Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File: JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier: G/zZIvscB7Yq8v7rhG6lC/C/JBBLzlXew7V2IT0U130=
Subject key identifier: 0F:7C:8A:26:5F:7E:30:69:80:AC:1A:BF:32:DB:2D:3E:D4:68:72:F0
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer: /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial: 019D9C2CD6853BC3DF8C34AA73A66E9699B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number: BC
Signing time: Fri 17 Apr 2026 16:01:17 +0000
Manifest this update: Fri 17 Apr 2026 16:01:17 +0000
Manifest next update: Sat 18 Apr 2026 16:01:17 +0000
Files and hashes: 1: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: X60YYuCnrPp5lZM/4SQcyavQOSnRImBdFJNBvYknovU=)
2: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
3: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:d6:85:3b:c3:df:8c:34:aa:73:a6:6e:96:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Validity
Not Before: Apr 17 16:01:17 2026 GMT
Not After : Apr 18 16:01:17 2026 GMT
Subject: CN=0f7c8a265f7e306980ac1abf32db2d3ed46872f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:61:50:ac:1e:14:4f:14:a2:c8:8b:30:22:
04:cc:8d:0f:48:50:61:99:ed:57:91:c4:11:b9:74:
47:bb:7e:7a:e1:64:61:04:04:ac:f7:aa:bd:a4:15:
61:76:49:f4:9d:8d:0e:68:99:eb:c6:d3:56:5f:b9:
f6:3c:06:b0:e4:2b:c9:50:a3:a0:21:67:68:68:a8:
f9:d1:70:b9:52:6b:bd:ec:5d:8b:9a:fd:ac:70:70:
b3:4a:ae:35:4d:cc:81:3a:18:88:08:2b:bf:82:4d:
7e:b2:87:a3:ca:85:a0:de:bc:2e:98:69:e9:c5:7f:
20:b8:26:2b:cc:d8:dd:83:0a:76:0d:26:98:5d:2b:
e9:73:e0:3a:b9:23:b8:18:81:88:1f:d8:28:a3:77:
f4:5f:d8:e4:49:6d:83:b8:68:ff:84:8d:cd:1a:94:
d8:14:99:3e:68:e7:ab:f2:57:56:ff:ac:6a:8b:81:
1d:03:1c:ba:82:d3:51:fe:b1:c6:ec:67:3f:b5:37:
af:aa:dc:ca:98:63:21:02:2b:ee:57:29:e4:77:44:
22:02:9d:44:53:54:4b:d5:92:ac:7c:84:7b:c8:09:
9a:f1:f2:c4:35:9c:d8:fd:a7:77:99:eb:0e:64:54:
09:cb:6d:35:6e:46:4f:51:80:ae:64:26:4b:56:87:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:8A:26:5F:7E:30:69:80:AC:1A:BF:32:DB:2D:3E:D4:68:72:F0
X509v3 Authority Key Identifier:
keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fd:fc:0a:fd:6c:2f:04:a7:61:ef:9e:1e:ee:4d:2a:34:08:
9a:07:ae:b9:4f:9d:8f:84:7a:6d:d0:04:89:bf:79:1c:12:02:
bf:7c:f4:92:61:f7:f1:25:9b:1f:af:5d:91:5f:13:34:d0:82:
a2:be:70:cc:54:61:5f:a7:67:7b:71:47:c5:ab:12:06:fb:55:
de:20:8a:ca:a5:d8:8d:7b:3f:17:4c:8d:ce:f2:ad:06:17:66:
f2:62:39:6d:1e:d7:1b:8e:7e:1a:23:91:46:91:a6:36:f3:b3:
d4:8d:85:6d:fc:3e:39:4e:fd:3a:0d:fe:8f:47:20:e9:34:30:
2e:63:12:c0:f1:39:7a:82:27:29:a5:fd:f1:c8:20:25:31:09:
79:96:5c:66:5e:0f:e7:f8:13:75:53:2f:82:76:b7:bc:71:b4:
28:c1:1e:d7:e9:95:c3:d8:c4:67:61:c7:e3:f0:d9:2f:e2:cc:
bf:0a:e6:a9:e7:b0:4b:e9:60:17:0e:09:0e:5c:d1:ec:28:06:
6a:7e:c0:1b:33:8e:be:29:61:b7:42:29:34:39:7f:fe:57:11:
ce:a1:14:ad:6c:7e:46:9b:17:c0:8b:f5:ab:f2:97:3f:0e:1b:
51:0d:51:93:94:e9:92:cf:56:d6:fe:74:3d:a5:8a:37:f6:b9:
9d:4c:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:12:00 2026 by rpki-client