Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File: JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier: bzqmhjnvlQYAB2ZoFU0sE5qj/EwCa+6BVl0RZd4VpLo=
Subject key identifier: C7:03:DD:1F:B6:40:D0:4D:02:47:89:7C:96:96:11:1A:84:06:9C:91
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer: /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial: 019ED507DC4FB955A21D8A03AEEFBD83132C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number: 015E
Signing time: Wed 17 Jun 2026 10:02:02 +0000
Manifest this update: Wed 17 Jun 2026 10:02:02 +0000
Manifest next update: Thu 18 Jun 2026 10:02:02 +0000
Files and hashes: 1: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: KldAkr80L11l9zV70iYq/9Ob7lII1OKZ/ZM1V3SZ6Gw=)
2: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
3: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:dc:4f:b9:55:a2:1d:8a:03:ae:ef:bd:83:13:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Validity
Not Before: Jun 17 10:02:02 2026 GMT
Not After : Jun 18 10:02:02 2026 GMT
Subject: CN=c703dd1fb640d04d0247897c9696111a84069c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:3f:06:b4:3b:8e:dc:f1:b9:dd:2d:cd:01:
ad:1e:74:40:eb:0d:13:d9:0a:77:7e:a1:7f:43:5c:
f0:66:7c:40:dd:97:79:57:20:36:82:37:63:07:28:
d9:0a:78:a1:ef:7b:2b:64:6c:ba:05:15:50:78:ac:
5e:b8:bf:41:51:09:0d:a7:df:0c:71:e8:20:b9:cc:
7d:f9:1b:e4:42:57:5f:0b:51:83:99:9e:9c:bd:9e:
4a:f8:6d:16:2f:2b:12:9d:00:48:4a:b2:7d:72:29:
66:08:14:4a:06:c5:e3:9c:5b:28:1f:27:ca:18:80:
79:e4:3d:0f:52:7a:ee:ce:53:d4:ff:0d:8f:14:34:
5a:41:16:56:ae:8a:71:7d:34:25:50:01:77:b5:ff:
3a:50:aa:9d:d9:33:3b:8d:2b:31:29:45:e6:fa:05:
e7:0f:ff:01:67:f5:72:2f:66:7b:af:a6:eb:e0:8a:
d8:b0:81:db:b2:6a:db:80:68:3a:b4:28:25:9a:c3:
20:66:3f:e5:6b:dd:c7:20:d2:9c:8a:72:d4:4b:31:
8f:b5:e5:5c:83:82:7b:02:18:cb:fc:7d:cc:3e:90:
36:52:f6:0e:2f:9a:e0:f7:50:d4:45:5b:01:d6:61:
59:06:ad:e8:c0:ae:06:5c:37:33:6e:ca:f2:cd:71:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:DD:1F:B6:40:D0:4D:02:47:89:7C:96:96:11:1A:84:06:9C:91
X509v3 Authority Key Identifier:
keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:12:15:f0:e8:90:d7:f0:1e:27:53:01:21:92:41:0f:fe:88:
b1:b2:7f:d9:b1:2a:c7:9a:95:3e:ae:e6:dc:2f:e7:49:e3:51:
19:df:48:3d:3c:53:da:34:71:f0:79:02:5a:40:f1:0e:be:d2:
76:46:2d:1c:79:19:12:d7:68:82:45:ed:14:3a:03:e5:b6:f0:
9e:c2:9f:ca:1b:45:e8:00:93:b0:bf:6e:61:8f:a1:16:ad:f8:
10:42:51:86:73:8a:e1:d7:f9:d4:95:86:fc:29:54:83:13:59:
69:2b:4c:6e:2d:7d:59:14:bb:4c:ff:6c:c0:82:70:35:ad:32:
c7:e2:bf:5b:84:1d:2a:df:53:05:4d:83:b0:99:28:9e:5d:f1:
c8:56:9a:19:80:94:9d:c3:7c:ac:66:53:92:69:e9:fb:4b:db:
83:2a:bd:28:94:7b:17:72:63:f4:1c:20:36:67:8d:c4:d5:2b:
5d:3e:97:9d:d9:ed:b4:c5:39:da:38:0e:84:54:0e:b7:0b:a2:
ff:70:16:2a:f3:40:4c:32:9c:14:87:d3:57:a4:24:b3:d1:34:
4a:72:f2:29:16:69:71:df:8e:ce:fb:c0:93:22:ba:5f:65:f6:
df:ed:89:98:c2:e1:67:cb:84:81:2f:6b:a0:10:ce:70:85:3a:
ac:ab:1b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VB9xPuVWiHYoDru+9gxMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODk0MWEzMzdiOGNhMTVmY2FlOTE2ZmNiNDIwYzU4ZGYy
ZTBiOWMwHhcNMjYwNjE3MTAwMjAyWhcNMjYwNjE4MTAwMjAyWjAzMTEwLwYDVQQD
EyhjNzAzZGQxZmI2NDBkMDRkMDI0Nzg5N2M5Njk2MTExYTg0MDY5YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxA/BrQ7jtzxud0tzQGtHnRA6w0T
2Qp3fqF/Q1zwZnxA3Zd5VyA2gjdjByjZCnih73srZGy6BRVQeKxeuL9BUQkNp98M
ceggucx9+RvkQldfC1GDmZ6cvZ5K+G0WLysSnQBISrJ9cilmCBRKBsXjnFsoHyfK
GIB55D0PUnruzlPU/w2PFDRaQRZWropxfTQlUAF3tf86UKqd2TM7jSsxKUXm+gXn
D/8BZ/VyL2Z7r6br4IrYsIHbsmrbgGg6tCglmsMgZj/la93HINKcinLUSzGPteVc
g4J7AhjL/H3MPpA2UvYOL5rg91DURVsB1mFZBq3owK4GXDczbsryzXGB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcD3R+2QNBNAkeJfJaWERqEBpyRMB8GA1UdIwQY
MBaAFCWJQaM3uMoV/K6Rb8tCDFjfLgucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYt
NDc3NWJiNjY4YjA0LzEvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYtNDc3NWJiNjY4YjA0
LzEvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxIV8OiQ
1/AeJ1MBIZJBD/6IsbJ/2bEqx5qVPq7m3C/nSeNRGd9IPTxT2jRx8HkCWkDxDr7S
dkYtHHkZEtdogkXtFDoD5bbwnsKfyhtF6ACTsL9uYY+hFq34EEJRhnOK4df51JWG
/ClUgxNZaStMbi19WRS7TP9swIJwNa0yx+K/W4QdKt9TBU2DsJkonl3xyFaaGYCU
ncN8rGZTkmnp+0vbgyq9KJR7F3Jj9BwgNmeNxNUrXT6XndnttMU52jgOhFQOtwui
/3AWKvNATDKcFIfTV6Qks9E0SnLyKRZpcd+OzvvAkyK6X2X23+2JmMLhZ8uEgS9r
oBDOcIU6rKsbzQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:00:57 2026 by rpki-client