Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: TCO2Ad93tLriTvzxpGxBHNEkZg0sQpeVV2DolwlLHQg=
Subject key identifier: C0:49:1E:B4:3A:20:C0:BB:48:44:37:AC:70:0C:01:F3:A3:E5:ED:28
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 01A13B5BED242702EFA7F6A8E21D78DFE592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 1AA6
Signing time: Wed 14 Oct 2026 17:00:42 +0000
Manifest this update: Wed 14 Oct 2026 17:00:42 +0000
Manifest next update: Thu 15 Oct 2026 17:00:42 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: Nr7K3XghJunDKy/xbX9Q65pfXdKrWcgB7BcO1I4IH4A=)
2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5b:ed:24:27:02:ef:a7:f6:a8:e2:1d:78:df:e5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Oct 14 17:00:42 2026 GMT
Not After : Oct 15 17:00:42 2026 GMT
Subject: CN=c0491eb43a20c0bb484437ac700c01f3a3e5ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:cc:05:03:2a:f3:36:63:98:60:60:f1:b1:
6f:b3:31:76:a1:c8:c1:25:78:b0:4f:94:4a:a1:43:
ff:dd:29:04:60:4b:70:f1:4a:5b:f8:8e:54:db:91:
db:d6:ae:96:28:1b:a6:e4:0f:89:d0:cf:90:32:64:
30:3a:1d:fb:62:0a:3d:3f:f1:c9:b1:14:9b:81:53:
94:3a:80:8e:79:05:05:61:99:95:2c:5d:84:b9:d7:
5e:d6:50:88:63:4d:d6:e1:b0:3c:1b:64:2b:53:2f:
32:ea:3d:94:c1:87:73:1d:d6:7b:b3:4f:bf:d8:36:
1c:5f:98:ef:dd:6d:f4:3f:08:b9:91:75:8e:82:73:
a8:9e:b9:c8:df:39:1c:b0:22:f9:62:e7:54:66:88:
33:ae:ba:9d:5d:e1:3b:98:3f:9e:98:5e:df:ad:4d:
b2:78:43:09:99:a4:0b:e6:dc:86:61:ea:37:3b:b1:
e0:2a:37:18:00:80:e2:41:35:06:dd:7d:7b:35:ac:
70:05:5d:84:29:6f:a9:88:ad:83:f6:28:87:16:66:
cf:26:e7:32:3b:19:d7:cd:be:37:59:6a:22:d3:f5:
f4:25:f1:7f:fd:eb:8a:bd:ff:d3:4e:8e:a2:fd:40:
69:0f:46:c0:2a:64:76:f1:d3:06:fa:a7:c2:0b:9d:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:1E:B4:3A:20:C0:BB:48:44:37:AC:70:0C:01:F3:A3:E5:ED:28
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:10:d4:7a:c3:17:1c:f3:63:bd:b8:be:ea:08:9d:39:4c:
7d:dd:f4:71:17:67:77:8d:9a:34:01:f1:c4:9e:08:10:38:1e:
a5:07:85:40:9d:c9:5a:50:2f:c4:25:aa:ba:d0:8b:85:8b:61:
73:ad:3f:1d:97:11:e7:31:cd:9d:93:53:17:f0:89:e3:e7:de:
3e:d3:66:78:eb:c5:fc:0c:a3:89:0e:43:ef:20:31:2b:a6:bb:
18:cf:21:55:ea:1f:4c:43:8a:fe:7e:2b:ad:c1:64:26:88:90:
96:8d:cf:47:81:3d:fc:ed:c0:60:4f:04:3d:a6:27:34:3e:7d:
85:02:d0:a7:cc:e3:0f:2d:39:55:1c:fe:68:e5:a6:64:53:97:
d7:62:c5:d2:a0:38:6b:83:76:74:45:58:2a:65:b3:5f:6d:a8:
1b:0d:ca:24:37:da:f4:8c:72:64:0d:66:52:52:ab:52:a1:cb:
c7:b4:70:b4:d2:1a:d1:f0:d4:f6:5b:33:81:5b:ae:2f:52:34:
5c:75:98:83:9f:7c:8d:b5:62:fc:a5:f9:11:b5:ed:26:67:3b:
f4:1a:5a:bb:ee:40:fe:e8:f4:71:bc:25:ac:1e:d1:41:e4:0f:
81:93:90:39:23:41:a7:63:35:fd:2c:dc:e2:c3:bc:1a:c3:c8:
e8:90:59:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7W+0kJwLvp/ao4h143+WSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MjgwY2M1MzQ1MTZkMWMxZDllYTAyNGVhYWZiZDAxZmRj
NjhjOTcwHhcNMjYxMDE0MTcwMDQyWhcNMjYxMDE1MTcwMDQyWjAzMTEwLwYDVQQD
EyhjMDQ5MWViNDNhMjBjMGJiNDg0NDM3YWM3MDBjMDFmM2EzZTVlZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHXMBQMq8zZjmGBg8bFvszF2ocjB
JXiwT5RKoUP/3SkEYEtw8Upb+I5U25Hb1q6WKBum5A+J0M+QMmQwOh37Ygo9P/HJ
sRSbgVOUOoCOeQUFYZmVLF2Eudde1lCIY03W4bA8G2QrUy8y6j2UwYdzHdZ7s0+/
2DYcX5jv3W30Pwi5kXWOgnOonrnI3zkcsCL5YudUZogzrrqdXeE7mD+emF7frU2y
eEMJmaQL5tyGYeo3O7HgKjcYAIDiQTUG3X17NaxwBV2EKW+piK2D9iiHFmbPJucy
OxnXzb43WWoi0/X0JfF//euKvf/TTo6i/UBpD0bAKmR28dMG+qfCC51PzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBJHrQ6IMC7SEQ3rHAMAfOj5e0oMB8GA1UdIwQY
MBaAFCcoDMU0UW0cHZ6gJOqvvQH9xoyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUt
MTViNzliMDI5NDNlLzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUtMTViNzliMDI5NDNl
LzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtoQ1HrD
FxzzY724vuoInTlMfd30cRdnd42aNAHxxJ4IEDgepQeFQJ3JWlAvxCWqutCLhYth
c60/HZcR5zHNnZNTF/CJ4+fePtNmeOvF/AyjiQ5D7yAxK6a7GM8hVeofTEOK/n4r
rcFkJoiQlo3PR4E9/O3AYE8EPaYnND59hQLQp8zjDy05VRz+aOWmZFOX12LF0qA4
a4N2dEVYKmWzX22oGw3KJDfa9IxyZA1mUlKrUqHLx7RwtNIa0fDU9lszgVuuL1I0
XHWYg598jbVi/KX5EbXtJmc79Bpau+5A/uj0cbwlrB7RQeQPgZOQOSNBp2M1/Szc
4sO8GsPI6JBZZg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:04:37 2026 by rpki-client