Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: VGukDjiWpn2ARbAqKzHuTwogo7eEo0IWbYDjDBIZpwY=
Subject key identifier: 1A:A7:0E:8F:D4:BB:41:80:7D:B1:C0:7C:84:05:BF:56:FC:A9:6C:1D
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019CC9E3B4316FE0B84103B0D4A3EC312B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 1223
Signing time: Sat 07 Mar 2026 20:01:09 +0000
Manifest this update: Sat 07 Mar 2026 20:01:09 +0000
Manifest next update: Sun 08 Mar 2026 20:01:09 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: bZWk4AhB-ix13SfItg99WGR-iHE.roa (hash: /vtIcpptaY2u+l35mug1F/OipcmBaaaq9NSFgSW4I9A=)
4: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: 6uku4LWVmJDZuyNjSfXUwkkhSS1P3icX4kxkfNMi8Jg=)
5: rBfN5hySaU80pvKscbKLqXudBew.roa (hash: +ftjLdDbJ5p8switUZfvGRrNauB6kY6yhwTaJeXxA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:e3:b4:31:6f:e0:b8:41:03:b0:d4:a3:ec:31:2b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Mar 7 20:01:09 2026 GMT
Not After : Mar 8 20:01:09 2026 GMT
Subject: CN=1aa70e8fd4bb41807db1c07c8405bf56fca96c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:9b:f4:47:6d:10:f0:18:1c:e1:64:91:ae:
9d:3e:b6:d6:31:16:81:f5:1a:f7:df:af:85:f8:23:
f0:64:a0:96:25:8b:cd:d5:ed:2c:ef:4e:e7:b1:4f:
7c:d8:da:81:59:02:41:22:c9:b1:32:be:e2:46:2d:
3f:58:b8:35:bd:53:df:53:23:0e:ab:5a:a6:f3:b5:
46:65:5e:52:87:3d:e4:34:d9:b5:a1:1b:8b:28:bd:
76:a4:fa:68:dc:ab:e5:bb:cb:b4:10:02:80:e0:88:
96:b5:15:de:11:77:48:53:ed:89:47:e1:75:77:aa:
5f:5c:d8:02:94:0b:28:a5:9b:59:73:d2:46:f6:fa:
4a:c6:00:0a:33:3a:63:8e:c2:72:fa:be:30:5e:ba:
9b:55:71:fc:1a:82:0f:2b:67:50:41:d2:de:3e:12:
8e:57:89:ac:fb:fc:06:83:fd:ee:85:40:23:98:11:
ef:8f:10:b5:2e:3b:08:bc:0b:1c:d1:84:fa:fd:6b:
40:2f:d4:2f:5c:56:a5:ce:20:a1:70:84:a0:a8:95:
24:f5:3b:d8:b3:f0:bd:d5:5f:e0:81:a4:c4:7d:56:
f1:1b:9f:e4:42:0c:d1:f1:ff:da:ca:db:ce:66:b0:
66:9a:f4:dd:0b:dd:13:69:c0:22:d0:10:18:ac:a6:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A7:0E:8F:D4:BB:41:80:7D:B1:C0:7C:84:05:BF:56:FC:A9:6C:1D
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b4:80:ee:c3:f9:ce:7d:b1:65:4f:f7:78:34:44:cc:06:4d:
32:b8:c4:92:72:0c:8d:ab:ef:c1:46:16:10:a9:ee:7d:17:c7:
86:e7:05:5d:44:f4:d5:47:4e:62:88:98:d9:18:5f:94:a6:5a:
0f:54:5d:d9:bc:24:d1:73:c6:db:3c:95:0b:51:99:03:61:18:
a5:94:f7:99:7b:47:28:71:64:df:b0:72:c2:a9:58:1f:52:9a:
d4:70:dc:cd:b6:e7:20:73:80:92:7e:15:90:cb:df:ae:bf:33:
43:2c:0b:cc:99:97:15:71:d7:10:cb:f0:02:99:3c:83:0d:1d:
11:1c:78:23:af:4e:37:c7:4d:57:79:d0:3b:48:6e:c8:69:6a:
07:50:cd:57:46:12:68:3a:77:ee:c0:af:0d:8e:a3:79:08:ba:
d1:71:66:5b:6a:bd:c5:af:fe:08:14:e6:25:1f:d5:8c:d7:bd:
8f:db:38:7b:06:46:06:83:ae:6b:a1:b5:30:68:e2:f2:35:e0:
da:d2:df:7f:ba:cb:3e:09:17:fc:c1:f1:da:7d:25:21:bc:fe:
df:0c:4a:f6:98:19:f1:d0:f9:15:39:9b:13:12:72:9d:b4:b8:
d5:87:14:8a:e4:8c:7f:7e:cd:d1:4a:97:6f:70:f7:0b:08:fd:
26:46:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:45:06 2026 by rpki-client