Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: +h60M2ICfZ/tJ8QFKjtf6Y6vGPQucZvhKJKDo3qjQXQ=
Subject key identifier: 4A:E2:BF:95:4A:B4:22:6B:DB:0F:EE:45:09:18:F0:36:C2:8C:69:A1
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019F130A236AFFFA719B1169BD7A666FE7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 19B0
Signing time: Mon 29 Jun 2026 11:00:59 +0000
Manifest this update: Mon 29 Jun 2026 11:00:59 +0000
Manifest next update: Tue 30 Jun 2026 11:00:59 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: KgPHlh5N8AP5jpHTofSb7qCVetOt8eG4z9ETZWCwuvY=)
7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:23:6a:ff:fa:71:9b:11:69:bd:7a:66:6f:e7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jun 29 11:00:59 2026 GMT
Not After : Jun 30 11:00:59 2026 GMT
Subject: CN=4ae2bf954ab4226bdb0fee450918f036c28c69a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:0d:7e:5f:19:26:d5:f1:bc:91:72:49:13:
bd:a2:0b:7f:63:ae:a2:69:a6:bb:49:c0:e5:d9:14:
aa:a6:4d:87:f0:42:7f:fd:05:e6:da:2a:4c:87:e0:
bb:76:dd:00:ec:81:b8:1e:07:6c:ab:d8:77:25:8e:
d0:b4:a3:0f:d8:7a:4a:31:e6:3e:1b:c0:8e:ad:14:
15:98:12:99:3d:6a:7d:5d:dd:b9:a3:60:07:21:c6:
3d:5e:c4:4a:dd:69:2e:7e:e2:df:6f:f7:e5:98:ad:
79:d9:ce:6a:53:55:52:fd:e0:f6:52:0a:a8:8a:ee:
a8:f8:27:1f:cf:f4:bb:3b:80:22:82:d9:64:54:95:
82:0b:41:e5:7d:24:a3:b0:88:ac:59:dd:18:48:50:
92:4d:3f:03:3c:3c:cd:32:07:47:61:b6:b2:b2:3c:
50:00:d8:d8:84:2a:c3:21:2f:61:83:60:f5:d1:28:
70:fc:bc:68:e2:a9:d0:0d:ee:ae:1f:f7:02:e1:43:
34:22:e0:45:f8:95:cf:31:c2:bd:82:e6:73:70:60:
47:bd:53:af:a9:41:5c:26:14:86:68:f7:4a:6e:33:
e4:43:06:11:bd:b2:d8:1b:91:e6:60:1d:51:5f:1e:
aa:73:21:25:55:d2:1e:05:9b:ed:6b:8b:22:fe:67:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:BF:95:4A:B4:22:6B:DB:0F:EE:45:09:18:F0:36:C2:8C:69:A1
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:3b:40:da:5b:06:2d:5b:44:83:f6:24:d6:e0:8c:74:aa:
1b:ab:76:b1:db:b2:42:5c:bd:3e:cd:60:45:95:47:92:c1:a0:
2f:75:08:ef:74:9b:ea:b1:87:23:d6:b7:e5:74:f5:3b:47:be:
ba:8e:c7:73:a4:73:08:09:46:3d:7a:1d:59:a4:35:c3:ca:6c:
99:1f:11:d9:50:61:5a:3b:83:12:ee:4e:5b:f4:b2:d4:61:b3:
3e:58:8f:7c:03:99:f7:da:74:2e:a9:20:9a:e6:77:6d:ce:e7:
31:a3:b3:3e:21:45:0c:4f:0f:a7:e4:4a:c5:12:aa:0e:9f:f5:
88:d4:6b:e1:59:d5:25:b3:09:c0:98:c6:d8:4d:f5:48:d7:60:
28:b6:51:9c:a9:c4:d6:39:2c:79:5b:b7:6f:d3:f8:b8:84:23:
af:94:87:54:71:82:59:32:34:46:07:29:cd:b4:12:9c:c9:0b:
bf:cc:a9:3b:17:bb:6e:fb:ec:28:e1:fd:35:cf:00:52:23:44:
da:a5:51:b4:c1:33:43:03:b9:f5:cd:ec:54:25:f8:08:39:6e:
04:ca:da:2d:43:a0:60:74:d9:3a:3f:68:7a:c5:9f:b6:8e:e9:
78:b7:a3:35:45:57:9b:76:35:47:e7:bd:26:f1:97:ab:ce:55:
2e:8e:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:45:42 2026 by rpki-client