33:db:b6:6f:32:b2:cd:1a:7b:9e:9c:69:7f:54:c3:c5:
7f:47:16:50:58:2a:f6:d3:3d:21:f1:28:58:a9:ea:28:d5:0b:
b8:46:84:d1:48:94:8b:01:f0:0f:c4:10:32:58:d7:13:13:90:
64:6a:eb:71:c0:fe:ba:d2:88:e0:bb:2f:e6:5b:66:94:21:96:
be:a9:46:e9:6e:ed:52:63:ce:d2:5b:98:ed:28:d5:a5:10:3f:
d6:16:a7:29:18:c2:e9:ba:ea:d9:2d:ca:19:f3:92:7b:ea:dd:
1c:36:1f:4e:d5:94:6c:60:2c:57:d2:91:94:04:7f:e4:82:c7:
9d:f7:5e:13:5c:ae:f4:98:04:3e:e6:1d:bf:e4:3e:d4:2b:bf:
ac:47:59:9a:e0:c9:46:5b:a3:a4:6b:af:ad:62:4c:0a:ac:43:
bb:71:04:86:cb:d9:a2:19:63:e3:4b:c7:57:ce:b1:7d:a7:84:
d0:f8:19:ae:ed:4a:d5:c4:1c:20:ab:5a:7a:08:fa:f5:80:2d:
c8:f9:ec:76:c7:b6:2a:19:f4:3f:11:c9:3b:ce:6d:50:20:ac:
1f:d2:82:e3:62:2b:c4:9b:67:fc:c8:06:7e:29:87:78:60:d4:
45:9e:59:0f:20:1c:37:43:97:87:f7:8f:39:b0:91:60:e8:f2:
dc:dc:5e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Gz2opIkmzJudmkDF5ix+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODA0NWY5ZGYwOGM1MzA1N2U5ZGY5ZmI3YjdhNTc1MTAz
ZmZmNGEwHhcNMjYwMzI5MDEwMDI1WhcNMjYwMzMwMDEwMDI1WjAzMTEwLwYDVQQD
EyhmZmNmYzBkNzBjMTljMWEwOWY1Nzk2NDMxMzI3YWVkMjFlNWYyMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup5JUv9eZ+MD9BB4ua1h+ZJG0bux
dM84dfReAo9rv81ZnU95f8Ku0YckvlvFwuXkvRk2lGb5O7HjJA52ySRprb4eg3OP
qKYuJmeWUNkTSL2QnNDCEevVeM1yinAcuO6ZOrOBguxLgqkOG5ciUvjY3Z4NK/Bl
Rkyk7j/R9kFI4F+ZL0Zq/yT96n2jjAtwPNT8eslag29rz3zafeXqUE01e7/P3DUi
cmFDQEklZqWdpuZKOtUhEQzoWeO7Hy+iJW00zzRfLaCs9STsu2VYEKkRb2LHXtAj
smT3fNBWrlBUkj3shlsB6MR5PvRuVlnTUZCh0Qc8ci9nh/+UlTJ+pHRF2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/PwNcMGcGgn1eWQxMnrtIeXyHjMB8GA1UdIwQY
MBaAFI2ARfnfCMUwV+nfn7e3pXUQP/9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMt
ODIxZTY5NDEzMTMxLzEvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hNjcxYmYtYWFhMC00ZmQzLTg1ZmMtODIxZTY5NDEzMTMx
LzEvallCRi1kOEl4VEJYNmQtZnQ3ZWxkUkFfXzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPacz27Zv
MrLNGnuenGl/VMPFf0cWUFgq9tM9IfEoWKnqKNULuEaE0UiUiwHwD8QQMljXExOQ
ZGrrccD+utKI4Lsv5ltmlCGWvqlG6W7tUmPO0luY7SjVpRA/1hanKRjC6brq2S3K
GfOSe+rdHDYfTtWUbGAsV9KRlAR/5ILHnfdeE1yu9JgEPuYdv+Q+1Cu/rEdZmuDJ
RlujpGuvrWJMCqxDu3EEhsvZohlj40vHV86xfaeE0PgZru1K1cQcIKtaegj69YAt
yPnsdse2Khn0PxHJO85tUCCsH9KC42IrxJtn/MgGfimHeGDURZ5ZDyAcN0OXh/eP
ObCRYOjy3Nxe9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:55 2026 by rpki-client