Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json)
Hash identifier: fW4e+yxiV6vK65XPa5LHuXEyU6YZzt4kihQ1px1UeQo=
Subject key identifier: D0:67:4C:A2:FC:16:FC:E4:F0:9B:9C:D6:D5:FE:9A:88:5F:00:65:7C
Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Certificate issuer: /CN=258906554d8c8b428ede8cb35026860d3d7771df
Certificate serial: 019D29612FFBFF6BCED061290CF6D195292C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
Manifest number: 0F67
Signing time: Thu 26 Mar 2026 09:02:08 +0000
Manifest this update: Thu 26 Mar 2026 09:02:08 +0000
Manifest next update: Fri 27 Mar 2026 09:02:08 +0000
Files and hashes: 1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: 3RLKa5kwmSThBduAtdVj3vaTfXA27j3dnxsdiPoXhO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2f:fb:ff:6b:ce:d0:61:29:0c:f6:d1:95:29:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df
Validity
Not Before: Mar 26 09:02:08 2026 GMT
Not After : Mar 27 09:02:08 2026 GMT
Subject: CN=d0674ca2fc16fce4f09b9cd6d5fe9a885f00657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:c2:07:3e:0c:1e:19:da:72:dd:7d:e0:b5:
44:b9:14:19:63:f1:83:20:47:23:4f:3b:0d:f6:79:
06:61:60:7b:e6:b5:fd:6f:4c:55:cd:8d:d6:e7:f0:
09:a6:70:20:dc:66:70:14:b0:3e:1c:c4:95:7b:9c:
e7:81:e2:30:2f:3a:1e:b0:08:83:09:1d:eb:21:32:
94:5c:00:6a:f2:01:8e:9b:42:f4:ff:74:e2:27:54:
78:e6:e4:26:68:34:39:d2:30:27:16:28:53:09:a2:
f7:d2:15:f1:76:3e:fd:3f:f4:22:4d:8e:1d:1c:ac:
33:90:8e:42:6a:f0:14:d9:28:7c:d5:07:86:a6:32:
66:44:2a:5d:18:94:84:24:de:24:39:37:67:f6:1d:
7c:ab:7c:b3:61:0e:30:ed:9a:29:24:43:da:70:04:
05:45:19:40:66:08:c8:dc:b6:fd:ab:84:dd:54:75:
2a:88:f1:81:1d:ef:d6:23:47:5e:8f:ab:d3:36:3b:
34:31:17:5c:cb:4e:e8:f3:87:2e:91:9d:0f:80:d0:
aa:d6:8a:60:91:d6:3e:00:c9:f3:20:10:9d:9a:a6:
3b:ef:c0:43:5b:46:bb:17:7f:99:90:4d:62:21:18:
96:f8:0b:5f:04:0f:87:e3:08:ab:33:cd:1a:34:12:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:4C:A2:FC:16:FC:E4:F0:9B:9C:D6:D5:FE:9A:88:5F:00:65:7C
X509v3 Authority Key Identifier:
keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bf:1c:55:98:e0:58:23:48:bb:e0:8a:36:37:8d:3e:12:13:
3e:bf:c5:eb:9f:7a:65:fd:22:9f:9d:c0:46:e8:46:6c:e7:d4:
03:4e:be:04:94:a7:59:3a:1e:cc:9e:f4:a3:d4:98:ff:ad:1c:
19:37:d3:a1:88:2e:a6:69:ea:e9:3f:22:c5:b8:69:40:7a:eb:
72:fb:fc:97:3c:27:7d:e2:06:1a:93:4c:70:8a:f7:f1:96:31:
48:31:86:e0:35:c9:30:78:3c:79:71:3f:39:bf:e5:a4:2b:61:
32:14:cc:04:c0:4f:f0:cd:74:60:4e:87:40:21:d9:39:09:03:
4e:1b:48:7b:7c:78:a1:2f:2d:68:d9:4d:81:c4:52:fd:59:04:
ea:73:91:9d:bb:24:25:44:a2:9e:57:1a:8e:73:e9:4b:38:36:
b0:aa:19:7c:e5:f9:c2:2a:ed:31:17:1b:2b:5d:d0:37:b9:86:
3e:91:86:7e:1d:01:54:2c:d2:e4:f0:6b:fc:09:c9:c1:75:da:
29:2a:1f:3b:1c:01:b6:56:3d:5a:13:11:61:d2:a3:d2:8b:f1:
27:82:a6:67:bb:8b:35:9b:80:6f:1e:23:c4:55:bf:cb:47:59:
90:f1:a8:86:b1:d3:cc:2a:9e:f1:c6:6f:be:7d:7a:92:7a:0a:
c0:2a:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:05 2026 by rpki-client