Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: rr/5Ej3ktY2/AN6SdEgbRShvtVfBkGY5Fsek/UXqrJo=
Subject key identifier: C1:32:8F:D1:BF:2C:C6:01:C5:04:2E:65:88:F9:99:5A:B7:C5:48:37
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 01A0C444AC64179FB4C18D6B76BCAC6BBCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0DB4
Signing time: Mon 21 Sep 2026 14:00:29 +0000
Manifest this update: Mon 21 Sep 2026 14:00:29 +0000
Manifest next update: Tue 22 Sep 2026 14:00:29 +0000
Files and hashes: 1: Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa (hash: QYPBK9tLe2NLf5ToJsGlVRXUrRctKZptQZU1FwtQfmU=)
2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: jF4kXstkdUf6GcDnTpW/CJeHf2pfqIatRMnxYnUkx58=)
3: UyR2Iv_YkQXNAfxLx7Mnvs32wt4.roa (hash: Cw3zsQ2rL48lutA9FZgXYq5rT2dmAUFKZx7J0iHwKB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:ac:64:17:9f:b4:c1:8d:6b:76:bc:ac:6b:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Sep 21 14:00:29 2026 GMT
Not After : Sep 22 14:00:29 2026 GMT
Subject: CN=c1328fd1bf2cc601c5042e6588f9995ab7c54837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:97:7d:a5:6d:c1:80:d1:01:06:8d:9f:8b:
42:c8:d8:09:45:1e:a4:9c:29:90:a0:54:23:d3:60:
28:87:b9:84:f9:c5:9d:b8:ff:04:26:22:0c:2a:35:
46:20:b9:1c:30:ed:47:8e:71:21:7f:40:c0:59:c1:
0c:f2:1d:3b:cb:7c:5b:95:4d:e0:9b:19:26:ea:39:
5c:c0:29:84:fc:f6:ca:28:fa:9f:b2:10:be:e5:ef:
00:f3:73:20:10:3c:bd:fc:6b:a0:85:59:87:57:53:
80:68:a8:90:9b:7a:a7:6f:e9:b3:97:08:64:89:85:
96:9a:f7:ce:c6:2c:e4:e9:44:95:7f:21:be:9f:b7:
5b:91:e0:20:1d:82:12:8b:de:75:88:68:0d:25:37:
e9:71:63:1e:7b:ea:83:1c:0b:87:8d:cd:a1:62:e1:
d6:29:f3:51:24:30:24:50:26:fd:7f:27:91:b3:7a:
d4:c8:98:54:2d:41:bf:7b:f6:25:74:8c:89:93:e0:
42:9f:3c:e8:73:2a:d7:d2:e0:ae:26:48:d5:ea:93:
6a:a8:de:0f:44:ee:52:0b:1e:f7:8c:a8:5d:a8:bb:
c4:26:6b:d6:ff:21:58:80:96:1e:80:4f:c5:6c:26:
28:ce:95:74:fa:12:ef:73:bf:59:56:b5:93:79:41:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:8F:D1:BF:2C:C6:01:C5:04:2E:65:88:F9:99:5A:B7:C5:48:37
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:c3:e4:9d:6e:db:40:08:5b:37:cc:d2:18:f8:c0:4b:64:
8b:46:f7:5e:db:fa:91:d8:b5:0b:e6:bd:fa:b9:05:71:ab:9d:
50:bd:a4:f4:00:dd:1c:98:78:d4:31:a9:d3:ef:62:a6:16:34:
f9:ba:e3:58:7d:84:3c:52:f6:07:67:b8:20:4f:05:a4:c2:f5:
3f:82:ff:2f:c5:72:33:db:2d:53:8b:fa:c8:9f:ce:c3:0e:b7:
7e:27:d3:33:39:44:38:22:23:26:b0:af:c0:ea:25:ec:40:55:
a3:9c:b5:d7:22:16:f6:4f:89:df:d6:b8:24:dd:be:4d:de:3e:
61:44:46:c3:b8:af:8b:5c:33:41:ca:3f:6d:aa:4d:9c:f0:5d:
3a:32:0d:12:c7:31:1f:56:1a:67:64:0d:cf:a5:c8:55:02:a6:
7e:cd:68:47:e1:01:89:a8:77:03:56:80:34:1e:dc:b5:71:3c:
54:aa:7e:f6:4d:39:ac:68:b8:f6:ac:01:b3:fb:42:df:ed:65:
d2:7d:42:1e:d2:5c:af:dc:6d:3c:6d:76:34:b5:9f:f0:ba:df:
39:3f:ab:a5:c2:ae:4b:83:2d:6d:9a:f0:d1:80:55:98:98:c7:
18:c3:4e:8f:41:66:a4:a0:fb:cf:5e:17:7f:36:d5:09:c2:2d:
0f:ce:af:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERKxkF5+0wY1rdrysa7ymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OGYwNzUzYzAzM2MxYWYwOTE4NjZkMDk0MjY0NTEyNjk2
Y2E2OGIwHhcNMjYwOTIxMTQwMDI5WhcNMjYwOTIyMTQwMDI5WjAzMTEwLwYDVQQD
EyhjMTMyOGZkMWJmMmNjNjAxYzUwNDJlNjU4OGY5OTk1YWI3YzU0ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CKXfaVtwYDRAQaNn4tCyNgJRR6k
nCmQoFQj02Aoh7mE+cWduP8EJiIMKjVGILkcMO1HjnEhf0DAWcEM8h07y3xblU3g
mxkm6jlcwCmE/PbKKPqfshC+5e8A83MgEDy9/GughVmHV1OAaKiQm3qnb+mzlwhk
iYWWmvfOxizk6USVfyG+n7dbkeAgHYISi951iGgNJTfpcWMee+qDHAuHjc2hYuHW
KfNRJDAkUCb9fyeRs3rUyJhULUG/e/YldIyJk+BCnzzocyrX0uCuJkjV6pNqqN4P
RO5SCx73jKhdqLvEJmvW/yFYgJYegE/FbCYozpV0+hLvc79ZVrWTeUFbGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEyj9G/LMYBxQQuZYj5mVq3xUg3MB8GA1UdIwQY
MBaAFCWPB1PAM8GvCRhm0JQmRRJpbKaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQt
MmMyZjBkMjRmOTM2LzEvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQtMmMyZjBkMjRmOTM2
LzEvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS7D5J1u
20AIWzfM0hj4wEtki0b3Xtv6kdi1C+a9+rkFcaudUL2k9ADdHJh41DGp0+9iphY0
+brjWH2EPFL2B2e4IE8FpML1P4L/L8VyM9stU4v6yJ/Oww63fifTMzlEOCIjJrCv
wOol7EBVo5y11yIW9k+J39a4JN2+Td4+YURGw7ivi1wzQco/bapNnPBdOjINEscx
H1YaZ2QNz6XIVQKmfs1oR+EBiah3A1aANB7ctXE8VKp+9k05rGi49qwBs/tC3+1l
0n1CHtJcr9xtPG12NLWf8LrfOT+rpcKuS4MtbZrw0YBVmJjHGMNOj0FmpKD7z14X
fzbVCcItD86v1A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:49:45 2026 by rpki-client