Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: 74J19wyuEMjt0MOPdI1coONoLfzFw4EAGO01r+rDu9g=
Subject key identifier: 98:EF:76:AA:AD:CB:1F:EA:70:23:2C:FB:E6:03:66:9C:2A:7F:1F:29
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 019CACEB8FE1E7410EFA1086B1F5CB534AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 05:00:44 +0000
Manifest this update: Mon 02 Mar 2026 05:00:44 +0000
Manifest next update: Tue 03 Mar 2026 05:00:44 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: 6auuT0K2hpnTZc6Tzfjp2go11mHVRZiUMSVICTLJKAE=)
2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:8f:e1:e7:41:0e:fa:10:86:b1:f5:cb:53:4a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Mar 2 05:00:44 2026 GMT
Not After : Mar 3 05:00:44 2026 GMT
Subject: CN=98ef76aaadcb1fea70232cfbe603669c2a7f1f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:03:6a:b1:ea:43:57:61:22:c6:ce:4d:66:
4b:95:3a:a7:20:3b:18:37:ae:61:ef:fb:0d:20:93:
fc:d4:cd:42:85:e7:de:0c:6a:2d:6c:50:27:95:e9:
c9:f0:49:fd:e9:21:e0:be:1a:90:db:61:bb:b2:f7:
05:0c:f2:46:d2:2d:e8:54:a8:cb:db:36:0d:92:12:
df:d0:52:30:cf:4e:b0:c9:63:41:b0:2b:96:0e:73:
73:3f:be:3b:92:99:46:c8:6e:e5:e8:11:e8:d8:c0:
ff:0a:88:78:de:4d:e0:58:40:1c:d9:19:3a:c3:67:
35:47:70:78:62:81:96:ef:fc:4c:58:ff:2f:ff:e2:
d4:85:f0:8e:86:8c:1c:49:3c:08:ba:1f:fb:e6:32:
1a:07:5a:0c:4b:e0:cb:15:31:65:c9:38:d8:7b:ca:
a6:4a:78:de:40:99:f5:8d:d0:56:64:61:b1:8e:c2:
1e:bd:91:50:58:fb:a3:58:1b:d1:bc:4a:db:20:75:
09:5f:77:a2:39:1e:02:55:ab:f8:a3:9b:d6:87:6f:
89:fc:04:ea:12:34:c3:25:64:89:aa:c1:41:99:8a:
2a:ed:34:9e:91:ed:f9:53:76:f8:96:f2:f1:c2:f1:
a9:e1:61:4e:09:6a:5a:5e:80:fc:b5:19:f6:cb:59:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:76:AA:AD:CB:1F:EA:70:23:2C:FB:E6:03:66:9C:2A:7F:1F:29
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4f:66:f9:13:88:be:97:a9:f4:ad:29:81:be:47:2b:29:44:
70:b8:88:40:79:af:2f:7b:40:26:db:a8:2f:2e:b6:42:d0:3f:
73:0a:dd:ec:ad:de:55:58:81:dd:7d:64:2b:63:87:9c:4c:85:
24:8f:f5:81:72:6a:54:8e:5e:68:d9:c7:d7:05:c1:03:0e:f9:
e8:14:e6:ed:13:0a:af:48:e0:c6:5d:c9:3b:c6:9b:1c:2f:ca:
96:85:5b:ad:83:a3:5f:e8:23:ff:62:32:84:ba:d2:98:c5:c4:
83:d3:22:75:8a:0f:86:fb:ca:fa:3d:50:3f:a7:45:d5:e7:40:
58:31:c7:9d:eb:56:a7:39:5a:96:7e:0d:df:2c:8a:79:b4:4b:
e8:f6:73:a0:92:fb:79:d7:72:db:73:72:43:db:77:a8:af:2f:
70:ce:26:94:ea:c3:5b:e9:5c:d9:45:4c:24:41:81:20:c3:3a:
d6:5d:2e:b8:79:b0:aa:36:45:84:89:e4:de:00:58:9d:bd:14:
8d:aa:a5:59:28:d5:4c:00:2a:12:8a:1f:e4:95:68:19:3d:03:
64:f0:08:da:f0:72:9e:4a:85:1a:d6:b3:db:04:31:be:b1:d9:
8c:11:d5:e2:4c:78:a3:63:90:5b:55:fa:02:41:8a:dd:ac:08:
e7:3d:9c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys64/h50EO+hCGsfXLU0q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MjgwY2M1MzQ1MTZkMWMxZDllYTAyNGVhYWZiZDAxZmRj
NjhjOTcwHhcNMjYwMzAyMDUwMDQ0WhcNMjYwMzAzMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg5OGVmNzZhYWFkY2IxZmVhNzAyMzJjZmJlNjAzNjY5YzJhN2YxZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrYDarHqQ1dhIsbOTWZLlTqnIDsY
N65h7/sNIJP81M1ChefeDGotbFAnlenJ8En96SHgvhqQ22G7svcFDPJG0i3oVKjL
2zYNkhLf0FIwz06wyWNBsCuWDnNzP747kplGyG7l6BHo2MD/Coh43k3gWEAc2Rk6
w2c1R3B4YoGW7/xMWP8v/+LUhfCOhowcSTwIuh/75jIaB1oMS+DLFTFlyTjYe8qm
SnjeQJn1jdBWZGGxjsIevZFQWPujWBvRvErbIHUJX3eiOR4CVav4o5vWh2+J/ATq
EjTDJWSJqsFBmYoq7TSeke35U3b4lvLxwvGp4WFOCWpaXoD8tRn2y1m45QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjvdqqtyx/qcCMs++YDZpwqfx8pMB8GA1UdIwQY
MBaAFCcoDMU0UW0cHZ6gJOqvvQH9xoyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUt
MTViNzliMDI5NDNlLzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUtMTViNzliMDI5NDNl
LzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwU9m+ROI
vpep9K0pgb5HKylEcLiIQHmvL3tAJtuoLy62QtA/cwrd7K3eVViB3X1kK2OHnEyF
JI/1gXJqVI5eaNnH1wXBAw756BTm7RMKr0jgxl3JO8abHC/KloVbrYOjX+gj/2Iy
hLrSmMXEg9MidYoPhvvK+j1QP6dF1edAWDHHnetWpzlaln4N3yyKebRL6PZzoJL7
eddy23NyQ9t3qK8vcM4mlOrDW+lc2UVMJEGBIMM61l0uuHmwqjZFhInk3gBYnb0U
jaqlWSjVTAAqEoof5JVoGT0DZPAI2vBynkqFGtaz2wQxvrHZjBHV4kx4o2OQW1X6
AkGK3awI5z2cWA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:19 2026 by rpki-client