Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: o91JdQkzfwrw9Q8gGFSwp2vWkyaGW8F4HHotK01RuaM=
Subject key identifier: 3B:DD:6D:59:41:08:AF:06:50:FF:34:0B:7A:6E:FB:49:A0:45:A4:8B
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019F9090E6487FB91B66F8F134001650D679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 19F1
Signing time: Thu 23 Jul 2026 20:00:42 +0000
Manifest this update: Thu 23 Jul 2026 20:00:42 +0000
Manifest next update: Fri 24 Jul 2026 20:00:42 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: f1/hgU3GpT0uG+4y5IwxeFkmzTW9EFkzb1zl7txDoHs=)
7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e6:48:7f:b9:1b:66:f8:f1:34:00:16:50:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jul 23 20:00:42 2026 GMT
Not After : Jul 24 20:00:42 2026 GMT
Subject: CN=3bdd6d594108af0650ff340b7a6efb49a045a48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:92:ff:b7:42:04:38:2b:f2:43:4b:ba:09:
59:d7:c2:0d:80:ac:f3:8f:29:94:eb:3f:e3:3b:eb:
c4:1a:e3:32:58:3a:86:f3:e8:8a:9e:db:7e:d5:79:
3b:bd:72:49:2e:4f:f2:bf:d1:dc:2d:ad:9e:6f:f2:
77:a6:da:a7:96:6c:bc:b0:fc:91:80:a9:96:8b:a8:
6f:d0:23:06:ae:69:1f:8b:52:25:d8:32:bd:ba:97:
30:67:c8:be:0c:ca:15:64:79:ff:39:2b:57:7d:c3:
b8:01:18:e2:f4:29:7a:be:2e:01:06:45:2f:0e:1f:
a8:33:1c:ee:fd:7f:ca:c3:d9:65:96:1a:68:60:7c:
cf:48:ab:2b:9c:16:bc:7d:99:c5:d6:09:22:c6:0f:
0a:12:5f:b8:e1:7e:57:14:f5:af:66:19:d3:15:89:
53:36:80:e7:ec:f4:71:12:9c:e1:00:15:76:f3:c5:
60:87:a4:0d:33:18:65:58:5d:49:15:59:a3:2c:b2:
86:25:c6:05:c2:e7:cc:72:1f:ce:d7:8e:f8:13:71:
76:22:59:9c:8f:8a:56:ab:6f:74:ca:42:a3:32:63:
a1:b2:0f:5b:09:24:77:97:85:b4:b3:9b:f8:60:01:
ce:aa:78:1f:b2:d5:1c:ec:6f:34:f9:62:ac:1c:c4:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:6D:59:41:08:AF:06:50:FF:34:0B:7A:6E:FB:49:A0:45:A4:8B
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2d:bd:76:0d:85:45:b0:71:d8:87:d0:75:6f:0e:ea:db:bb:
16:0f:86:9d:6f:31:a1:ae:b8:b4:7e:dc:ea:82:15:73:ea:61:
1d:21:40:a5:4d:01:92:53:2b:d8:15:c4:cb:c1:7f:83:32:b0:
8e:cc:d2:42:2c:5d:1d:ef:6d:35:cf:d8:9c:e3:24:b6:6d:7b:
23:e9:7e:a2:bb:22:1e:70:9f:5e:e9:94:74:b4:03:9f:39:70:
67:39:2e:a0:ce:ae:42:0b:a7:0d:e9:de:7a:b1:f1:39:4b:58:
81:8f:b1:cd:bc:17:88:64:3f:47:e7:7a:64:f3:9a:b3:c1:cc:
ac:77:6f:64:40:c0:17:85:9d:ff:e1:a6:1a:2c:09:1d:37:e1:
fb:fd:18:5e:44:4a:78:c9:ed:51:1b:dd:3a:54:43:c9:9f:56:
dd:2f:f9:70:74:09:f8:5b:e2:cc:06:ff:fa:9a:c1:2d:f3:a6:
e8:d5:5d:de:1e:ef:8a:91:12:e3:0e:96:f7:b8:db:8b:dc:32:
9d:88:05:f2:bf:5c:fa:21:51:72:b5:6f:37:5f:6c:c8:17:f8:
b3:51:02:d9:c6:0d:c5:77:7b:32:c3:6d:e9:3c:8b:a2:1e:1b:
04:b9:de:7e:fa:6a:79:45:d7:d2:72:25:91:af:9e:82:eb:df:
96:c4:f0:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkOZIf7kbZvjxNAAWUNZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjYwNzIzMjAwMDQyWhcNMjYwNzI0MjAwMDQyWjAzMTEwLwYDVQQD
EygzYmRkNmQ1OTQxMDhhZjA2NTBmZjM0MGI3YTZlZmI0OWEwNDVhNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRWS/7dCBDgr8kNLuglZ18INgKzz
jymU6z/jO+vEGuMyWDqG8+iKntt+1Xk7vXJJLk/yv9HcLa2eb/J3ptqnlmy8sPyR
gKmWi6hv0CMGrmkfi1Il2DK9upcwZ8i+DMoVZHn/OStXfcO4ARji9Cl6vi4BBkUv
Dh+oMxzu/X/Kw9lllhpoYHzPSKsrnBa8fZnF1gkixg8KEl+44X5XFPWvZhnTFYlT
NoDn7PRxEpzhABV288Vgh6QNMxhlWF1JFVmjLLKGJcYFwufMch/O1474E3F2Ilmc
j4pWq290ykKjMmOhsg9bCSR3l4W0s5v4YAHOqngfstUc7G80+WKsHMRsBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvdbVlBCK8GUP80C3pu+0mgRaSLMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANi29dg2F
RbBx2IfQdW8O6tu7Fg+GnW8xoa64tH7c6oIVc+phHSFApU0BklMr2BXEy8F/gzKw
jszSQixdHe9tNc/YnOMktm17I+l+orsiHnCfXumUdLQDnzlwZzkuoM6uQgunDene
erHxOUtYgY+xzbwXiGQ/R+d6ZPOas8HMrHdvZEDAF4Wd/+GmGiwJHTfh+/0YXkRK
eMntURvdOlRDyZ9W3S/5cHQJ+FvizAb/+prBLfOm6NVd3h7vipES4w6W97jbi9wy
nYgF8r9c+iFRcrVvN19syBf4s1EC2cYNxXd7MsNt6TyLoh4bBLnefvpqeUXX0nIl
ka+eguvflsTwOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:06 2026 by rpki-client