Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: iBVL9o8cNxRIkDVm/rMFtVgHdmiINzGEjOE7pveD6k0=
Subject key identifier: 53:51:B4:01:90:BE:38:25:F0:DF:AB:67:5D:F8:BF:82:CF:3A:9E:0E
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 019D273B34C279FA712829E1F748832355A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 154A
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: 7vhFwtZaxwNFMnoS4NLtO-wiXEI.roa (hash: B+OAgsSsP9qdSjVxzgxviHBZvQyN5xNSRqji7TKBsus=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: EAVYUfQM8RhFqcHOXEzN9iwQWmN2p5uj3UIek243aEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:34:c2:79:fa:71:28:29:e1:f7:48:83:23:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=5351b40190be3825f0dfab675df8bf82cf3a9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:f8:c5:25:71:19:17:4e:36:7b:b6:8f:0f:
7e:6b:e8:f5:61:1c:bc:6e:38:c8:1c:41:4f:e3:21:
13:71:8e:31:54:52:ea:e3:51:31:81:1f:53:78:f6:
94:13:38:5f:df:0d:c7:1d:66:73:48:7e:fc:c5:22:
c0:14:34:ef:78:16:f3:9f:95:db:e1:52:6e:17:49:
91:b1:b0:98:43:e3:75:23:a6:5a:c3:f6:67:1b:7a:
60:14:58:9d:fc:1b:ad:7e:b0:10:1e:65:a4:21:f7:
fd:c0:84:f7:b4:6d:f7:86:72:79:1e:e4:9b:02:d2:
df:07:5f:db:54:8e:eb:48:01:be:24:c1:b3:30:4b:
46:7f:bd:31:47:f2:c8:b6:62:5e:0f:71:ea:3f:dc:
c4:d3:08:e0:7f:9a:da:69:0c:28:dc:ec:8a:0b:a4:
30:94:13:99:b3:a4:34:8e:69:8f:fc:73:94:43:b0:
d1:06:9a:56:1b:92:1b:70:c0:f2:60:ae:3b:54:c7:
c9:db:d1:ea:7c:93:73:59:76:59:32:25:8b:fd:b3:
d8:cd:c4:74:e8:8e:d4:7a:45:f6:b7:06:ca:5e:77:
d2:a6:03:19:06:91:83:96:6f:f5:05:f5:27:05:83:
bc:8a:1f:e3:a7:5e:fd:db:93:5d:d7:d2:0a:89:01:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:B4:01:90:BE:38:25:F0:DF:AB:67:5D:F8:BF:82:CF:3A:9E:0E
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a0:f7:de:2c:74:36:33:8c:3a:18:e0:74:56:04:9c:7f:0e:
fa:5f:c1:ee:0d:9b:5f:fa:b3:c3:39:72:5f:b5:b4:95:45:2c:
ef:21:ae:eb:09:ff:25:47:22:b5:ab:f5:1a:3b:1d:23:f1:a9:
57:2a:57:a8:40:a9:0d:4f:eb:c2:b5:5d:11:05:40:f0:3d:a7:
b8:f5:2c:bc:df:bb:84:7b:a8:fa:c4:30:cd:f2:fe:44:f1:94:
3b:3f:df:7f:53:6c:a4:d2:5a:17:fe:eb:82:c2:a8:94:c6:b1:
d6:57:2e:df:58:89:00:a5:22:6b:45:2a:7a:2c:c6:c9:45:0e:
54:ba:af:96:78:da:dd:e2:20:07:f8:73:86:43:21:0f:c0:dc:
ea:6d:47:69:6a:e2:bc:70:0b:3e:00:79:b8:d7:46:90:30:dd:
00:e5:64:d0:6d:cc:70:a8:18:04:01:1c:be:07:12:41:45:c0:
2f:a0:ca:44:46:0c:30:78:5a:41:93:5c:67:93:bd:0b:49:39:
ea:83:57:55:08:62:10:0e:18:31:21:a2:2f:0e:14:30:69:cf:
ce:bb:54:d3:1f:6f:c9:3f:ae:49:82:eb:f9:a0:83:03:94:79:
c5:15:0e:89:db:82:f4:cc:56:88:1e:83:b1:52:13:28:0e:31:
b6:83:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:12 2026 by rpki-client