Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: GPQS39GPuyIN6ULOi6DhSwAL5PsDCu2him9SXasWio4=
Subject key identifier: 4E:92:DB:E2:85:45:9F:DA:E0:FD:7F:2D:D8:1C:B7:35:91:4F:68:A6
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019E1FB5710563DE1B4F7CF053C70F0B4DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 1932
Signing time: Wed 13 May 2026 05:00:45 +0000
Manifest this update: Wed 13 May 2026 05:00:45 +0000
Manifest next update: Thu 14 May 2026 05:00:45 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: YGuLuaGglJi43o2t1O1b5qYf8cKGloIv/F7m69byn5E=)
7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:71:05:63:de:1b:4f:7c:f0:53:c7:0f:0b:4d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: May 13 05:00:45 2026 GMT
Not After : May 14 05:00:45 2026 GMT
Subject: CN=4e92dbe285459fdae0fd7f2dd81cb735914f68a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:57:01:11:9f:fc:e1:2e:23:b1:db:89:92:
97:b9:39:a9:7f:8e:65:d7:ea:8a:a9:93:b6:4b:f5:
6c:dd:16:f2:3a:ff:a9:ab:61:55:70:90:94:cf:a2:
49:7d:64:22:59:73:61:81:10:cb:3d:bd:bc:61:f5:
d0:fd:99:20:80:34:93:18:75:65:de:1d:ee:97:90:
b3:85:48:35:d8:96:c4:e7:a5:36:42:36:9e:0d:3d:
56:5d:12:02:f6:d4:26:15:14:32:b4:9f:5d:3f:0b:
9a:6f:2c:55:4d:03:62:fa:36:a2:e4:70:4d:5e:5d:
63:00:d2:fa:e9:bd:0f:d7:56:11:36:2a:eb:33:56:
7d:34:bc:64:1c:ec:50:28:d9:99:1a:f4:58:97:f1:
5b:1d:f7:30:33:a2:75:2b:d8:c0:f4:a2:8e:ff:16:
18:68:87:ce:68:c0:57:00:a2:87:d9:e8:3d:0e:04:
c1:ca:48:4b:05:bd:9b:d4:37:56:ad:7c:aa:7f:f0:
d0:ae:71:03:e0:e9:4e:46:2c:c6:fc:a1:48:8a:3c:
20:2a:77:0d:52:37:42:c2:78:fb:16:4b:c7:07:8b:
16:11:12:bb:cb:ce:c3:f3:1b:63:72:84:40:51:f4:
be:4c:b9:0b:a9:b4:03:ae:48:46:c9:13:ba:e6:19:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:DB:E2:85:45:9F:DA:E0:FD:7F:2D:D8:1C:B7:35:91:4F:68:A6
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:61:83:83:a0:65:e1:e1:04:99:9e:38:00:10:9d:49:5f:03:
e1:47:34:fd:cd:2d:12:dc:ef:e8:6b:c8:72:c1:58:e5:dd:c1:
20:73:c8:83:e1:c5:59:25:de:eb:ec:fe:fc:46:38:e5:6d:de:
a4:e8:b3:64:55:a5:a1:ab:fc:58:37:7a:c4:50:21:ed:1f:ef:
56:c4:ab:0b:28:11:41:04:7b:8c:4a:40:ff:78:e8:f9:d8:3d:
5c:70:de:65:07:fd:42:5b:50:fc:7a:77:dc:dd:82:b0:d3:9c:
9f:bc:df:b6:29:b7:26:b5:c0:eb:aa:b6:28:af:c0:96:cb:50:
d7:96:68:52:e7:2a:4c:00:53:ca:00:c7:17:6e:bb:cd:84:78:
74:c8:35:95:13:2d:7f:69:dc:6e:46:7f:b7:72:85:4e:42:3b:
0b:74:76:99:63:a6:53:15:20:12:16:89:69:21:90:de:f6:b1:
60:5f:91:28:f7:0c:b3:0a:fe:f8:43:b7:30:f2:8f:ec:32:f4:
b0:2b:b5:90:63:c0:28:cf:5c:9a:0d:c3:3a:ce:c3:9e:7a:70:
84:1c:ca:43:d1:10:f8:0c:f0:db:ae:dc:c1:d4:07:f7:90:68:
98:8a:bc:6c:ad:9f:5e:92:6e:a6:1d:fa:dc:9e:a7:14:45:1a:
86:93:16:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftXEFY94bT3zwU8cPC038MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjYwNTEzMDUwMDQ1WhcNMjYwNTE0MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZTkyZGJlMjg1NDU5ZmRhZTBmZDdmMmRkODFjYjczNTkxNGY2OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FNXARGf/OEuI7HbiZKXuTmpf45l
1+qKqZO2S/Vs3RbyOv+pq2FVcJCUz6JJfWQiWXNhgRDLPb28YfXQ/ZkggDSTGHVl
3h3ul5CzhUg12JbE56U2QjaeDT1WXRIC9tQmFRQytJ9dPwuabyxVTQNi+jai5HBN
Xl1jANL66b0P11YRNirrM1Z9NLxkHOxQKNmZGvRYl/FbHfcwM6J1K9jA9KKO/xYY
aIfOaMBXAKKH2eg9DgTBykhLBb2b1DdWrXyqf/DQrnED4OlORizG/KFIijwgKncN
UjdCwnj7FkvHB4sWERK7y87D8xtjcoRAUfS+TLkLqbQDrkhGyRO65hmtaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6S2+KFRZ/a4P1/LdgctzWRT2imMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmGDg6Bl
4eEEmZ44ABCdSV8D4Uc0/c0tEtzv6GvIcsFY5d3BIHPIg+HFWSXe6+z+/EY45W3e
pOizZFWloav8WDd6xFAh7R/vVsSrCygRQQR7jEpA/3jo+dg9XHDeZQf9QltQ/Hp3
3N2CsNOcn7zftim3JrXA66q2KK/AlstQ15ZoUucqTABTygDHF267zYR4dMg1lRMt
f2ncbkZ/t3KFTkI7C3R2mWOmUxUgEhaJaSGQ3vaxYF+RKPcMswr++EO3MPKP7DL0
sCu1kGPAKM9cmg3DOs7DnnpwhBzKQ9EQ+Azw267cwdQH95BomIq8bK2fXpJuph36
3J6nFEUahpMWLw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:34:38 2026 by rpki-client