Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: 41a1sJOKtl/QHsR4r+W2M+oXyAXyVTOVIq+wClVflUA=
Subject key identifier: 29:A8:C6:E7:B8:12:B9:76:1F:F3:4F:46:62:8C:5A:35:FA:A6:93:8F
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019D2AE079F72EF62D7F6F58F843663C4795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0C1E
Signing time: Thu 26 Mar 2026 16:00:47 +0000
Manifest this update: Thu 26 Mar 2026 16:00:47 +0000
Manifest next update: Fri 27 Mar 2026 16:00:47 +0000
Files and hashes: 1: SGsCpP2ZWGXYubQPTxvrVXR66kw.roa (hash: JIt4ruXWa/YENYi1/1J1PLXj88CikR7IDYWni7Zr0vM=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: ke+APDCQCDwBxqKG7zm9wD1DesVjm+mtJQ7mIevicbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:79:f7:2e:f6:2d:7f:6f:58:f8:43:66:3c:47:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Mar 26 16:00:47 2026 GMT
Not After : Mar 27 16:00:47 2026 GMT
Subject: CN=29a8c6e7b812b9761ff34f46628c5a35faa6938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:8a:54:cd:da:6b:89:1b:2f:fe:0d:d0:ed:
46:d0:9c:36:25:64:ef:e8:7a:ca:76:16:8a:96:d3:
10:e8:c2:5f:ea:50:46:66:b0:e5:7c:2c:ea:ce:00:
76:f3:11:e7:5a:70:36:8e:98:00:b2:3c:1e:e3:f3:
03:3c:0c:3e:e2:c7:ef:65:5f:ef:ed:32:f1:4a:96:
3c:36:6a:4a:d4:d7:aa:e5:6d:3b:01:71:6a:f5:e2:
a2:fe:09:48:dc:45:89:10:b5:32:dc:e4:d5:4c:d2:
ea:d3:d7:e8:29:5d:ba:c4:10:83:19:8b:ac:82:fc:
f8:9a:c0:85:5a:86:97:25:0e:0b:2c:5b:1b:9b:63:
ed:ea:7a:94:26:08:6a:93:b7:d8:ab:e0:bf:68:f4:
8a:a2:e9:ae:72:8f:1a:ba:b7:b1:1e:cc:8f:c9:3b:
ea:d8:41:c5:f0:9c:a4:2a:89:b7:72:f9:75:f0:58:
e1:87:af:10:d6:91:8a:df:97:1a:07:0d:25:62:3c:
95:39:03:07:31:69:2c:97:cf:c0:56:4c:6e:b1:7b:
63:9d:4c:08:92:9b:0f:d7:23:5f:f2:e6:0e:96:84:
c4:5d:b4:4e:43:14:e5:de:5d:52:2b:32:20:92:01:
63:ed:6c:03:35:65:c3:b6:12:5e:93:1b:f8:2a:3a:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:C6:E7:B8:12:B9:76:1F:F3:4F:46:62:8C:5A:35:FA:A6:93:8F
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:4a:20:8a:7e:52:cd:c1:6d:9c:af:cf:d6:19:2b:74:07:
72:82:69:e6:30:79:42:b6:a6:af:81:1c:23:35:1b:36:e1:b9:
8e:34:fc:a6:e5:50:da:4f:5e:76:89:dc:ba:e1:c4:ed:f4:0f:
a3:39:56:eb:7f:69:50:77:ee:a9:0f:22:fc:78:f7:9c:69:14:
ac:11:b3:6e:8f:63:f0:62:ad:2f:21:40:13:55:fb:0e:2c:ee:
fc:f5:af:44:7c:00:ed:d7:e4:65:ae:a3:29:32:90:0a:34:bc:
b9:f9:44:36:8a:66:7f:3e:e8:69:40:8e:c3:de:54:e5:21:3a:
10:89:57:e4:d4:bd:62:49:30:aa:ba:2d:d1:8a:32:7b:f3:71:
7f:4d:05:12:a2:27:f4:a3:9f:31:b3:71:69:15:b0:1a:bd:12:
79:c4:25:ef:3c:d2:6c:ff:6f:c0:e8:77:91:f3:d0:d7:4a:81:
82:4e:3f:84:ba:77:56:34:00:ba:39:89:c5:50:cc:6b:f0:f3:
17:89:07:34:f6:c6:38:82:b1:de:cb:17:a4:a8:54:64:6b:14:
36:a6:e9:1f:bd:d1:a3:c8:ac:6c:9a:19:7a:95:d4:87:3d:b6:
80:f2:c0:54:da:26:f2:3d:00:db:ad:44:d0:b9:e2:71:ec:c9:
fe:be:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:24 2026 by rpki-client