Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier: Ys/5uBLLTC1/xWkj+uhwUcBjhS9QQilTFGzCFNhioro=
Subject key identifier: ED:52:BC:F3:E0:BD:09:45:B1:C5:BB:3A:0B:A9:96:60:BD:B1:50:8F
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial: 019D39E56070E26852D2E26B8D50643BD8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 14:00:26 +0000
Manifest this update: Sun 29 Mar 2026 14:00:26 +0000
Manifest next update: Mon 30 Mar 2026 14:00:26 +0000
Files and hashes: 1: 4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa (hash: XBbtmyDxr/MaSevTjNm0YVLmtgk2DlOz9kdPZzWObLc=)
2: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: imf2mRAXvVOVPhVfatpp+x3iiO/Q44dLq7KpCSoB3D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:60:70:e2:68:52:d2:e2:6b:8d:50:64:3b:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Validity
Not Before: Mar 29 14:00:26 2026 GMT
Not After : Mar 30 14:00:26 2026 GMT
Subject: CN=ed52bcf3e0bd0945b1c5bb3a0ba99660bdb1508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:38:8c:27:29:ea:56:fa:3a:7d:9e:07:7a:
63:65:79:db:0d:1e:c5:fa:1e:c5:13:bb:b7:e6:12:
39:3f:79:91:ed:5f:d1:48:46:de:83:9e:52:7d:54:
46:f8:44:ec:5e:5a:31:56:36:0f:49:f3:ef:40:cb:
f1:17:84:2b:0a:6b:7d:78:9b:17:1a:61:ac:9c:f3:
13:f3:36:a8:fb:02:80:42:88:b2:82:1a:00:83:cb:
5e:06:99:82:ea:75:42:4d:0e:d4:15:59:3a:bf:29:
4b:89:ef:c6:53:17:b4:52:06:69:9a:cb:2a:68:2e:
eb:ff:f1:46:6e:33:9c:c4:30:3b:71:4d:c6:23:9a:
c7:5e:00:ee:69:1b:e9:e8:f8:bf:69:fe:d7:2a:b1:
59:3f:83:c6:30:e0:1c:31:62:06:57:ed:7e:88:b3:
1b:39:6a:b2:e2:36:59:3d:cc:dd:eb:2c:46:b8:0c:
51:a4:39:41:c1:ed:e4:da:86:ce:dc:94:c8:99:b1:
32:a0:84:b9:6b:3a:68:b6:8b:af:65:1c:21:40:ed:
d1:da:38:e2:82:12:d1:cc:ce:11:55:04:0e:96:80:
1d:36:39:a0:01:ec:ce:cd:19:b6:cc:5b:72:d2:5b:
61:c7:6c:f8:09:df:71:75:0c:f3:9b:5f:03:d1:52:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:BC:F3:E0:BD:09:45:B1:C5:BB:3A:0B:A9:96:60:BD:B1:50:8F
X509v3 Authority Key Identifier:
keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:95:00:43:db:70:e1:66:88:d1:e2:64:1a:ed:b8:4d:62:
36:0f:b8:52:94:52:c8:30:eb:ae:6e:c4:f8:cb:f1:32:ae:4d:
e2:28:dd:b3:91:ec:09:5c:3b:da:98:f9:63:5f:ab:db:b1:cd:
bf:19:11:9f:4a:f4:85:44:38:bd:b4:80:1a:2d:7a:80:18:a3:
77:5b:89:22:b0:d9:a3:f8:c4:63:6e:2c:45:1b:c3:fc:37:72:
fa:f0:94:52:b1:dc:c3:f2:a6:3b:e7:d8:12:29:2f:a1:88:3b:
ca:e3:5f:dc:fc:fe:9a:99:b0:cd:33:0a:c4:4a:35:21:f0:96:
d6:34:d6:3a:0a:a0:10:07:12:6d:bf:b1:70:d6:fc:3a:61:a3:
06:80:3e:21:c4:c1:70:cd:53:5e:1e:c3:25:df:48:78:22:a1:
a4:18:da:2d:08:9e:15:be:ff:ae:78:40:ac:8c:12:ca:13:64:
9c:d3:55:9f:26:e5:82:07:44:2d:5f:d4:4b:f7:86:5d:5c:0d:
fb:18:3e:7f:c2:c7:55:5c:28:91:ad:4d:8d:82:3e:0a:31:78:
ad:be:6d:e1:d1:11:bb:cc:1b:c5:40:a3:8b:56:6e:f3:b0:cb:
15:ae:ed:d1:b3:7b:12:db:0c:5e:2c:0c:15:29:6a:70:56:70:
59:15:ce:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055WBw4mhS0uJrjVBkO9irMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTYxZGZjNWY3MGJmMWI3NmYwNWU0NGE3NGVkMDI5MzEy
NWU0YmUwHhcNMjYwMzI5MTQwMDI2WhcNMjYwMzMwMTQwMDI2WjAzMTEwLwYDVQQD
EyhlZDUyYmNmM2UwYmQwOTQ1YjFjNWJiM2EwYmE5OTY2MGJkYjE1MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp44jCcp6lb6On2eB3pjZXnbDR7F
+h7FE7u35hI5P3mR7V/RSEbeg55SfVRG+ETsXloxVjYPSfPvQMvxF4QrCmt9eJsX
GmGsnPMT8zao+wKAQoiyghoAg8teBpmC6nVCTQ7UFVk6vylLie/GUxe0UgZpmssq
aC7r//FGbjOcxDA7cU3GI5rHXgDuaRvp6Pi/af7XKrFZP4PGMOAcMWIGV+1+iLMb
OWqy4jZZPczd6yxGuAxRpDlBwe3k2obO3JTImbEyoIS5azpotouvZRwhQO3R2jji
ghLRzM4RVQQOloAdNjmgAezOzRm2zFty0lthx2z4Cd9xdQzzm18D0VIwjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1SvPPgvQlFscW7OguplmC9sVCPMB8GA1UdIwQY
MBaAFPyWHfxfcL8bdvBeRKdO0CkxJeS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDIt
NTAyOWQwYzk5OWI2LzEvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDItNTAyOWQwYzk5OWI2
LzEvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnWVAEPb
cOFmiNHiZBrtuE1iNg+4UpRSyDDrrm7E+MvxMq5N4ijds5HsCVw72pj5Y1+r27HN
vxkRn0r0hUQ4vbSAGi16gBijd1uJIrDZo/jEY24sRRvD/Ddy+vCUUrHcw/KmO+fY
EikvoYg7yuNf3Pz+mpmwzTMKxEo1IfCW1jTWOgqgEAcSbb+xcNb8OmGjBoA+IcTB
cM1TXh7DJd9IeCKhpBjaLQieFb7/rnhArIwSyhNknNNVnyblggdELV/US/eGXVwN
+xg+f8LHVVwoka1NjYI+CjF4rb5t4dERu8wbxUCji1Zu87DLFa7t0bN7EtsMXiwM
FSlqcFZwWRXO6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:52 2026 by rpki-client