Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: 3CT3t8qK2aMvKG+a9gT33lZvBZuq3ZyyinSDt2g8rzk=
Subject key identifier: 10:46:B0:93:D3:A6:6C:5C:A2:47:83:2A:28:CD:73:F2:13:25:A2:6A
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 019CABA1D6046B9B82E0B997E36EB9435BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 150A
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: 7vhFwtZaxwNFMnoS4NLtO-wiXEI.roa (hash: B+OAgsSsP9qdSjVxzgxviHBZvQyN5xNSRqji7TKBsus=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: 4fOPIvFmvi33ImF8BKH7g5xYVtPYjAm8sUwTmXGUhhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d6:04:6b:9b:82:e0:b9:97:e3:6e:b9:43:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=1046b093d3a66c5ca247832a28cd73f21325a26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:48:66:91:5c:61:20:1f:94:59:c3:95:bf:
f6:2d:c6:41:ad:dc:bc:4c:7d:b9:87:e2:4c:69:b7:
35:ad:42:9d:08:b0:67:ff:b2:71:45:69:59:aa:c8:
71:2f:a5:35:11:0e:c1:fa:76:2f:8a:51:d1:ad:02:
ac:e6:06:30:3d:c6:9a:68:bc:8b:e1:f2:af:57:59:
3b:37:27:ef:79:9c:f9:bd:7f:3b:c9:0e:76:76:a5:
cc:f4:6c:b5:2a:e1:e9:fd:52:e9:b4:f0:14:ed:7b:
85:42:5c:d6:f5:29:73:e9:6e:3b:82:de:ec:7f:33:
34:0c:0b:7d:da:bc:f9:8e:c2:27:c6:9d:32:b8:e4:
1d:a1:1c:eb:3a:56:af:6c:43:66:6a:e1:59:1c:85:
a2:4a:8e:30:51:a6:cd:64:e9:7b:6a:7d:07:96:cb:
49:bb:12:b7:d8:43:08:a4:31:46:d1:9d:27:dc:b3:
98:50:a0:af:63:b3:41:d9:ea:af:66:95:c5:eb:e7:
d3:06:c7:e3:83:0b:76:e6:2b:64:0a:fe:8e:cb:64:
ae:0f:75:7d:c3:37:55:2c:7d:75:c3:3e:67:33:d8:
74:40:68:71:db:db:1b:8f:17:25:94:af:e0:f0:06:
90:bd:94:e6:61:3b:de:0a:2e:a8:8b:dd:2f:ea:64:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:B0:93:D3:A6:6C:5C:A2:47:83:2A:28:CD:73:F2:13:25:A2:6A
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:69:ff:1d:5f:e1:af:2a:54:75:22:e6:00:96:aa:79:a9:1f:
e1:c5:4c:10:df:c8:2e:d7:11:04:87:10:44:ef:c3:30:86:67:
d3:d2:9d:09:a1:d3:95:82:fb:e0:c1:fd:9c:6f:5c:b3:6d:cc:
44:ac:dc:58:aa:69:6c:61:f6:e3:e8:76:46:e0:48:4f:39:33:
0c:2d:c0:8a:9c:ca:b2:5d:5e:ae:f4:72:33:b7:0e:e5:58:05:
62:cf:11:ae:1c:07:e9:c2:50:ad:9e:94:c1:fa:fb:f4:bf:21:
88:21:b3:c0:c9:4e:5c:c6:3c:48:d0:97:89:ca:d8:36:97:b0:
17:8f:44:d6:91:f8:ac:f0:97:72:d3:94:9d:b9:bd:87:05:8e:
dc:c0:40:b1:c9:f7:ec:67:5e:ba:85:4a:64:20:14:83:d9:74:
9a:bd:dd:86:ad:d0:15:db:33:c1:79:4c:91:ab:72:ff:02:29:
3c:b1:dc:36:0b:87:1e:3e:96:da:b1:c4:a9:d4:43:aa:46:62:
82:76:df:a9:e2:30:d2:95:6f:91:b7:9f:e6:ea:49:c9:9d:c8:
c6:11:c8:23:2d:ff:af:46:2d:82:63:0a:6b:97:9a:75:d3:70:
11:bf:f7:ad:b4:03:a1:35:f7:3d:78:c2:d3:fe:24:b7:15:7e:
78:83:9f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodYEa5uC4LmX4265Q1vFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODg2MjllM2M3ODEwYWNjMjI4ZTE3YTE4ZGI2Nzk0ZWJl
ZDgxOTMwHhcNMjYwMzAxMjMwMDM1WhcNMjYwMzAyMjMwMDM1WjAzMTEwLwYDVQQD
EygxMDQ2YjA5M2QzYTY2YzVjYTI0NzgzMmEyOGNkNzNmMjEzMjVhMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB5IZpFcYSAflFnDlb/2LcZBrdy8
TH25h+JMabc1rUKdCLBn/7JxRWlZqshxL6U1EQ7B+nYvilHRrQKs5gYwPcaaaLyL
4fKvV1k7NyfveZz5vX87yQ52dqXM9Gy1KuHp/VLptPAU7XuFQlzW9Slz6W47gt7s
fzM0DAt92rz5jsInxp0yuOQdoRzrOlavbENmauFZHIWiSo4wUabNZOl7an0HlstJ
uxK32EMIpDFG0Z0n3LOYUKCvY7NB2eqvZpXF6+fTBsfjgwt25itkCv6Oy2SuD3V9
wzdVLH11wz5nM9h0QGhx29sbjxcllK/g8AaQvZTmYTveCi6oi90v6mRE5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBGsJPTpmxcokeDKijNc/ITJaJqMB8GA1UdIwQY
MBaAFI2IYp48eBCswijhehjbZ5Tr7YGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84NzNiMmQtZTIwYy00MWNmLTkwZDIt
NGJlMTA1M2QxZmM0LzEvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84NzNiMmQtZTIwYy00MWNmLTkwZDItNGJlMTA1M2QxZmM0
LzEvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWn/HV/h
rypUdSLmAJaqeakf4cVMEN/ILtcRBIcQRO/DMIZn09KdCaHTlYL74MH9nG9cs23M
RKzcWKppbGH24+h2RuBITzkzDC3AipzKsl1ervRyM7cO5VgFYs8RrhwH6cJQrZ6U
wfr79L8hiCGzwMlOXMY8SNCXicrYNpewF49E1pH4rPCXctOUnbm9hwWO3MBAscn3
7GdeuoVKZCAUg9l0mr3dhq3QFdszwXlMkaty/wIpPLHcNguHHj6W2rHEqdRDqkZi
gnbfqeIw0pVvkbef5upJyZ3IxhHIIy3/r0YtgmMKa5eaddNwEb/3rbQDoTX3PXjC
0/4ktxV+eIOfjQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:45 2026 by rpki-client