Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier: h1azk+cz2fiH/zopUm367Qpo4fHn1DFkkufS2JFUjog=
Subject key identifier: 39:53:62:A4:6C:64:40:2D:AB:51:BF:12:92:1E:5D:E2:94:66:52:CB
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 019D27047FB510EE7BD6DDC281F3864053BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number: 0524
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: WKP+D+VtTm8YN0m5r29GBLI2IMx4x6zdZA4yC16RK+I=)
2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7f:b5:10:ee:7b:d6:dd:c2:81:f3:86:40:53:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=395362a46c64402dab51bf12921e5de2946652cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:00:76:30:67:c3:02:1c:f3:ee:10:63:2d:c6:
ec:2d:fb:b9:94:82:bb:dd:bd:18:34:30:b7:3a:38:
07:e2:b9:bc:46:bd:99:31:b9:69:cd:34:85:d6:0c:
bb:cb:56:5b:63:b2:3b:0d:f0:8b:0e:fd:14:41:7d:
53:82:6d:fd:37:e5:e5:5c:5b:18:29:f7:ab:dc:b0:
8d:e2:2b:ae:91:aa:d9:6f:42:1c:05:40:2b:19:5a:
4a:8f:6f:84:59:36:96:a8:b1:6b:56:f5:63:d7:e5:
67:75:3d:14:c7:94:b5:69:de:65:54:2b:59:5c:77:
37:3b:40:a7:45:2b:30:1c:d2:17:f9:09:76:62:e2:
8c:93:4f:3b:5b:8e:b8:85:19:3c:8a:1e:21:a2:1e:
5c:c0:6b:34:36:2b:17:6b:27:69:c6:5f:e0:0f:6e:
68:fe:b0:c2:07:e3:8b:d7:8a:b1:38:4f:c9:df:ce:
2d:fc:11:dc:81:fa:78:3b:d5:df:0b:47:87:a1:b3:
5c:76:7a:a4:c1:32:ef:92:c1:a4:4e:48:79:1b:38:
e8:22:d5:53:f1:36:67:09:30:4f:d1:8e:7f:7e:ed:
08:55:91:56:1e:75:74:c6:2e:9e:a1:6f:06:8a:de:
e0:e8:07:93:59:9f:5f:4d:94:7c:03:28:76:9a:75:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:62:A4:6C:64:40:2D:AB:51:BF:12:92:1E:5D:E2:94:66:52:CB
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:e7:32:9a:80:d0:90:88:b5:c0:b4:93:b1:85:69:5a:91:
c2:af:8a:35:10:ab:57:17:75:58:e9:fd:33:08:d3:de:08:ae:
aa:77:47:e2:83:d7:8b:15:a2:b2:44:3c:9b:b8:d0:ec:c8:0e:
e5:01:23:31:42:e4:32:a5:11:32:96:ae:b1:df:92:aa:80:e8:
4d:89:7c:81:3c:bd:bf:41:d0:fd:40:2b:ad:44:44:1d:4a:a3:
a5:80:18:b5:25:44:63:31:77:b0:ff:67:2e:ec:cf:a0:96:db:
f3:71:85:f9:41:11:bc:17:93:fa:ee:73:7c:5d:09:46:3b:7a:
0b:80:bf:1b:e3:b0:78:50:f3:9c:88:d5:65:8a:19:c6:0a:52:
21:27:e1:ec:48:ad:5a:35:8b:15:22:1b:23:15:5a:20:d1:c1:
05:3e:97:2e:42:b7:b2:2d:cc:1a:12:42:10:ac:3e:df:b4:23:
f4:df:d2:a7:75:8c:c0:57:7c:8b:86:c4:19:16:85:40:cd:e1:
66:c4:d5:13:d3:8a:17:a0:e9:8a:8d:55:eb:f0:63:e1:97:b1:
1b:5a:f6:24:d0:19:8d:79:01:5c:ec:7d:f3:b1:ec:73:b9:37:
5b:6f:49:7e:ae:d9:ce:4a:2a:55:d5:ce:ee:8e:a6:d6:14:d8:
bf:1f:1d:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBH+1EO571t3CgfOGQFO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODBiNDU0NTVkODk3MzFmODdiYjUzZjRkYmU2NDExODk4
MzdkNGUwHhcNMjYwMzI1MjIwMTM5WhcNMjYwMzI2MjIwMTM5WjAzMTEwLwYDVQQD
EygzOTUzNjJhNDZjNjQ0MDJkYWI1MWJmMTI5MjFlNWRlMjk0NjY1MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wB2MGfDAhzz7hBjLcbsLfu5lIK7
3b0YNDC3OjgH4rm8Rr2ZMblpzTSF1gy7y1ZbY7I7DfCLDv0UQX1Tgm39N+XlXFsY
Kfer3LCN4iuukarZb0IcBUArGVpKj2+EWTaWqLFrVvVj1+VndT0Ux5S1ad5lVCtZ
XHc3O0CnRSswHNIX+Ql2YuKMk087W464hRk8ih4hoh5cwGs0NisXaydpxl/gD25o
/rDCB+OL14qxOE/J384t/BHcgfp4O9XfC0eHobNcdnqkwTLvksGkTkh5GzjoItVT
8TZnCTBP0Y5/fu0IVZFWHnV0xi6eoW8Git7g6AeTWZ9fTZR8Ayh2mnUU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlTYqRsZEAtq1G/EpIeXeKUZlLLMB8GA1UdIwQY
MBaAFI2AtFRV2Jcx+Hu1P02+ZBGJg31OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTct
MzgwZTViZGZhNWUwLzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTctMzgwZTViZGZhNWUw
LzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkvnMpqA
0JCItcC0k7GFaVqRwq+KNRCrVxd1WOn9MwjT3giuqndH4oPXixWiskQ8m7jQ7MgO
5QEjMULkMqURMpausd+SqoDoTYl8gTy9v0HQ/UArrUREHUqjpYAYtSVEYzF3sP9n
LuzPoJbb83GF+UERvBeT+u5zfF0JRjt6C4C/G+OweFDznIjVZYoZxgpSISfh7Eit
WjWLFSIbIxVaINHBBT6XLkK3si3MGhJCEKw+37Qj9N/Sp3WMwFd8i4bEGRaFQM3h
ZsTVE9OKF6Dpio1V6/Bj4ZexG1r2JNAZjXkBXOx987Hsc7k3W29Jfq7ZzkoqVdXO
7o6m1hTYvx8d2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:13 2026 by rpki-client