Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: Q+pnfZMXIgU0HsFB7PNQurzp5+WQJOGKm2Hf4l9bw+Y=
Subject key identifier: 56:B1:59:7E:65:76:A9:0C:5F:94:6D:E1:77:E5:90:A0:22:1A:B5:1F
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019D39780C6B687AC289C0A4BE6032EF85B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 18BA
Signing time: Sun 29 Mar 2026 12:01:01 +0000
Manifest this update: Sun 29 Mar 2026 12:01:01 +0000
Manifest next update: Mon 30 Mar 2026 12:01:01 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
4: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
5: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: 8c4b2ihZCyETOYgJrPO41zVJ8DAtFcF7uWBtXFP1IqA=)
6: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
7: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
8: xRX3eIjahO4puPTf1ETFcIeZtqM.roa (hash: uyFEZOqDVgGWkkphz2xd63YtUHxoX2hF8v7uVO62XeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0c:6b:68:7a:c2:89:c0:a4:be:60:32:ef:85:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Mar 29 12:01:01 2026 GMT
Not After : Mar 30 12:01:01 2026 GMT
Subject: CN=56b1597e6576a90c5f946de177e590a0221ab51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:4d:a9:56:05:70:e1:c1:83:77:5e:e5:53:
78:db:d9:8f:b7:1e:0e:80:24:7a:49:2b:44:5f:0b:
c0:03:bd:b7:75:23:5d:ec:45:1f:c3:cc:ed:32:a8:
30:a4:03:a2:2f:5d:b9:f4:13:3b:09:31:88:62:a1:
f8:3f:7b:f9:f6:4c:10:5b:33:4b:78:4a:84:bb:73:
ad:fe:0a:44:f6:66:cc:6a:56:8d:d1:c6:41:59:58:
66:05:50:b9:66:7c:60:43:f3:4d:ae:64:b3:e1:3e:
f3:ce:da:5f:54:2c:69:b9:e1:46:2a:b9:c1:50:24:
a7:f0:1d:54:98:29:c5:80:df:5e:79:0e:df:fa:e3:
f2:97:4f:49:a8:e4:3e:4b:dd:63:f5:80:9a:42:f9:
06:be:56:df:dc:68:e0:ea:52:8c:db:22:79:9f:40:
d8:18:67:ae:20:0a:63:26:5d:05:98:88:15:23:7d:
34:62:3f:c3:67:87:ec:d5:1f:de:2a:c4:69:43:bc:
a6:ac:9b:31:b5:9a:ee:f6:a7:02:23:b9:46:4e:17:
c3:27:f3:b6:c9:0c:de:14:c8:d8:c2:66:7a:c8:71:
a0:70:41:8b:36:19:51:fa:d3:ba:6c:88:b9:ac:c7:
be:5a:cd:30:3d:56:5d:63:cd:dc:48:5d:c1:60:67:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B1:59:7E:65:76:A9:0C:5F:94:6D:E1:77:E5:90:A0:22:1A:B5:1F
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dd:42:f4:78:d9:93:6f:b5:18:2a:97:d8:b5:7b:a4:54:0f:
19:d3:52:36:71:b3:d5:0d:6d:9c:02:57:94:00:00:d5:6a:18:
67:52:86:8c:e3:14:6f:05:f8:6c:41:bc:ab:25:71:01:ad:8a:
48:d5:70:b9:26:8f:13:dc:fb:ab:a0:1f:43:70:e0:d8:71:33:
a2:f3:6b:36:be:fe:2d:e7:1b:42:25:95:21:f8:81:22:85:bd:
e9:be:c4:b0:bb:9d:97:8f:9f:26:ab:84:75:6e:fc:db:77:2a:
2c:a1:ed:08:91:25:ce:8b:4b:31:6a:b0:dd:05:13:ba:68:9c:
ed:5d:98:bd:b3:f7:41:f0:74:67:97:3a:43:7c:d7:18:5d:53:
07:44:ac:be:6f:70:ab:6f:1e:38:4f:4f:f5:d3:2e:51:62:15:
ab:4e:3c:26:db:53:58:ec:2a:56:f4:69:92:c4:b6:18:17:b8:
bc:95:59:35:89:d8:a4:ff:55:95:a4:b1:fb:b5:66:59:f2:63:
54:df:18:0a:b7:91:75:4b:aa:99:41:81:74:e0:b5:7d:c0:a7:
5e:1b:58:94:ed:92:d9:9e:43:2e:45:f2:a4:fd:73:2a:5a:e4:
61:93:a8:43:d8:ab:2e:b9:a2:c8:db:b0:dd:fa:70:24:11:46:
af:5a:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:03 2026 by rpki-client