Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: BCZ6A9YwV29U9w2I2U7Gwpiw0POLWCdNB+3+MEw8DP0=
Subject key identifier: DA:4E:4D:46:AD:48:A8:9D:F0:70:68:03:C9:81:85:10:4F:69:58:36
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 01A06EDE582080CCDCFFACFDAC586F758B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 1408
Signing time: Sat 05 Sep 2026 00:01:00 +0000
Manifest this update: Sat 05 Sep 2026 00:01:00 +0000
Manifest next update: Sun 06 Sep 2026 00:01:00 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: tCrerPCyNJhJPzjIaOVELDZ1FGY20IHb+thAwjq+6Qw=)
4: rP1URTYVfd_9XdYb3WISbeQbVvs.roa (hash: IQMQ/usDnC3qoYl80XNrpZJSW6cDKlPPV05RatnNmDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:58:20:80:cc:dc:ff:ac:fd:ac:58:6f:75:8b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Sep 5 00:01:00 2026 GMT
Not After : Sep 6 00:01:00 2026 GMT
Subject: CN=da4e4d46ad48a89df0706803c98185104f695836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:73:55:71:14:a8:90:2c:59:0c:11:50:12:
1f:4e:2e:ef:7e:32:fa:d1:23:53:5c:aa:0b:3d:73:
f3:e1:a6:4c:61:ca:02:fd:19:f6:8c:54:5c:10:f3:
79:13:59:a4:8f:ea:a5:6c:59:a7:b8:b0:cc:e5:2d:
1d:6f:8e:b3:2f:5c:5d:61:36:18:41:47:f0:62:37:
f7:59:76:ae:30:2e:6f:62:56:3d:2a:5a:1e:4f:8b:
87:2e:5e:a0:89:f7:d9:be:1c:1b:2e:ce:05:1c:97:
94:6b:cb:b6:69:40:bb:c1:79:22:a8:1e:31:32:60:
70:75:85:03:bd:02:1a:cf:35:17:39:ae:f6:9f:38:
f0:b2:42:b7:10:d0:1b:6d:19:d3:f1:3e:49:b4:2c:
9d:bc:03:17:a2:70:48:40:29:48:b5:eb:37:f5:f8:
43:83:3f:f2:6f:de:be:d2:f8:c1:ee:35:41:06:e4:
7a:29:93:01:7c:47:6c:dc:37:9b:69:36:37:26:6d:
d3:84:6e:dd:70:d7:22:e2:d1:78:76:f5:b3:e7:7c:
56:24:0e:42:c0:41:db:6f:6c:c1:1e:bd:e3:ff:cd:
78:b5:63:96:37:3a:03:23:8c:c1:80:0f:66:c3:9a:
fd:c2:45:f7:ac:a0:7e:57:f2:5d:dd:43:50:a5:17:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:4D:46:AD:48:A8:9D:F0:70:68:03:C9:81:85:10:4F:69:58:36
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:60:ba:3e:3c:ce:07:a3:e7:e4:98:24:f4:ab:98:02:bf:
48:56:47:27:b5:63:d5:bd:af:26:f9:56:7c:69:d5:7e:96:c5:
f1:d2:6d:8a:23:b9:cd:8b:00:4b:2d:b6:61:a6:e3:73:36:1f:
0f:be:df:6a:df:b5:40:e2:9c:69:38:7d:6f:c0:27:37:5b:84:
8e:d3:c9:53:d5:b1:36:70:ea:84:04:44:0d:da:f8:12:e0:ef:
f6:68:b1:a6:c0:b3:cf:84:d7:4f:fb:92:95:31:d1:05:c5:f8:
77:13:6f:58:4b:b8:e2:53:1c:81:e5:22:7e:a3:7f:5f:27:bd:
dd:4d:19:2a:65:23:e0:37:58:1f:eb:07:e8:e3:16:49:5f:d4:
ad:71:76:6a:bd:01:37:a5:f4:72:cb:23:9b:3e:ee:e8:79:5e:
cf:87:d9:8f:e0:d8:4c:f9:82:8d:ad:39:1a:72:d9:ab:9c:60:
98:20:0c:bb:6f:a9:c2:2d:29:dc:69:0e:31:19:99:70:97:cb:
a8:2f:d6:38:ea:2e:c5:8f:01:32:3c:cb:c0:a5:79:13:c9:02:
34:31:09:0a:d4:d7:3a:bf:bd:f8:98:25:a2:53:a5:b4:7d:58:
ed:bb:5f:a4:4f:0e:72:1c:b4:a7:c8:9a:37:2b:dd:20:2f:ed:
f0:b0:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:12 2026 by rpki-client