Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: cXBrDMlXcbUW/hewOb5xsSq4wF1HD5GT3hysdTGz4n8=
Subject key identifier: 7E:C0:32:2F:D2:B2:41:7D:41:8C:07:B1:3C:E2:07:3E:FE:26:1F:60
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 019F954A4133D014357269CC7BB19951FE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0D14
Signing time: Fri 24 Jul 2026 18:01:39 +0000
Manifest this update: Fri 24 Jul 2026 18:01:39 +0000
Manifest next update: Sat 25 Jul 2026 18:01:39 +0000
Files and hashes: 1: Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa (hash: QYPBK9tLe2NLf5ToJsGlVRXUrRctKZptQZU1FwtQfmU=)
2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: HfRylt/D6NnHxzS8VlTfCmApAwBORUNdrbZBOkyashI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:41:33:d0:14:35:72:69:cc:7b:b1:99:51:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Jul 24 18:01:39 2026 GMT
Not After : Jul 25 18:01:39 2026 GMT
Subject: CN=7ec0322fd2b2417d418c07b13ce2073efe261f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:78:e5:89:1a:e7:fc:35:0c:d5:06:15:1e:
12:a0:11:54:ba:85:07:35:12:f4:71:9d:dd:75:43:
8c:55:8f:9f:16:fd:e7:9f:2d:ab:e7:1c:bb:f0:ef:
fe:9c:28:b4:ec:0a:f4:e1:f1:11:be:45:00:0b:e0:
7a:7d:fe:0a:d8:e5:2c:10:e3:00:1c:f3:6a:e5:c7:
1e:66:e4:db:19:d5:c6:7a:20:f0:35:6a:d3:66:78:
c8:4d:36:cc:fb:49:26:35:b4:0b:3d:34:91:5a:5c:
1b:28:e5:74:54:2b:0a:87:28:3e:71:31:ae:fc:11:
e8:03:6a:1a:61:d0:ad:83:6d:b2:44:8e:76:9f:f3:
34:d0:7a:b2:a8:5a:be:87:88:36:0c:78:c7:96:6a:
9e:6f:ee:9d:32:25:10:48:e3:96:c7:c7:af:12:52:
47:6b:36:c3:ae:66:46:a4:ca:52:7b:3a:33:f1:3f:
56:86:2f:f8:38:40:2f:bd:fa:ca:bd:23:f0:97:14:
bd:84:75:0e:1b:f3:bd:90:ee:30:7e:91:fa:25:62:
12:68:1f:eb:85:aa:aa:31:3a:8b:ac:bb:68:1f:16:
49:36:5b:0e:30:1f:b5:56:60:9c:b2:20:01:d2:a7:
22:b1:7a:5e:25:24:1f:84:96:08:a7:74:82:99:a1:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:32:2F:D2:B2:41:7D:41:8C:07:B1:3C:E2:07:3E:FE:26:1F:60
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8c:39:81:f3:24:ee:0d:75:8b:b5:54:17:69:8b:c9:88:0e:
68:18:69:dc:7b:58:77:1c:18:ef:2a:2d:8a:10:5c:1d:fc:50:
f5:c8:32:fc:de:de:4f:fc:f8:01:92:92:9a:a7:4a:1a:b9:f4:
d7:23:81:39:fe:34:57:1c:61:5e:c3:e4:6a:a2:5b:a2:19:0c:
36:68:0a:df:af:b7:bf:2e:e5:c5:3d:ea:63:1f:03:f7:aa:39:
d2:5c:9f:1f:0c:b7:15:48:87:e9:1c:55:ed:e1:d7:a4:95:c6:
42:1c:33:29:c0:ce:66:23:71:b5:9e:3d:a2:04:34:1f:1c:1b:
52:ad:c3:42:50:20:31:a0:95:a9:72:2c:6a:e1:b0:cb:bc:e5:
77:40:96:bd:5e:7d:da:80:f9:76:e0:e8:9c:73:86:25:65:6b:
e4:7b:7b:c8:e7:38:4f:2d:8b:50:1d:cb:5b:ea:86:6f:61:25:
cf:f3:ba:92:36:f5:c3:41:80:67:ba:3e:cc:91:14:ae:ea:46:
e8:ba:d1:14:b6:23:ea:6d:e3:54:4d:5d:5a:45:73:b7:f5:7c:
0c:46:87:84:d7:74:2c:84:23:ec:92:3d:c2:43:00:6f:de:d6:
0b:74:6b:9e:7b:cc:90:22:85:cb:1d:89:2a:82:75:10:85:37:
1a:d8:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:33 2026 by rpki-client