Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: iJu2Ptn3Kt0jP5xaNtE2mlIQc4N2PQPIO+BnLK9IQVE=
Subject key identifier: C1:2B:78:12:69:D2:B3:2E:ED:D4:C8:C1:72:CD:F8:E8:6B:03:4D:FE
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 01A12A9FBA65BD98026FAF216740B321A544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0DE9
Signing time: Sun 11 Oct 2026 11:01:13 +0000
Manifest this update: Sun 11 Oct 2026 11:01:13 +0000
Manifest next update: Mon 12 Oct 2026 11:01:13 +0000
Files and hashes: 1: Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa (hash: QYPBK9tLe2NLf5ToJsGlVRXUrRctKZptQZU1FwtQfmU=)
2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: HSK8zIfzEzalyKJ2XR8kK1Pu7E6tjxOBDGunWW7yNZg=)
3: UyR2Iv_YkQXNAfxLx7Mnvs32wt4.roa (hash: Cw3zsQ2rL48lutA9FZgXYq5rT2dmAUFKZx7J0iHwKB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:ba:65:bd:98:02:6f:af:21:67:40:b3:21:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Oct 11 11:01:13 2026 GMT
Not After : Oct 12 11:01:13 2026 GMT
Subject: CN=c12b781269d2b32eedd4c8c172cdf8e86b034dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:94:fb:e7:db:10:7b:6c:45:ec:38:cc:0a:
4e:36:03:0d:c8:ee:f8:ba:a2:5b:a9:20:ec:39:29:
1d:a9:f2:47:83:d6:91:62:b2:e9:79:90:d9:cc:71:
e3:52:13:f1:17:3f:f3:dc:8c:86:46:18:6d:94:58:
f3:4b:38:46:3c:f2:02:26:61:70:72:f6:04:62:a6:
3a:60:9a:1d:d1:7e:8c:1d:7c:30:82:2a:fc:c7:9e:
04:f1:f1:b3:df:a9:a6:27:9b:e7:7a:f4:b6:7e:4a:
61:f9:d4:d0:a9:56:e3:9a:bf:e6:2f:6b:0c:4e:46:
74:33:52:2b:26:99:79:a1:88:a0:7b:bc:fb:b6:62:
a1:f9:fe:e0:ce:8c:23:ab:03:b9:d2:f3:3d:b9:9b:
64:cf:5c:e8:1c:bf:0e:49:22:ab:37:b8:44:de:41:
aa:84:13:8b:74:98:8b:63:87:13:41:fa:10:7a:7c:
d7:2d:43:e6:a6:15:fc:24:e5:3d:0f:9f:ae:6e:a1:
a5:0b:6e:ae:fe:c0:fa:3e:ea:cf:19:ef:61:9f:93:
84:c1:db:71:eb:4e:fe:3e:bf:68:71:f2:ea:82:f3:
1d:34:d7:55:a6:fe:53:4d:c5:40:be:b3:9b:55:f1:
c0:c8:2e:66:8e:b6:c2:03:54:83:38:65:42:a3:8d:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:78:12:69:D2:B3:2E:ED:D4:C8:C1:72:CD:F8:E8:6B:03:4D:FE
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:49:5d:1e:ca:6b:62:80:7b:e3:32:f6:bb:00:8d:9f:ba:a5:
4c:93:59:b3:a4:c0:a3:72:68:66:69:3a:08:d8:0d:a9:0d:52:
a5:e5:47:fa:53:05:ec:50:37:72:b3:ad:74:8b:b7:fd:5e:63:
a6:99:e3:52:2d:3c:8f:0d:e7:12:d6:29:7a:99:0e:b5:48:f4:
c2:e2:3f:89:cf:3c:4e:87:64:1b:4b:a2:71:83:bc:d4:a7:e4:
6c:84:0d:aa:37:73:30:06:40:1a:ab:e1:72:b5:3b:65:a0:20:
83:45:24:cf:2f:a0:d1:15:37:69:d5:01:3e:49:df:8a:2f:92:
7d:18:68:4a:e3:17:bc:a0:e1:f0:34:66:1b:37:d9:9b:d7:9b:
e8:19:d9:92:02:22:4d:70:e3:1b:51:42:91:0e:43:ea:a9:95:
1a:5f:dd:2e:ce:40:98:af:96:2a:66:28:d8:db:d8:ff:4e:f0:
18:e1:40:dc:1c:44:8e:27:0c:1a:0d:b7:92:da:79:4a:d1:bc:
7f:a4:e0:73:e6:b9:b9:55:94:73:57:c9:a0:d9:f0:8f:45:e2:
1d:94:bd:87:ce:c1:97:2b:c5:2e:1d:10:cb:ee:17:91:ec:9d:
18:e2:97:80:fd:37:4f:bd:c0:81:2e:b3:ba:22:66:fc:4a:af:
66:60:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:44:10 2026 by rpki-client