Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: Pw8ut1eSTrTvEsuci3NiIgOPioMVu7phvybQs4cPaEY=
Subject key identifier: 9A:BD:03:1C:75:E4:3E:9F:A9:82:62:D4:60:0A:36:50:50:09:EF:67
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 019FAE65E133EE7860BA3AA0D5A008E7B9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0D21
Signing time: Wed 29 Jul 2026 15:02:20 +0000
Manifest this update: Wed 29 Jul 2026 15:02:20 +0000
Manifest next update: Thu 30 Jul 2026 15:02:20 +0000
Files and hashes: 1: Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa (hash: QYPBK9tLe2NLf5ToJsGlVRXUrRctKZptQZU1FwtQfmU=)
2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: DBwrCoUhTWWZldN2kqYy4lnTbxTZOZfJ5AvovzOhxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:65:e1:33:ee:78:60:ba:3a:a0:d5:a0:08:e7:b9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Jul 29 15:02:20 2026 GMT
Not After : Jul 30 15:02:20 2026 GMT
Subject: CN=9abd031c75e43e9fa98262d4600a36505009ef67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:6e:23:21:1d:71:28:92:00:d4:42:a2:35:
f2:f2:f9:01:6a:51:2a:93:f2:e0:cd:fa:e1:04:99:
f2:bf:7e:3f:32:7b:6c:cc:bf:ca:c7:86:40:d5:dc:
26:99:84:e7:3f:b0:94:66:e4:71:17:aa:4f:8c:1e:
36:ea:e3:0e:ef:b1:9e:4f:df:e2:05:74:29:e1:17:
52:b7:70:b9:af:8b:a3:0d:ef:93:6f:e2:54:4c:51:
ff:4c:3e:15:83:f7:86:06:41:32:ec:2e:f9:8d:7b:
80:bb:ad:0c:1a:db:41:91:ce:90:80:4f:f6:95:f8:
a9:8d:9c:98:1c:68:c7:ae:64:07:a9:86:64:8e:1e:
64:c0:99:8a:ad:59:2d:31:a2:c9:7a:af:f3:c3:cd:
24:e5:f4:61:8d:dd:74:f8:8a:b1:a4:04:ae:2c:9c:
f6:7a:94:68:a1:e8:a5:35:25:6e:f9:97:f2:c9:ba:
5a:a3:53:bc:63:e3:18:dc:4e:ff:38:ea:34:38:e0:
2a:33:95:23:4a:8f:62:a0:9c:dc:62:89:78:7f:c6:
61:64:3c:b7:be:55:e5:a6:5f:f8:d9:1c:fe:47:ce:
26:4a:31:09:67:5c:4f:b4:43:91:e9:97:96:37:ca:
04:ed:80:ec:f5:2d:8f:ea:e7:2d:0a:65:e9:71:8e:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:03:1C:75:E4:3E:9F:A9:82:62:D4:60:0A:36:50:50:09:EF:67
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:a1:dc:d5:5c:fd:fd:25:5b:3c:0e:e8:6e:a2:f8:20:fb:
37:55:32:0e:35:b7:3d:eb:02:d1:8c:84:a4:3e:68:65:19:29:
5d:a2:0d:e6:5f:4d:ef:5a:af:1d:40:45:eb:94:be:3f:3f:14:
75:46:eb:cc:8a:c0:9a:7e:aa:14:10:ee:09:17:4c:98:76:49:
74:30:a7:d1:ab:35:e8:6b:94:b5:cf:18:80:83:93:4d:3c:db:
43:be:a9:97:30:b9:45:98:0c:1f:65:3f:ba:9d:c2:55:68:c9:
49:42:89:e5:84:1e:8f:01:86:af:18:7c:20:55:f6:a9:a8:99:
c9:13:12:95:a5:3f:66:2c:62:a1:19:06:f6:64:0d:98:07:ca:
08:55:ae:42:6c:a7:f4:cb:1a:f6:f6:ea:1f:35:e2:94:df:bb:
25:0b:87:ce:6b:d0:a1:6a:14:32:12:70:d5:95:c4:b0:88:8b:
42:28:2d:ee:4d:69:d9:2b:03:68:34:88:89:07:50:69:36:c6:
e3:7a:19:97:85:b2:51:2a:90:78:83:c8:45:fd:7c:5f:c7:6f:
56:48:96:43:78:08:df:b8:3f:96:03:22:5e:99:4a:a4:6b:e7:
12:9b:95:a7:54:60:ec:15:d3:4c:48:40:83:fe:a6:74:7e:8b:
8e:fa:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:02:20 2026 by rpki-client