Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: cwp1/z7NtSf6fP1rCO9610k4+LtA06rpqgX7iJVfmp4=
Subject key identifier: B5:87:63:CB:ED:FE:62:2E:BF:59:72:B7:45:11:18:B1:E0:53:C5:15
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 01A0C6331473E434E6EDDCE847BEEE03A1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0DB5
Signing time: Mon 21 Sep 2026 23:00:31 +0000
Manifest this update: Mon 21 Sep 2026 23:00:31 +0000
Manifest next update: Tue 22 Sep 2026 23:00:31 +0000
Files and hashes: 1: Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa (hash: QYPBK9tLe2NLf5ToJsGlVRXUrRctKZptQZU1FwtQfmU=)
2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: /JtUNP++NyseVqaHXbHcBedpb3guXvBxz0eW2e6fj5g=)
3: UyR2Iv_YkQXNAfxLx7Mnvs32wt4.roa (hash: Cw3zsQ2rL48lutA9FZgXYq5rT2dmAUFKZx7J0iHwKB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:14:73:e4:34:e6:ed:dc:e8:47:be:ee:03:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Sep 21 23:00:31 2026 GMT
Not After : Sep 22 23:00:31 2026 GMT
Subject: CN=b58763cbedfe622ebf5972b7451118b1e053c515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:04:83:44:5d:68:54:f0:4b:52:6f:7b:40:
78:0e:66:13:40:09:91:73:a2:52:1c:38:f8:34:8a:
4e:b3:38:0a:3e:29:76:e2:ab:51:68:f4:97:8c:70:
dd:bf:16:0e:a7:c2:fc:74:05:32:c6:b6:d6:b7:80:
29:ff:e2:a3:1d:03:2a:c5:95:87:f8:bf:cb:42:b7:
0d:35:02:8b:67:b6:c8:80:b8:ac:d6:45:ac:5d:d3:
3f:e0:ba:b2:f9:ce:a3:35:1d:fb:45:fc:3e:81:6f:
49:4c:7c:92:2a:b0:1f:32:f2:26:39:a4:57:aa:6d:
db:4a:4e:18:ba:86:cc:6f:17:54:21:8d:de:76:cf:
c5:7e:57:9e:94:29:7b:82:88:2f:ec:ba:d5:09:06:
66:71:c4:ea:c6:0d:2c:63:02:74:c5:4e:18:4f:0c:
08:b2:1d:09:cd:5e:3e:eb:48:41:b2:81:ac:15:2c:
b3:9d:69:af:42:47:e5:02:8d:33:00:b6:97:bc:9e:
d1:4d:a6:f1:3c:36:be:5c:a2:24:8f:1c:68:91:41:
17:8f:63:8d:3a:5b:9d:44:e8:8c:73:d1:fc:43:44:
e6:41:58:24:09:e8:55:68:26:99:51:31:30:0c:10:
9a:e3:d5:7a:ac:78:6f:27:40:15:bf:70:9e:ad:48:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:87:63:CB:ED:FE:62:2E:BF:59:72:B7:45:11:18:B1:E0:53:C5:15
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e0:ec:91:68:68:bc:7b:3c:6d:81:58:6a:f3:e8:18:e0:3b:
2d:57:95:6b:aa:99:94:b4:32:46:9c:27:f5:11:9b:22:3c:be:
ae:8f:ef:44:15:4c:e4:d9:15:ad:35:f5:08:93:b5:09:07:f4:
4f:95:0b:12:77:e7:2a:a9:e2:ee:ef:77:27:86:c0:97:64:9f:
19:1f:da:b2:09:fa:2d:2e:3d:ed:37:af:74:c7:1d:b5:9f:6c:
f7:24:72:ed:df:b6:c6:70:aa:37:78:73:92:d0:cc:2b:32:2c:
b1:82:f4:70:8f:56:df:c7:c4:7b:0e:c4:c0:06:76:cb:31:84:
bb:64:43:5c:41:de:d6:0a:88:70:4b:7f:25:fd:af:1d:8e:db:
c0:5b:19:00:17:0e:2f:88:a8:38:52:c1:b5:d8:f6:7b:42:09:
58:82:39:01:30:4b:9e:60:ef:cb:1b:d8:59:72:5c:07:7e:2d:
4d:7a:f9:5a:6b:0b:95:b3:fd:f9:f8:2e:08:ac:21:75:fe:32:
19:82:44:fd:03:d2:6c:e8:14:a5:22:76:1c:9a:51:00:69:74:
41:0b:e7:ff:d8:37:e4:c4:b1:af:b6:d8:7f:36:21:99:b9:1b:
e2:8b:7a:ec:43:79:7a:e3:f7:40:79:72:0c:a9:f5:11:aa:bc:
17:82:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:36 2026 by rpki-client