Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: MN+hQrgykzk6PyeH4lEi2O1FHRaw0pIIgeiCUBj0Fo4=
Subject key identifier: F2:61:02:5E:C2:BC:BB:AE:B1:E6:83:B1:AD:62:EE:C7:1D:A0:E3:E8
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019DB1A183BBD026BA685CFA93E5E2A2ACE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 129B
Signing time: Tue 21 Apr 2026 20:00:45 +0000
Manifest this update: Tue 21 Apr 2026 20:00:45 +0000
Manifest next update: Wed 22 Apr 2026 20:00:45 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: bZWk4AhB-ix13SfItg99WGR-iHE.roa (hash: /vtIcpptaY2u+l35mug1F/OipcmBaaaq9NSFgSW4I9A=)
4: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: 3hX4Vt/oYaKxxqJjDpoTa6tC6KgIMgsyn/VDwXhkXVk=)
5: rBfN5hySaU80pvKscbKLqXudBew.roa (hash: +ftjLdDbJ5p8switUZfvGRrNauB6kY6yhwTaJeXxA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:83:bb:d0:26:ba:68:5c:fa:93:e5:e2:a2:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 21 20:00:45 2026 GMT
Not After : Apr 22 20:00:45 2026 GMT
Subject: CN=f261025ec2bcbbaeb1e683b1ad62eec71da0e3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:86:5a:cb:a3:60:cd:a4:68:6a:90:6b:59:
18:db:03:d5:f8:65:f1:0f:9b:2c:53:74:db:61:36:
03:53:36:aa:a5:8a:65:13:17:a6:78:ac:9a:34:21:
3b:32:dd:35:75:01:a7:e2:45:d1:9e:29:24:a0:e8:
2c:c5:8b:95:54:bf:0d:05:5e:bb:6d:7c:28:55:ba:
81:5b:d9:05:c8:4c:05:9c:f1:dc:ad:05:59:18:68:
62:44:fa:e2:4c:9d:de:e2:2f:80:34:1e:5f:33:57:
82:54:2a:45:9a:0b:22:94:71:5a:07:10:d6:e7:6c:
00:e5:c5:62:f5:9f:0b:3d:74:e8:83:b3:65:13:da:
58:55:fe:ea:f7:c0:08:9d:b3:2b:32:97:73:93:d7:
a4:be:30:45:f7:c1:1b:12:30:48:db:2d:18:af:08:
6c:d9:e1:09:0d:02:18:0b:de:30:bb:d1:64:82:3e:
df:4e:5f:96:a7:8c:6a:f0:c9:70:8d:2a:f4:2d:a4:
0c:b1:59:02:2b:2e:f9:4b:e2:18:de:cb:b6:61:f2:
40:ac:85:86:bb:b3:bb:1b:3a:6d:fc:8e:d2:48:00:
3d:63:2f:bd:ea:dd:ce:98:a3:a5:a2:03:04:3e:6c:
c0:48:3f:ac:8a:6e:da:e9:2a:18:71:6c:e7:5f:94:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:02:5E:C2:BC:BB:AE:B1:E6:83:B1:AD:62:EE:C7:1D:A0:E3:E8
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:8b:85:e2:1a:0f:f3:81:c4:b7:da:3f:8d:64:71:8f:f2:
e9:17:bb:da:0b:db:4b:f5:fb:0d:44:e1:a6:71:23:5c:ab:ba:
a1:9a:cf:13:fd:84:95:64:c0:79:28:68:66:6c:96:39:98:fe:
69:d2:05:f9:5f:b6:a2:11:28:53:4f:58:b4:fd:a0:3c:f4:6c:
fe:a7:78:62:13:cd:4f:e5:8a:4c:c4:18:b8:c6:d3:f3:7f:a9:
9b:19:f7:2a:eb:20:94:1d:42:be:85:b3:c4:d8:0d:85:8a:0d:
91:cc:40:6e:11:76:9a:78:c8:05:96:59:48:9c:00:a8:5d:d3:
d2:f6:bc:47:de:ac:9e:38:74:c9:dd:cf:09:4d:b9:48:a7:9d:
f8:58:90:b5:9c:98:5c:25:91:91:2a:4b:f1:fc:36:50:69:c8:
d4:d1:2a:a8:31:3a:63:d8:10:48:13:89:4d:fe:25:2a:58:ee:
66:82:4a:a4:b2:7f:89:63:3a:52:f7:ee:38:39:9d:d7:03:10:
7a:bd:ad:32:fb:bf:52:ad:bd:0a:f0:ee:36:d3:c2:a6:e6:34:
d9:86:63:bd:64:99:fe:c1:b9:d7:3d:05:b6:7d:96:c4:b6:38:
0e:48:73:66:62:6b:50:98:f0:53:49:ea:04:29:d6:9e:a4:cc:
02:a8:61:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xoYO70Ca6aFz6k+XioqznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjYwNDIxMjAwMDQ1WhcNMjYwNDIyMjAwMDQ1WjAzMTEwLwYDVQQD
EyhmMjYxMDI1ZWMyYmNiYmFlYjFlNjgzYjFhZDYyZWVjNzFkYTBlM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aCGWsujYM2kaGqQa1kY2wPV+GXx
D5ssU3TbYTYDUzaqpYplExemeKyaNCE7Mt01dQGn4kXRnikkoOgsxYuVVL8NBV67
bXwoVbqBW9kFyEwFnPHcrQVZGGhiRPriTJ3e4i+ANB5fM1eCVCpFmgsilHFaBxDW
52wA5cVi9Z8LPXTog7NlE9pYVf7q98AInbMrMpdzk9ekvjBF98EbEjBI2y0Yrwhs
2eEJDQIYC94wu9Fkgj7fTl+Wp4xq8MlwjSr0LaQMsVkCKy75S+IY3su2YfJArIWG
u7O7Gzpt/I7SSAA9Yy+96t3OmKOlogMEPmzASD+sim7a6SoYcWznX5Ta/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJhAl7CvLuuseaDsa1i7scdoOPoMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKGLheIa
D/OBxLfaP41kcY/y6Re72gvbS/X7DUThpnEjXKu6oZrPE/2ElWTAeShoZmyWOZj+
adIF+V+2ohEoU09YtP2gPPRs/qd4YhPNT+WKTMQYuMbT83+pmxn3KusglB1CvoWz
xNgNhYoNkcxAbhF2mnjIBZZZSJwAqF3T0va8R96snjh0yd3PCU25SKed+FiQtZyY
XCWRkSpL8fw2UGnI1NEqqDE6Y9gQSBOJTf4lKljuZoJKpLJ/iWM6UvfuODmd1wMQ
er2tMvu/Uq29CvDuNtPCpuY02YZjvWSZ/sG51z0Ftn2WxLY4DkhzZmJrUJjwU0nq
BCnWnqTMAqhhsQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:25:15 2026 by rpki-client