Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File: jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier: hn2+bIza2eqSND6b0SWA6FQUiqF4jU8jyaAqW/K7aKU=
Subject key identifier: 1F:7E:5A:E4:59:10:EA:22:2A:1F:7E:BE:87:28:9D:18:26:DA:56:B6
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial: 019D382E34100924E667E009195CD770434E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: 75-KqODx3w8CvM9m5Nq3kRsXyMo.roa (hash: A6bAUCVGwzASuTY5FNYElUtdHA4J3zfHfU7IL2XZWu0=)
2: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: 1BdnmLJ+A3I7Ms/8kpZ9RWJL7tEDwkRuhKieC7dBQTM=)
3: kN8sJaIrd98steTWsu3vc7sEjKI.roa (hash: MkLW8K9XVhuTwi22jPlIAzX7VARe0fbKX4ZjMGnmNrI=)
4: tTnZl8uF6ADN5gv_dFCnGczPy10.roa (hash: yFxKga5LtYoglKO/yUWDlJacjL9nZm+MXR5rVDyXPDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:34:10:09:24:e6:67:e0:09:19:5c:d7:70:43:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=1f7e5ae45910ea222a1f7ebe87289d1826da56b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:f8:0a:20:b1:10:69:a7:27:4d:f8:b0:9c:
2f:12:64:42:94:62:eb:71:df:0a:84:59:40:b1:f7:
f6:b8:88:69:83:18:b0:11:fe:6c:2c:67:43:eb:7c:
0f:dd:9b:f6:8b:2c:51:b2:4b:16:d9:64:89:18:2a:
7e:4a:46:f0:9c:76:21:d0:c2:c5:1c:84:78:25:fa:
64:8c:9c:9b:97:da:02:63:8c:26:f1:3b:9b:2a:0e:
ab:2d:fa:90:53:d0:bc:45:1d:70:cf:78:f2:43:9b:
16:f6:d6:f2:be:00:be:73:6b:26:d9:d4:c7:1f:12:
80:ff:18:ec:73:25:c2:27:81:32:c7:a4:c6:f8:dc:
a1:38:8e:b9:f3:5a:9c:0d:73:72:7a:a6:7b:fc:22:
67:88:8a:2b:98:8c:03:d8:e3:59:41:7d:67:54:17:
f7:cb:1e:de:50:4b:1e:f3:fd:35:9e:f6:87:c5:f9:
1e:cd:65:bb:f6:78:76:87:09:29:0e:66:33:f6:19:
e3:d2:61:95:58:c3:00:a7:13:c3:5d:83:6d:0c:e4:
1c:6f:90:70:df:ce:12:a3:9e:ac:b4:83:6a:d8:fe:
45:4c:b3:c5:ff:63:02:53:de:6e:21:a9:a6:35:d7:
02:1f:af:6d:c5:0a:c6:4c:67:c0:f9:0a:ed:ba:63:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:5A:E4:59:10:EA:22:2A:1F:7E:BE:87:28:9D:18:26:DA:56:B6
X509v3 Authority Key Identifier:
keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:6e:d2:62:5f:ec:9a:3d:f9:17:a1:db:72:f7:f2:d2:42:
7b:e8:9a:3d:04:e5:62:71:7c:7c:07:7e:56:4e:75:bc:21:1f:
12:db:79:c3:a3:05:fa:5f:bf:7c:f6:81:72:6c:c1:a2:ba:5a:
8b:34:be:9e:72:6e:37:21:75:47:98:b3:e0:39:03:c6:67:56:
3f:1e:2e:67:8e:f8:98:b4:8c:be:2b:4f:6c:23:76:78:89:5b:
25:15:4e:95:36:f4:7e:21:94:0d:e2:69:d4:ad:35:0c:38:82:
3f:ba:a8:24:81:75:96:f3:11:54:fb:9e:cc:2f:7d:12:f4:4b:
da:4d:8c:84:6d:b7:14:ac:97:6e:79:aa:25:b5:57:dc:11:00:
6d:46:04:5d:7d:14:9e:7c:e0:63:1d:8e:29:7c:62:58:2b:8c:
8a:bb:2f:07:f4:6a:ec:e1:70:df:dd:15:2e:60:c3:4d:ae:28:
0a:ba:d3:5d:3e:1e:a4:b4:e4:03:8d:09:a7:37:de:d4:98:48:
2c:e5:5f:e8:84:3d:d3:24:cf:84:b1:46:80:7d:6f:f1:e1:b1:
b5:dd:1d:5c:b0:06:6e:4f:f3:bb:e7:11:ec:bf:6f:9c:45:6b:
91:33:ca:cb:f0:b1:a8:f4:67:f6:5d:bd:71:79:dc:bd:d9:10:
bd:d1:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:57 2026 by rpki-client