Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: AGlsqI1Aq+vVcsZ/oUNore8+43jJU2rHDVLNI/iij8w=
Subject key identifier: EC:83:88:7F:0E:8B:BA:B8:C4:AB:03:B1:CC:4D:BF:E8:BA:EE:5E:B1
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 01A0D9838635B1613BC700F33E4C621BF666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 08FF
Signing time: Fri 25 Sep 2026 17:01:10 +0000
Manifest this update: Fri 25 Sep 2026 17:01:10 +0000
Manifest next update: Sat 26 Sep 2026 17:01:10 +0000
Files and hashes: 1: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: BOT4ngsWbtdKV8wf+OXSHOu5NnnywYmaxDxyEeQG8pQ=)
2: WVsQxFgimK0IaVgu0fCqH6Ya9j0.roa (hash: 9sCLSewlIQe4J9YBGaa7rhwdb5suwltCJKk62oK5F6w=)
3: pCSMBqmn-2xkRzGOrRbDhgjt1ZQ.roa (hash: qEIf3vrVO3maTFTQZWMGFxBk+5hFDaz1/E5BMr9cl+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:86:35:b1:61:3b:c7:00:f3:3e:4c:62:1b:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Sep 25 17:01:10 2026 GMT
Not After : Sep 26 17:01:10 2026 GMT
Subject: CN=ec83887f0e8bbab8c4ab03b1cc4dbfe8baee5eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:83:38:1c:a9:38:6e:5a:eb:2a:15:b1:99:ff:
c4:f3:ba:4f:ed:4a:d4:05:ac:20:5c:fc:bb:43:a4:
66:c3:7b:d2:9a:35:14:0c:e2:16:51:12:75:83:19:
56:97:53:ca:97:a5:0f:4a:0e:08:83:bb:e8:69:a7:
e8:6a:06:80:25:f9:53:70:3d:6b:8a:50:5f:fc:aa:
52:e3:61:81:66:a3:04:f5:3b:3d:6c:d3:25:14:27:
f8:dc:b8:71:fa:15:1b:b8:56:da:ce:c8:b9:bd:ef:
db:ba:26:25:e4:36:22:6c:b8:f9:ce:38:d1:36:75:
a4:b5:83:73:a5:df:d3:c5:50:64:5d:02:3f:47:4e:
f1:49:54:fe:5e:45:c8:8f:56:1e:b4:dd:dd:7e:37:
9d:06:c7:05:59:ff:9b:2a:04:fa:fb:0c:3f:06:56:
41:29:96:c5:61:ba:85:5c:b3:0a:53:da:e4:61:15:
e0:b2:e9:99:41:4d:5b:33:c5:19:02:a0:bd:a4:68:
68:7f:af:cd:2a:3a:8a:b2:66:7d:a4:76:64:a0:6a:
98:82:f4:60:24:35:9d:bd:d0:41:ef:95:5a:e9:aa:
37:bf:aa:aa:a5:68:17:21:8f:37:01:a2:8b:88:72:
77:3f:65:21:9f:b9:2a:22:2a:85:85:a7:19:06:1b:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:83:88:7F:0E:8B:BA:B8:C4:AB:03:B1:CC:4D:BF:E8:BA:EE:5E:B1
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e4:32:26:33:2f:f4:78:fa:1c:14:28:d2:5a:31:bb:31:61:
02:e2:9a:cd:3a:04:47:42:de:50:4a:52:a1:40:00:a1:c6:15:
dd:8c:0d:fd:bb:0d:e5:f8:8d:c8:94:50:78:2c:58:4a:c5:db:
c4:2e:90:6f:04:29:a8:1c:1d:87:57:df:44:5f:ab:a0:4e:61:
05:5e:4f:e6:58:00:57:dc:f6:e3:bf:85:42:11:c2:df:69:93:
9a:7c:8b:18:c8:82:93:36:04:ad:44:ec:80:ec:a3:d1:68:4c:
4e:43:c9:73:d8:f0:f9:04:2e:c1:02:bf:88:cd:64:32:7f:2c:
a9:73:a5:c7:d7:d3:20:26:c7:7e:27:51:46:78:2a:a1:b0:80:
ff:c7:36:66:da:0b:37:3e:00:51:68:cf:81:11:d6:38:c5:e1:
7e:ed:2a:6d:44:31:2d:0f:1c:a9:2e:b1:13:2a:74:1f:1d:f2:
9a:16:39:54:73:43:f3:ab:2f:23:cb:ed:34:b3:57:2f:2c:33:
70:58:c1:f5:d9:2b:77:ae:fe:bb:3e:db:df:a6:a5:7c:36:d8:
3a:ab:a0:91:07:6f:db:9e:02:1d:49:e5:3b:1f:e2:30:85:15:
7c:9e:bd:e7:da:d0:d3:ce:c2:70:31:df:9c:82:9c:90:2c:c7:
39:b8:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:22:41 2026 by rpki-client