Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: ZlzTTRZrWi92im7iChdSanXMoQ3FM2qAHHPHbjszmS0=
Subject key identifier: 23:13:A5:21:CE:8E:27:3C:79:B3:63:BD:89:4B:5B:60:C3:0C:D5:A4
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 019D269632401860D80853B7399392ECA9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: UUuQtOrHzV2OANnXK683zzhlycfT/6lgMuO6HUcna4g=)
2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:32:40:18:60:d8:08:53:b7:39:93:92:ec:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=2313a521ce8e273c79b363bd894b5b60c30cd5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:9e:84:0e:4b:44:9f:94:0d:59:b3:d9:1f:
c5:7b:5d:0e:c6:c5:d6:42:94:01:89:10:09:57:b0:
24:81:f5:02:99:14:64:b1:a7:d4:5a:49:44:35:0b:
71:7b:47:7f:c6:de:62:fe:70:8a:96:d1:f4:f7:73:
71:2a:57:49:4a:7f:d7:b1:0f:41:29:7e:10:6f:94:
cd:de:36:2e:49:36:9f:e3:9d:b7:bf:62:7d:b4:09:
be:fe:27:2b:0a:03:cd:90:a8:57:c8:f8:9a:c5:29:
4d:d1:dd:3c:97:1c:58:b1:e6:53:83:20:11:d3:9b:
a8:92:28:57:45:6b:d1:9a:bd:8e:b9:e1:a4:c5:70:
2f:09:e8:41:d9:f7:cf:f8:7b:e3:87:d8:18:46:c2:
c1:ee:59:89:d5:3d:6b:6d:3c:07:8e:40:bf:78:14:
39:f4:68:72:5b:e5:e6:ac:4f:f8:c5:25:98:ed:39:
92:10:b6:96:45:4e:2f:33:dc:21:ca:4a:22:12:9f:
b2:29:de:8e:0f:61:c8:49:96:93:2c:76:73:e6:ff:
9a:f0:3b:9d:df:f3:2a:da:a7:f6:fe:4f:21:41:8b:
93:8f:4a:d3:a9:7c:03:fb:5d:11:65:35:fb:fc:cb:
fe:97:bd:85:e9:bd:18:aa:4f:57:51:46:a8:9e:cc:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:A5:21:CE:8E:27:3C:79:B3:63:BD:89:4B:5B:60:C3:0C:D5:A4
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5d:51:7f:eb:76:9b:8c:ef:53:a3:4f:a4:f1:13:f5:b4:dd:
65:f1:fa:ac:ed:eb:e6:b8:c0:5b:c4:b3:8a:54:05:58:5b:68:
2f:f5:e1:81:38:e5:24:55:5d:92:34:7e:65:d7:61:69:d3:63:
f0:76:46:e0:02:bf:d9:19:65:ff:12:06:5e:51:ba:c8:1e:3d:
48:bd:b3:f2:1d:e3:05:88:70:96:78:89:c7:ec:a7:62:30:05:
ea:58:c7:28:1a:15:66:42:ed:13:9f:a0:d9:2c:ae:3c:85:5b:
66:19:8a:56:05:71:72:a0:9d:94:23:d0:e7:8e:c7:c8:8b:76:
c3:ea:48:62:c2:d4:55:b3:95:6b:45:10:06:74:29:24:cd:e8:
b1:ef:21:21:c9:48:be:cf:34:55:e2:8f:76:c2:35:f2:28:38:
a8:26:46:45:f4:a9:a0:9c:36:8b:6c:4f:af:e2:40:9e:e4:35:
45:0d:ab:4f:91:28:39:0c:6a:d2:18:ae:22:a2:e9:59:5d:e0:
0c:65:e0:9d:43:0c:43:aa:29:e1:4b:6b:bd:b7:ea:e1:9b:9f:
55:22:ba:26:f5:a0:13:ec:fb:49:c4:c7:3d:29:09:fb:ba:8b:
9b:5d:79:76:c1:22:8a:90:b7:57:ea:b8:be:53:e1:93:fb:68:
23:95:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:06 2026 by rpki-client