Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: jQ+1W2BTLy21+Co6k+mmk2xz+C5hPRIpXILkOq3JRSM=
Subject key identifier: 99:7D:98:3D:18:67:15:DC:A3:E2:E2:02:CF:5E:0F:18:D6:86:A9:32
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019D3865C0C1772FC2062AE9C3E387C6F288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0C25
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: SGsCpP2ZWGXYubQPTxvrVXR66kw.roa (hash: JIt4ruXWa/YENYi1/1J1PLXj88CikR7IDYWni7Zr0vM=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: ohgsFlsX4PNcpmqUTCVdEqQvvaMwlLtdcPt+wvmVrVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c0:c1:77:2f:c2:06:2a:e9:c3:e3:87:c6:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=997d983d186715dca3e2e202cf5e0f18d686a932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:5c:b6:b2:4e:63:c8:04:a2:73:9f:e3:1d:
50:3c:90:2d:76:18:33:4f:7d:8a:1f:1c:6b:d9:15:
a4:4b:12:1b:e6:b0:80:b6:9a:5a:dd:f8:f5:02:f0:
93:89:c9:68:d8:c5:b2:a4:57:18:72:4a:c1:e1:42:
49:ff:66:24:7e:93:f3:8a:45:f8:0f:98:ef:51:91:
ec:f7:f6:65:9e:65:57:05:c6:5a:ec:fa:b7:44:71:
c7:4a:b6:36:2e:03:38:6b:73:6f:22:c9:02:8d:e5:
47:ba:7e:cd:05:bf:22:86:35:6e:de:3f:0b:46:1f:
d8:3d:cd:55:31:0d:a2:73:47:b8:93:c6:f4:86:08:
d7:60:80:43:e4:e2:19:de:71:34:08:5e:98:6b:84:
10:76:a7:7b:1e:e2:19:cf:a3:cd:14:65:24:8d:5a:
2f:44:83:01:5b:9f:a1:64:03:50:e9:67:6b:fc:2b:
9f:2a:b0:84:7f:3c:83:48:16:a4:9a:62:7a:c9:5a:
63:96:7a:94:2a:3d:23:a8:40:13:28:96:25:79:e8:
8a:38:2f:62:39:3c:2a:89:96:5e:68:f4:9a:63:da:
26:b5:a4:9a:a4:30:15:e1:d8:b2:1f:98:e7:be:be:
0b:19:d1:de:4f:a2:54:e8:b6:da:0a:9e:4c:84:59:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:98:3D:18:67:15:DC:A3:E2:E2:02:CF:5E:0F:18:D6:86:A9:32
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:91:06:5f:38:8e:ba:00:6d:b0:d6:9b:d8:ad:f2:87:59:25:
5b:ce:8c:19:21:02:d7:98:87:c9:10:90:64:55:7a:9e:51:47:
b5:31:2b:3e:3f:e7:db:4c:f3:67:cb:fe:7d:71:e2:61:7a:b3:
d0:55:18:8b:39:92:db:48:0e:b7:3e:3f:ea:13:9e:22:10:5b:
eb:dd:54:37:2b:d0:22:8e:b8:56:e7:b9:b1:5b:a3:3f:d1:92:
8e:d4:66:61:ad:f2:58:83:84:4b:ee:05:67:aa:02:d2:eb:b9:
45:56:ae:f5:3c:7c:e1:60:6c:fe:f8:fe:67:e3:87:ee:02:ff:
ea:bf:e0:2e:16:4f:ff:27:e3:20:5e:6e:f8:3c:22:f0:12:35:
51:b9:ba:4c:29:34:c1:ef:a9:54:80:ee:3d:26:aa:b3:bf:cf:
45:8c:bc:5b:1b:b4:46:4d:16:f5:91:50:2a:95:fe:87:fc:86:
1e:a0:82:d5:35:e1:75:69:fa:8b:63:c3:d1:11:e2:94:3d:61:
23:26:71:6a:0f:c4:8a:47:77:02:aa:32:67:e9:70:d6:9c:c4:
40:45:74:11:4a:47:67:db:2a:49:13:0a:ae:0d:8d:ef:e2:a4:
81:1a:0d:73:13:ee:ee:22:ed:2e:98:ed:88:0d:f7:34:ad:fd:
e1:e4:55:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcDBdy/CBirpw+OHxvKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjBmNzBmMTdkOGI3MmMzZTQyYWVlMDMyOTEyOThiNTRh
NGZmMmYwHhcNMjYwMzI5MDcwMTI1WhcNMjYwMzMwMDcwMTI1WjAzMTEwLwYDVQQD
Eyg5OTdkOTgzZDE4NjcxNWRjYTNlMmUyMDJjZjVlMGYxOGQ2ODZhOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu9ctrJOY8gEonOf4x1QPJAtdhgz
T32KHxxr2RWkSxIb5rCAtppa3fj1AvCTiclo2MWypFcYckrB4UJJ/2YkfpPzikX4
D5jvUZHs9/ZlnmVXBcZa7Pq3RHHHSrY2LgM4a3NvIskCjeVHun7NBb8ihjVu3j8L
Rh/YPc1VMQ2ic0e4k8b0hgjXYIBD5OIZ3nE0CF6Ya4QQdqd7HuIZz6PNFGUkjVov
RIMBW5+hZANQ6Wdr/CufKrCEfzyDSBakmmJ6yVpjlnqUKj0jqEATKJYleeiKOC9i
OTwqiZZeaPSaY9omtaSapDAV4diyH5jnvr4LGdHeT6JU6LbaCp5MhFkEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl9mD0YZxXco+LiAs9eDxjWhqkyMB8GA1UdIwQY
MBaAFI8g9w8X2LcsPkKu4DKRKYtUpP8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAt
Yzk2YThkYTJjNTg5LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAtYzk2YThkYTJjNTg5
LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpEGXziO
ugBtsNab2K3yh1klW86MGSEC15iHyRCQZFV6nlFHtTErPj/n20zzZ8v+fXHiYXqz
0FUYizmS20gOtz4/6hOeIhBb691UNyvQIo64Vue5sVujP9GSjtRmYa3yWIOES+4F
Z6oC0uu5RVau9Tx84WBs/vj+Z+OH7gL/6r/gLhZP/yfjIF5u+Dwi8BI1Ubm6TCk0
we+pVIDuPSaqs7/PRYy8Wxu0Rk0W9ZFQKpX+h/yGHqCC1TXhdWn6i2PD0RHilD1h
IyZxag/Eikd3AqoyZ+lw1pzEQEV0EUpHZ9sqSRMKrg2N7+KkgRoNcxPu7iLtLpjt
iA33NK394eRViA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client