Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: n+0ZJFWjR9ln2hW095O824YNwOBJ/otoZhltNhTseYM=
Subject key identifier: 7F:D8:13:7B:B5:C5:95:7A:32:5D:89:38:D0:41:BF:89:FC:69:61:E2
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019F111BD5D7B31B10DD8B4B23C90421F87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 19AF
Signing time: Mon 29 Jun 2026 02:01:04 +0000
Manifest this update: Mon 29 Jun 2026 02:01:04 +0000
Manifest next update: Tue 30 Jun 2026 02:01:04 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: CSsfJbGKjZrIw/mnjQuXFEcV9vSmcuYI1lzZigrB/qg=)
7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:d5:d7:b3:1b:10:dd:8b:4b:23:c9:04:21:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jun 29 02:01:04 2026 GMT
Not After : Jun 30 02:01:04 2026 GMT
Subject: CN=7fd8137bb5c5957a325d8938d041bf89fc6961e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:ff:e6:b0:ee:a0:cf:70:34:94:17:b2:43:
99:ff:4d:98:71:8a:f1:d4:1d:fc:da:ff:a2:35:3a:
d4:2b:65:84:70:de:d8:8b:20:50:a3:01:b6:aa:d5:
e3:93:94:b9:66:f1:b4:ab:e2:bc:1c:37:ea:97:21:
ec:79:23:28:59:54:fd:83:c3:f1:32:6d:1a:3e:1e:
d7:45:c7:54:79:94:b0:18:bc:99:b4:f6:c1:1b:21:
a6:24:39:73:56:42:25:60:84:6d:eb:c9:5b:14:85:
a1:3a:06:e1:26:b8:fa:22:51:48:10:ec:00:71:88:
2c:71:2b:ad:b8:d5:2e:e9:56:0d:39:44:d8:ba:34:
9d:17:12:f7:27:14:56:44:16:58:83:bd:4b:bf:8f:
bd:fe:cc:44:8b:ed:36:e6:c4:f5:c8:a8:52:8b:b9:
09:94:e5:9f:e2:6a:dc:6e:97:2f:19:3f:54:80:61:
0c:64:83:83:9b:a2:3a:97:cf:84:5f:f2:ef:a6:73:
62:b7:60:50:10:e4:8e:5f:2a:5f:2f:b8:ec:08:42:
99:3c:af:48:60:f5:c9:48:a4:4e:c1:2a:24:9c:a2:
20:a0:cc:0d:72:f8:ea:2f:f6:fb:76:95:63:90:8d:
99:9f:75:7f:b3:4d:13:d1:44:06:df:d5:df:fc:0b:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:13:7B:B5:C5:95:7A:32:5D:89:38:D0:41:BF:89:FC:69:61:E2
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fd:c6:b3:1d:74:ce:89:8b:9a:55:3d:39:bd:5a:3f:57:6f:
c5:72:bb:3d:3e:7a:37:3d:68:fc:46:91:32:fd:45:d2:99:c5:
70:01:1c:d2:a5:f6:06:60:92:7b:5a:49:92:a2:ca:c3:dc:b2:
07:c3:a5:6c:4e:00:ae:68:5a:7b:bc:ba:e2:dd:55:b9:15:8f:
12:39:d5:50:88:82:87:e9:51:85:6d:95:50:fc:d7:6d:9c:27:
7b:1b:0a:79:f1:5e:68:d8:f5:b7:c6:95:1a:6e:d6:dd:ef:83:
f7:41:29:1c:ef:98:43:ec:f1:16:e0:f5:33:2b:14:00:b5:e6:
d0:0e:5c:d3:b3:4c:b2:c2:1a:34:e6:63:d0:90:e1:3e:11:a5:
88:73:97:48:08:a4:07:ea:08:06:0c:b9:75:d7:b3:3f:a8:2b:
7f:c2:12:45:4a:67:e9:70:b4:34:ad:c2:e8:b7:eb:d7:87:74:
dd:72:ff:1a:fb:a4:95:7f:81:2a:9d:9c:72:10:3e:de:7d:18:
52:a2:2c:65:9a:8e:05:1e:84:3f:77:a7:76:41:3f:6a:9b:08:
2e:7e:b2:f9:08:46:3b:c5:9d:b0:44:b6:0a:89:fa:d8:f8:86:
24:65:36:0a:dc:c1:54:02:a0:0a:b1:19:33:3b:0b:47:a7:ea:
08:ee:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:32 2026 by rpki-client