Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File: JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier: 4Ujm15RwhiJcNpZ8sj8DhQbTuSwAzlXgvTGxkfkR3Wc=
Subject key identifier: 15:85:D3:AA:86:4F:CE:21:FD:7E:F8:98:05:A6:01:D6:DA:BA:26:F8
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer: /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial: 019CAEA30BDB76FFE3FB9A923EFD5585C08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number: 41
Signing time: Mon 02 Mar 2026 13:00:46 +0000
Manifest this update: Mon 02 Mar 2026 13:00:46 +0000
Manifest next update: Tue 03 Mar 2026 13:00:46 +0000
Files and hashes: 1: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: 4fIk+ZPK6cM4uJeg3jnK5vfaGGVHRUVSR4sbV7LEHMM=)
2: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
3: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:0b:db:76:ff:e3:fb:9a:92:3e:fd:55:85:c0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Validity
Not Before: Mar 2 13:00:46 2026 GMT
Not After : Mar 3 13:00:46 2026 GMT
Subject: CN=1585d3aa864fce21fd7ef89805a601d6daba26f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:f0:66:69:06:db:4b:23:2b:6d:5f:d9:d4:
45:5f:ea:21:de:d4:85:b9:0a:45:c6:77:8e:9c:59:
64:b1:41:1e:d0:b9:a8:b6:ab:c3:6c:b8:e8:95:9e:
62:97:1b:5d:a5:85:c8:12:21:80:5a:5f:b8:97:c5:
06:f6:45:2d:98:ec:70:73:fb:7b:8a:4c:93:06:bb:
02:ad:cc:82:77:55:09:54:eb:3f:99:c2:79:93:3a:
7e:99:3c:05:fc:7b:f4:fa:61:23:b9:e8:49:e3:fd:
27:92:34:b6:01:dd:28:d0:fe:5b:ac:0d:13:58:f4:
f8:e2:b0:7c:d6:06:ef:e8:bf:e2:ab:32:f1:2f:59:
ba:05:b4:ad:b9:25:52:e8:70:f8:35:73:be:4f:b3:
45:ad:cd:56:b8:54:be:b6:97:71:f7:74:0a:15:3f:
b0:70:2f:58:12:77:ec:2a:7a:91:9b:7f:09:f4:90:
4e:f1:46:e1:40:0b:c5:93:db:87:98:23:70:c3:7b:
b4:9b:12:19:18:ec:d4:69:e2:c2:f1:97:64:b7:27:
8e:e8:d1:d5:22:c7:95:4a:d0:68:db:94:e0:53:69:
2a:98:61:0a:1a:8a:09:00:b7:0c:21:7b:88:f1:cf:
48:49:7f:96:e2:24:6e:98:d7:87:42:d8:bb:a5:af:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:D3:AA:86:4F:CE:21:FD:7E:F8:98:05:A6:01:D6:DA:BA:26:F8
X509v3 Authority Key Identifier:
keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:25:e4:e0:20:7c:dd:c4:10:e4:35:70:ae:3a:b3:3f:ba:6c:
81:f1:b2:9f:50:38:cb:91:ba:9f:64:02:57:c6:de:23:ed:5e:
3a:8e:88:dd:42:2f:49:91:53:53:a0:b6:ac:28:d3:30:5a:f7:
c9:57:60:55:1b:1a:28:9d:59:8c:0e:99:1f:84:e4:d4:eb:fd:
2d:1b:5d:43:bd:77:82:da:bc:52:e0:7e:69:c4:4d:0d:50:70:
b9:8f:b1:75:86:b7:b9:73:39:87:ab:a0:17:ba:63:7c:a4:e6:
28:c0:9a:fa:61:28:78:2a:4f:72:94:1e:70:6e:91:a8:a7:0a:
37:3c:69:20:05:8e:31:0e:be:f8:58:32:24:94:8d:11:31:2f:
82:5f:2a:47:ea:3b:2e:2b:6c:20:07:4b:c3:a3:95:cd:81:7f:
a2:e3:32:8b:3c:80:63:4f:b1:92:bf:06:a0:45:e6:96:ea:c4:
10:5c:0b:00:ab:7e:87:91:ba:9c:2f:25:d4:8d:33:8f:9d:09:
37:25:66:d0:47:c2:de:07:e0:23:a6:6d:07:b6:42:8a:36:aa:
41:2f:eb:08:ec:cc:63:02:11:a1:bb:66:d0:e9:b0:ce:00:95:
f9:b3:dd:4d:85:58:53:de:e5:fa:b4:04:cd:f3:c4:04:82:61:
92:0f:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:07 2026 by rpki-client