
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: oAE1GImALVASjOcnSAXBLzyTx4WsnimbuDqrsNCpAlc=
Subject key identifier: 3C:6B:52:F4:16:8C:C4:3F:3A:4E:2E:81:E6:CD:C4:DD:E9:66:69:69
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 019D254C95EB5CD066C1F4DF132B48150ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 14:01:09 +0000
Manifest this update: Wed 25 Mar 2026 14:01:09 +0000
Manifest next update: Thu 26 Mar 2026 14:01:09 +0000
Files and hashes: 1: IroHvVT-fL1CA6Xw3HQVfFISYaw.asa (hash: HdlzKV3zaYl517+NmI61+gCveDCkmQqdmsHAC/9LNUY=)
2: MZuJW49Q0-iqK40OGwij3e053zY.asa (hash: +9M2FRyYrlIfSiCaC2n7/lm/ODixjDz7d9tgpWDH54w=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: tf/+3J5I8VtnYZQIoI6d5qtNowVDPuf/bqP7tEWc7g0=)
4: kzE8V2n8t4VkwijQkuHTrLSYg_M.roa (hash: vDJXzEhACcVJt1Zhg/9zbLQmv+eSZCD2dXjNBm17jSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:95:eb:5c:d0:66:c1:f4:df:13:2b:48:15:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Mar 25 14:01:09 2026 GMT
Not After : Mar 26 14:01:09 2026 GMT
Subject: CN=3c6b52f4168cc43f3a4e2e81e6cdc4dde9666969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:cb:41:d4:88:ba:66:a2:9b:2f:65:9e:b0:
a8:1d:a9:3b:22:cf:60:64:14:0b:a5:9c:b6:4a:0c:
16:1f:d7:f8:a8:03:92:14:a8:7e:0c:a4:13:b5:d0:
bd:71:3e:90:ed:24:8e:5d:3a:cc:a8:34:0f:29:90:
d6:23:80:e0:4b:9e:51:21:76:05:b3:95:b8:35:9b:
5a:68:e8:f3:00:e9:c7:8e:1f:1e:26:4e:42:d8:0e:
c9:c4:91:94:20:05:c4:e7:e1:37:a1:8d:48:04:0f:
52:51:6a:60:de:f9:21:c2:cf:fb:c3:40:1c:80:22:
64:95:6a:5e:f2:66:3c:49:18:0d:20:61:2c:a1:57:
2d:24:1c:b6:c9:3d:36:ac:7c:b4:29:a6:3d:b4:de:
5f:7c:6c:72:d1:de:95:0a:4f:e9:cd:bc:d0:a4:82:
d1:17:bd:c1:6c:d1:b8:58:66:62:a6:04:e0:e0:5c:
c5:0e:a6:4e:af:47:21:df:fe:59:49:b4:22:54:11:
93:cc:53:87:d8:ec:42:54:f4:09:93:4b:3c:11:7f:
34:81:d3:94:24:15:91:a4:88:41:9e:b2:0c:c8:16:
25:af:5a:d5:52:21:94:f1:b6:f1:06:96:13:77:c6:
02:b2:d7:84:d3:d6:c4:53:57:b1:2c:16:33:96:d7:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:52:F4:16:8C:C4:3F:3A:4E:2E:81:E6:CD:C4:DD:E9:66:69:69
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:24:9c:8d:95:8b:09:a4:34:45:8a:6f:54:f6:dd:cb:14:0f:
f4:da:fc:fd:69:2e:2d:e1:e5:d3:dc:40:80:a4:b0:a3:76:a8:
b1:5b:2d:d1:30:91:d5:ce:8e:cf:f3:be:e4:ce:11:8f:78:26:
4b:08:4d:fb:37:3d:e9:71:8f:e7:28:d1:2b:57:ab:23:84:9f:
8d:cb:14:a6:28:fd:f1:a5:b8:57:f4:b0:52:b1:cf:85:d2:f3:
9a:89:e7:98:0b:07:eb:35:8f:0f:65:68:aa:02:9e:d6:8b:d1:
f3:b8:75:f0:ad:fb:f5:f7:96:56:d1:9e:1e:8f:26:85:a1:bb:
c2:99:a4:f2:f2:7b:79:67:54:05:d0:c4:c8:44:13:93:28:01:
c1:c0:fb:f8:57:e0:59:95:2c:45:0e:f6:16:2b:11:8b:ed:50:
8d:52:52:ae:3a:2e:52:55:92:47:c5:17:e7:78:d4:02:19:a0:
5e:e0:6c:5c:54:e3:a6:b1:dd:79:d1:ef:f8:69:56:17:b6:6c:
95:80:85:9c:4b:c7:b3:d4:56:75:62:15:53:36:97:b6:b0:10:
22:3d:7c:0b:40:b6:be:e1:a4:34:2e:43:1e:eb:6c:48:5e:05:
41:e6:b7:de:1d:96:e8:f2:c8:c4:f2:ac:44:a7:cf:26:0c:7a:
69:03:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:29 2026 by rpki-client