Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: RgINRL8bouo0ifYKdJWkokEwAE3kWUDikCuZADvUmeY=
Subject key identifier: 50:50:37:B9:8C:D6:E6:08:FB:E5:FC:D5:6F:B8:5A:44:6A:B9:A3:9A
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019D2816D213DDF6204CCAA5AFD4F2651F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 18B1
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
4: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
5: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: 6EMC/oVFn1D8i99eAics7Lu4h31mT73/uJazeX+T36s=)
6: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
7: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
8: xRX3eIjahO4puPTf1ETFcIeZtqM.roa (hash: uyFEZOqDVgGWkkphz2xd63YtUHxoX2hF8v7uVO62XeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d2:13:dd:f6:20:4c:ca:a5:af:d4:f2:65:1f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=505037b98cd6e608fbe5fcd56fb85a446ab9a39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:ce:38:74:fd:ba:bb:78:20:30:3b:dd:da:
10:1d:e2:30:bf:3b:cf:04:1f:a6:55:26:25:8d:93:
46:34:ed:0b:2d:2a:e9:86:88:75:4e:df:cb:72:16:
89:69:21:80:77:ee:c4:cc:86:06:b1:2c:c1:71:71:
d0:15:9d:e8:85:7e:de:a6:5e:11:03:fc:0e:5d:b2:
1b:9a:58:17:a6:51:82:7c:64:06:b2:61:d6:ea:88:
6a:25:44:b2:f6:6f:65:c0:80:26:9c:cf:a3:ac:08:
af:82:02:07:a6:e5:bc:4d:2d:dc:31:89:47:3d:8a:
83:10:d3:6a:3d:0a:15:39:79:c0:50:89:61:c0:2e:
f4:d0:db:7d:97:a4:70:c9:c6:4c:11:5f:85:e5:5c:
47:c1:3c:1d:82:44:b4:e7:1e:33:74:a1:d9:8c:76:
88:4b:8f:e7:f1:3b:ea:bb:7f:71:73:11:4c:1a:d8:
47:3c:53:f8:c4:ec:ab:52:4d:6a:26:33:5b:05:21:
b9:4a:5e:54:37:b0:39:3f:04:8f:a3:05:fb:59:a8:
52:d2:3a:31:5d:c7:47:c9:e2:2b:21:34:fb:2d:81:
7c:e4:2b:3d:9c:95:8c:78:9b:1d:74:a8:10:c7:fc:
c5:62:c0:2b:b4:8a:3f:55:0e:3e:1b:43:3c:69:13:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:37:B9:8C:D6:E6:08:FB:E5:FC:D5:6F:B8:5A:44:6A:B9:A3:9A
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f8:1f:f4:aa:8f:6b:e3:f8:77:5d:a4:6a:42:ef:12:1c:bd:
40:90:1b:bb:96:39:c3:c4:9e:ec:45:f2:19:6b:2a:68:98:ab:
8b:7d:c4:da:c7:b9:0e:e6:2d:bb:b9:3e:d5:ee:7d:76:18:62:
b4:7e:59:07:e0:d8:84:7c:dc:ec:e7:8e:da:8a:6d:4c:35:28:
54:36:0f:6e:8e:4b:f9:49:54:45:59:02:c4:a1:cd:39:4a:32:
12:bd:31:79:ce:91:98:5e:82:40:19:8c:45:39:3c:b3:8b:48:
af:f6:f6:5a:b8:75:b7:02:c7:fb:8e:4d:ff:f8:93:4c:cb:8a:
a2:af:4d:1b:65:23:a4:8f:c6:15:ac:72:20:5a:bf:69:82:9e:
fd:3c:63:24:fb:44:a8:b7:9d:0d:85:ee:14:2e:07:a0:94:0d:
ef:d7:40:c0:8f:84:fd:47:c9:6e:14:37:6d:b1:d5:96:0d:97:
c1:6d:76:70:db:e6:3d:ad:bc:0c:43:ab:74:fd:a3:d3:d7:98:
bf:e7:19:9f:7c:53:e6:48:a5:01:fe:a0:66:78:ae:d3:7e:0c:
25:28:47:d7:13:ac:ef:aa:cb:c0:00:75:1a:a6:a9:f8:4b:82:
15:19:6f:13:9b:62:9a:75:73:4d:7b:2d:3e:22:ea:de:70:b3:
01:1a:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:07 2026 by rpki-client