Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: 9/2Z9vOgcCtQR+Khry6wGJzz7nsQssYFF4zVNfzMZ0I=
Subject key identifier: 85:19:62:B4:85:DC:C0:A7:92:35:BF:43:C2:20:6D:85:71:A5:38:1A
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019D322C5AB37EA3A4562DEA9EC33FA47FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 1259
Signing time: Sat 28 Mar 2026 02:01:00 +0000
Manifest this update: Sat 28 Mar 2026 02:01:00 +0000
Manifest next update: Sun 29 Mar 2026 02:01:00 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: bZWk4AhB-ix13SfItg99WGR-iHE.roa (hash: /vtIcpptaY2u+l35mug1F/OipcmBaaaq9NSFgSW4I9A=)
4: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: KxnPpvGqVF/zgCOc5QBWhn88rkxRbuaWfOjawXCOiEc=)
5: rBfN5hySaU80pvKscbKLqXudBew.roa (hash: +ftjLdDbJ5p8switUZfvGRrNauB6kY6yhwTaJeXxA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:5a:b3:7e:a3:a4:56:2d:ea:9e:c3:3f:a4:7f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Mar 28 02:01:00 2026 GMT
Not After : Mar 29 02:01:00 2026 GMT
Subject: CN=851962b485dcc0a79235bf43c2206d8571a5381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:f3:24:79:62:1d:4b:09:09:ce:f4:db:30:
3f:ae:83:5e:1c:85:b9:82:9e:09:1c:fc:4c:2c:91:
e3:c8:35:e2:2d:8d:69:fd:83:ad:39:65:cf:77:df:
8b:24:c3:05:9c:a5:d6:fb:5c:e7:c7:81:de:fb:2e:
34:96:63:7e:14:7e:05:a5:23:2c:3b:00:12:47:17:
c4:7b:2d:0f:9f:f6:02:06:3a:85:da:be:94:56:fb:
60:b0:a2:11:14:f8:41:b0:2f:8d:2c:8a:25:7d:4d:
5b:98:74:79:fe:3f:88:2a:c2:32:77:b3:0b:78:5e:
2a:5f:10:64:98:d6:3b:18:a4:0c:76:fa:0d:cf:d0:
93:66:00:ea:18:70:8a:62:d3:30:de:18:60:9b:76:
d3:c1:23:17:50:c9:18:20:00:28:0e:1e:cc:61:6e:
8b:4c:5a:30:f9:ad:f1:25:d8:89:3b:99:82:ff:f4:
f0:f8:f8:ed:bd:9d:4f:94:cb:12:a1:5c:18:81:37:
63:3a:33:20:18:b7:8d:45:aa:d1:dc:9b:7f:48:63:
b3:cd:b8:0d:4e:3b:18:d9:6f:64:d4:e0:4f:c8:b2:
ac:fb:a0:ab:5f:86:07:a1:c6:12:12:d5:a2:be:ac:
d1:35:61:85:f6:65:ea:20:65:42:8f:83:31:47:80:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:62:B4:85:DC:C0:A7:92:35:BF:43:C2:20:6D:85:71:A5:38:1A
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ef:a1:0f:50:de:38:2b:d4:d2:ff:30:9f:d4:c8:1b:43:5d:
49:e1:cb:54:ba:d5:0e:94:b0:4e:e2:36:58:0c:de:f1:d2:be:
48:d6:e4:6b:13:c8:ee:13:51:2c:2c:2e:f9:c2:88:9c:0a:ba:
c6:a1:ff:21:d5:75:b5:8f:2a:e2:77:1e:19:68:f7:23:31:e9:
2d:69:c8:24:89:8d:b1:53:a8:c3:2e:b1:5b:d5:ee:25:5d:f6:
5e:61:72:f8:33:4e:b3:df:0b:36:7c:e2:af:0a:f4:05:34:ff:
3c:df:c9:71:94:e0:ca:7b:9d:30:ca:eb:9e:ae:b7:17:82:3c:
47:82:5d:38:79:9f:82:ba:85:41:63:bc:29:4e:c0:7b:3e:77:
fb:69:fc:58:15:90:26:c0:1d:db:df:18:f1:dd:7d:af:24:87:
1a:a4:52:6a:25:32:72:26:39:51:6e:0b:c0:66:2c:4e:f6:2e:
3a:9a:f9:c7:81:e5:53:cc:b5:af:20:0e:02:fe:c4:15:2f:4f:
51:68:88:b3:c5:fe:f4:68:5e:4a:03:ab:03:38:04:d8:a4:67:
45:7a:1f:2b:e2:8e:a8:f7:ea:f7:c6:76:af:ef:74:8c:d5:ae:
2a:c4:54:ea:19:b9:b3:0f:71:19:57:5b:6a:c9:cc:ce:f0:ce:
d3:d2:eb:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yLFqzfqOkVi3qnsM/pH/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjYwMzI4MDIwMTAwWhcNMjYwMzI5MDIwMTAwWjAzMTEwLwYDVQQD
Eyg4NTE5NjJiNDg1ZGNjMGE3OTIzNWJmNDNjMjIwNmQ4NTcxYTUzODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCvzJHliHUsJCc702zA/roNeHIW5
gp4JHPxMLJHjyDXiLY1p/YOtOWXPd9+LJMMFnKXW+1znx4He+y40lmN+FH4FpSMs
OwASRxfEey0Pn/YCBjqF2r6UVvtgsKIRFPhBsC+NLIolfU1bmHR5/j+IKsIyd7ML
eF4qXxBkmNY7GKQMdvoNz9CTZgDqGHCKYtMw3hhgm3bTwSMXUMkYIAAoDh7MYW6L
TFow+a3xJdiJO5mC//Tw+PjtvZ1PlMsSoVwYgTdjOjMgGLeNRarR3Jt/SGOzzbgN
TjsY2W9k1OBPyLKs+6CrX4YHocYSEtWivqzRNWGF9mXqIGVCj4MxR4Am6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUZYrSF3MCnkjW/Q8IgbYVxpTgaMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO+hD1De
OCvU0v8wn9TIG0NdSeHLVLrVDpSwTuI2WAze8dK+SNbkaxPI7hNRLCwu+cKInAq6
xqH/IdV1tY8q4nceGWj3IzHpLWnIJImNsVOowy6xW9XuJV32XmFy+DNOs98LNnzi
rwr0BTT/PN/JcZTgynudMMrrnq63F4I8R4JdOHmfgrqFQWO8KU7Aez53+2n8WBWQ
JsAd298Y8d19rySHGqRSaiUyciY5UW4LwGYsTvYuOpr5x4HlU8y1ryAOAv7EFS9P
UWiIs8X+9GheSgOrAzgE2KRnRXofK+KOqPfq98Z2r+90jNWuKsRU6hm5sw9xGVdb
asnMzvDO09LrOA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 09:37:21 2026 by rpki-client