Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier: DX3R9xccQ0V5sRe/z+ZD9hnjWFTpLqKIC++x1o5yOzg=
Subject key identifier: 03:00:8B:BE:76:08:22:3C:C1:FE:23:40:5B:A3:8A:44:CE:1D:1A:34
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 01A0D5391F9FB551F4D856EC4B93F4A61F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number: 1670
Signing time: Thu 24 Sep 2026 21:01:25 +0000
Manifest this update: Thu 24 Sep 2026 21:01:25 +0000
Manifest next update: Fri 25 Sep 2026 21:01:25 +0000
Files and hashes: 1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=)
2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=)
3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=)
4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: RbBFfMZjv1tYJRLMqxY7R5wqQ8lHC3h/BUtf7QtNFls=)
5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:1f:9f:b5:51:f4:d8:56:ec:4b:93:f4:a6:1f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: Sep 24 21:01:25 2026 GMT
Not After : Sep 25 21:01:25 2026 GMT
Subject: CN=03008bbe7608223cc1fe23405ba38a44ce1d1a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:f3:c2:45:f9:ff:6c:e7:3c:57:1f:b0:c2:
00:d8:a9:f3:1d:4c:61:13:fb:00:2f:5e:32:d8:a5:
8e:31:58:17:27:ff:b6:34:d3:d8:6d:d5:03:da:c5:
ee:c8:f1:ef:a1:b4:64:7b:68:05:75:db:d5:9f:e6:
16:a6:92:bb:7b:67:31:1e:86:02:89:56:63:cc:e4:
bc:4e:ca:e1:8a:d1:58:15:ba:36:5d:70:69:5d:a6:
e1:2a:9e:15:89:05:95:06:d4:d7:d0:e6:92:8f:b6:
94:d1:e9:7a:2f:7a:95:a6:dc:61:da:44:5c:99:59:
a5:96:be:41:f4:e5:09:c7:eb:ef:04:e5:17:8a:b4:
f6:27:ca:d0:1d:34:20:b2:4e:c7:13:ba:5c:d9:c5:
7e:ee:f7:e0:1b:94:f0:a3:d9:23:4a:ce:53:e9:ec:
7a:cb:a4:6b:c6:8c:e9:e3:a3:27:7b:09:be:11:0f:
bf:90:50:44:d3:c4:49:0d:2d:9a:e6:af:6b:c3:05:
c4:fa:e3:33:eb:77:93:4d:b8:b0:2b:43:17:de:17:
5a:23:d5:e4:61:a4:ae:84:d4:ef:f4:2c:ed:d3:e4:
c5:cd:dc:7c:74:b0:68:a3:d5:d5:57:5e:0c:4a:a4:
71:e0:ed:eb:67:45:47:cd:a7:70:7a:e8:c3:84:0d:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:8B:BE:76:08:22:3C:C1:FE:23:40:5B:A3:8A:44:CE:1D:1A:34
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:40:53:80:36:f2:ca:4e:f2:6b:17:91:14:8c:71:2b:02:c5:
c9:34:97:bb:39:2e:15:f3:41:d0:44:3c:b0:19:1a:70:56:58:
c8:7e:8b:a9:de:0a:31:2a:15:ce:92:27:99:13:b4:4f:8a:45:
c2:de:3c:7b:70:9c:d1:97:74:4d:7b:27:71:64:6c:bd:f0:c7:
87:78:d7:05:5d:36:a5:80:da:ec:25:9e:dd:5d:69:2f:3a:88:
67:5c:47:58:42:b6:a5:b8:f6:70:1b:b8:4a:e2:96:5a:fb:90:
94:0c:9d:71:c4:49:cb:3c:8b:b6:11:b3:93:c8:40:c8:5a:72:
31:75:62:20:07:00:93:38:af:9c:7c:14:fb:3d:96:66:0d:90:
f1:d7:70:db:c3:b7:8e:f1:e3:d7:dd:f2:f5:54:b1:d0:3a:4d:
17:c7:7e:28:5c:7a:5f:bd:99:aa:3e:dd:4f:c2:3b:78:ac:d8:
35:1a:0b:99:21:8b:59:0b:78:3c:3a:17:b9:36:dd:74:66:7d:
56:37:6c:3c:18:bc:40:b6:7e:f3:e8:81:4e:a4:84:b8:2c:37:
b3:8f:25:75:3d:05:57:5c:82:e6:de:aa:be:5e:81:ec:74:57:
88:6c:2e:85:26:76:f8:d4:a0:1a:25:8c:dc:e0:39:05:f4:95:
94:9f:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:26:27 2026 by rpki-client