Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File: JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier: tAUZW0WHqsHuSGpUID37BNlyr9GY3a7X3PAltIxo5yM=
Subject key identifier: EE:E9:23:22:9B:D8:FA:49:FF:A0:B6:5C:06:01:42:D6:0C:3C:BC:7F
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer: /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial: 019D2A3B401747238A74769079AB557B6944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number: 81
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: 872PzsqkZVA/Kn0mcQfFuEYuRmSugWR6D39DvwFPLcA=)
2: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
3: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:40:17:47:23:8a:74:76:90:79:ab:55:7b:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=eee923229bd8fa49ffa0b65c060142d60c3cbc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:b8:6c:b5:37:32:55:d0:ce:8d:1b:bd:d3:
f7:e6:c9:11:99:2e:30:7e:b1:e7:32:fb:e8:81:36:
08:d8:d4:65:0a:44:f6:ef:d7:2d:f0:5c:6a:a6:f7:
94:82:c4:ee:3e:cb:49:1d:54:32:9c:84:82:ac:94:
79:a8:f3:52:02:86:3a:7c:04:58:d1:43:8a:1b:66:
fd:93:23:cf:37:0a:8d:6e:e8:01:6b:a9:53:e6:55:
4f:5a:25:37:ef:89:2b:7b:3c:c8:54:04:69:3b:f3:
2b:2b:41:40:e6:a8:e5:f3:15:29:5d:ed:a1:18:a5:
37:16:7d:be:49:75:db:fe:b1:0d:36:71:fc:e6:ac:
97:16:23:39:db:67:57:98:5f:a9:20:c6:71:10:c3:
a4:a5:99:f8:cc:1c:e4:54:11:2a:6e:2e:67:26:54:
cc:ac:82:d6:de:99:d5:af:17:4b:b8:9e:6b:98:3f:
bb:d0:f8:f4:1c:17:63:d4:27:2b:4d:0f:4d:9e:e5:
78:a7:d3:32:2d:36:c5:b4:83:d2:ec:68:a6:e7:8f:
36:89:b9:d5:2e:fa:dd:2e:eb:b2:e7:06:56:70:a6:
a3:8e:34:2f:6b:7e:2c:a8:bf:0a:97:e6:91:c7:35:
cb:34:9d:73:5a:a8:81:14:86:87:a0:48:39:9a:01:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:23:22:9B:D8:FA:49:FF:A0:B6:5C:06:01:42:D6:0C:3C:BC:7F
X509v3 Authority Key Identifier:
keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:df:ce:af:9d:95:0b:83:1f:12:01:c9:87:d7:25:80:11:8c:
73:d5:80:14:7d:b5:89:da:fa:e6:fe:7a:9f:49:14:a8:f6:0d:
cb:ce:9b:16:e4:83:c1:c4:ed:d0:c0:32:ed:33:b4:c6:c0:dd:
56:1f:2e:f9:a4:e6:e2:f8:90:2b:57:c5:32:e9:ab:4d:2e:b0:
59:78:5e:3b:db:ff:0d:d4:54:44:d6:00:4b:07:65:11:fd:e0:
64:e5:fc:26:6f:ed:5c:c9:b8:05:8e:39:29:08:37:3b:e1:e1:
c5:49:4c:b6:52:34:36:59:24:2b:54:53:37:36:36:10:1a:41:
bd:23:3e:b7:41:31:24:99:66:b2:0e:c4:ea:2c:8f:a6:f3:fd:
e3:35:e5:05:8e:c4:bc:fd:e2:85:53:ff:8d:e6:d0:94:b7:d4:
5b:d3:47:77:c4:b7:65:1c:6b:7b:22:ee:f2:60:6d:54:66:49:
f5:14:a7:bd:42:bf:bc:82:1e:55:b2:e2:22:9a:54:b1:3f:a9:
e6:a1:03:c3:40:42:7a:db:16:a0:89:35:78:7c:dc:07:74:33:
fd:e0:9e:e0:e9:32:a8:96:26:a0:14:c2:91:9d:5e:e5:8d:81:
30:94:f3:e0:7d:e2:ee:aa:f9:2a:95:c4:7c:f5:d1:c9:60:72:
15:22:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:40:27 2026 by rpki-client