Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: 6mx9ir0QuHCXcPftkhDDoihX07hZYTFNp2Ti1WrtQTY=
Subject key identifier: D0:B6:2F:9B:6F:77:8C:70:F2:ED:D1:EB:CD:F6:37:CB:71:00:4D:54
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 019D992B2EED84E89532467D403B1AF31C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 1585
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: 7vhFwtZaxwNFMnoS4NLtO-wiXEI.roa (hash: B+OAgsSsP9qdSjVxzgxviHBZvQyN5xNSRqji7TKBsus=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: wI4b/SpN8crpD10HmCNT9QdGQrHVOThIC21gEPumxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2e:ed:84:e8:95:32:46:7d:40:3b:1a:f3:1c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=d0b62f9b6f778c70f2edd1ebcdf637cb71004d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:e6:db:73:43:b7:fe:da:c1:4f:7a:fb:62:
05:24:c5:12:40:57:52:eb:a0:18:3f:71:ea:53:9e:
92:c7:2e:eb:85:7e:2d:d7:8f:bc:55:e6:78:51:c6:
ad:0a:d5:06:e0:d1:df:b0:a8:34:b9:a5:ff:ae:18:
98:97:91:23:45:6a:0c:ba:52:78:bf:4b:91:86:0a:
31:3c:47:a1:27:d5:78:91:78:c9:76:80:45:1c:db:
2e:40:09:94:a3:a7:ef:2f:4e:92:85:73:53:f2:c0:
cb:01:64:43:15:5a:72:2a:97:52:dc:d4:b5:5f:69:
54:88:23:63:be:1f:c1:d9:13:3b:80:94:ab:54:8f:
3c:76:fc:ec:2f:05:e7:2d:71:aa:04:23:2e:a6:74:
49:70:a9:c9:2c:82:3e:b2:4b:14:c4:cb:20:69:13:
8f:6b:60:7b:7a:93:da:e7:4e:24:8c:5f:13:ca:d2:
8a:82:69:d4:95:0a:23:65:f4:74:ab:6a:fc:30:c1:
57:1b:44:17:ae:be:5f:c9:10:44:e6:5f:ba:02:9c:
5d:4a:05:7d:5e:ef:b2:8e:d9:db:32:67:a6:35:29:
0f:bb:9a:9a:ed:cc:08:93:d2:32:6a:53:7e:c7:df:
3a:a1:67:f8:4b:c2:6b:87:74:41:b9:92:5b:e7:bb:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:2F:9B:6F:77:8C:70:F2:ED:D1:EB:CD:F6:37:CB:71:00:4D:54
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f3:5b:98:ca:4b:54:4b:dc:46:b8:4e:00:a4:85:1d:70:43:
42:47:45:45:4f:58:6d:5d:41:a4:1c:7e:e0:bf:3e:b1:e6:70:
af:87:d0:a4:cd:9e:0c:ae:af:3f:89:a4:53:ea:aa:7e:fd:df:
61:db:8c:b2:c6:8a:10:d0:d6:b6:69:3c:6b:9d:55:89:51:cc:
8f:4a:6b:4a:7b:71:d7:9a:f8:f5:7b:18:4d:6a:45:3f:34:37:
c7:e8:f6:b9:a1:74:5e:3a:90:0c:bb:99:c3:69:5c:ba:33:58:
50:c6:25:9c:fc:4a:91:5b:34:68:fd:77:25:6c:70:2c:f4:96:
f6:51:f1:33:d9:58:27:9b:98:1f:e7:fc:7a:2f:33:c9:34:6c:
8b:8b:3c:48:02:63:75:2a:c7:ca:1b:c8:1a:62:0d:ae:49:23:
f0:b5:b1:e4:e3:ec:6f:ac:c6:d6:8f:ba:4f:6b:d2:e5:0f:bf:
82:c6:bb:40:6a:3e:2e:49:0f:26:dc:0d:69:1f:bd:98:33:b5:
54:28:4d:28:df:9e:fa:c5:63:22:fd:c4:d5:3a:f7:59:a9:6e:
0b:66:56:44:c2:a0:37:99:9d:47:aa:39:2e:eb:75:fe:73:2c:
75:16:b8:80:21:f6:eb:6e:19:83:21:5f:80:82:ca:d0:59:a4:
0c:a0:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:36 2026 by rpki-client