Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: 2vKQq3LcOUnzB/GuvFKim+/s5D+twvwQ+NiOK9pO7mU=
Subject key identifier: 8D:14:23:5B:30:86:03:98:66:B8:7C:9A:02:50:72:53:04:E3:10:CA
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019D9C9A68C955C84775D08F29A159BE2170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 02EE
Signing time: Fri 17 Apr 2026 18:00:58 +0000
Manifest this update: Fri 17 Apr 2026 18:00:58 +0000
Manifest next update: Sat 18 Apr 2026 18:00:58 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: h0LHr7GBiltwa+IBam1Z6bKbALsw9kMJvyVjhd3IyTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:68:c9:55:c8:47:75:d0:8f:29:a1:59:be:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Apr 17 18:00:58 2026 GMT
Not After : Apr 18 18:00:58 2026 GMT
Subject: CN=8d14235b3086039866b87c9a0250725304e310ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:d9:f5:e8:83:23:e8:ed:60:c8:fe:c4:41:
3f:46:8a:af:b0:aa:c4:4c:5d:9a:20:99:48:9b:fc:
42:30:98:16:fb:ef:a6:79:62:ed:3e:c4:c6:b0:d1:
c8:07:a7:6b:c0:8b:9a:7b:2f:3a:7d:c7:08:70:6c:
e4:9c:c5:0e:14:9a:e9:8a:b7:be:e0:6e:fb:51:ee:
ab:2e:57:c6:a6:ee:b0:d5:59:31:52:fa:e7:2b:5e:
78:e0:f6:b2:45:0a:16:6e:a1:a9:80:ff:68:37:45:
88:73:90:4e:23:76:cb:12:21:06:66:ad:7f:f2:03:
df:42:91:54:f3:25:28:81:b3:68:bf:78:cc:88:1f:
76:23:e5:60:47:98:5c:ee:6a:2d:c1:76:85:7e:75:
43:24:02:23:e2:d1:90:1e:8c:de:0a:b1:10:c7:d5:
de:47:cf:65:48:4d:63:99:af:39:40:5e:02:7a:65:
6e:c3:1d:64:09:33:cd:28:67:5c:8d:82:57:65:65:
8d:18:f7:78:5e:23:ac:87:4b:97:c1:67:a2:d4:9f:
ae:8f:a2:08:2f:75:8e:71:85:50:de:b6:b4:0f:7a:
1c:d7:f8:85:49:07:ad:a3:81:7b:af:f6:b3:7f:8f:
23:20:aa:96:50:89:02:7a:05:d0:bf:43:a5:5a:48:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:14:23:5B:30:86:03:98:66:B8:7C:9A:02:50:72:53:04:E3:10:CA
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0c:c3:9c:42:10:e0:45:79:39:c5:16:d6:14:61:99:ca:57:
24:43:c2:af:14:88:bf:50:4e:bd:50:1c:28:65:af:16:59:2e:
92:e2:11:0a:29:d5:d7:04:52:c0:ce:22:4c:9a:3f:6a:a3:11:
ed:c9:d1:fb:73:9b:77:3e:2a:19:fb:a2:55:4c:b6:54:12:6c:
2f:9b:9b:7d:02:3a:4e:b5:48:c1:8b:e6:bb:a2:f7:b0:95:29:
1d:96:aa:bf:21:fb:22:fe:81:33:6a:45:e7:3d:3e:17:e8:44:
bb:87:3a:01:bd:1b:0e:26:93:4f:ee:98:81:76:71:1a:f8:f2:
42:59:01:b0:88:e4:48:3a:76:fb:83:b3:27:61:aa:e6:55:6c:
6e:3c:79:31:59:06:74:0c:a4:61:4d:4e:46:f9:5c:6d:10:7f:
30:8f:d7:3b:0b:ba:7e:e3:3f:8c:74:2b:dd:de:01:53:33:27:
05:01:99:d5:ef:1a:3a:a2:36:42:c0:0e:fa:a3:8e:89:c6:7e:
76:72:fb:aa:55:92:8f:15:9f:fd:1d:2a:ea:c7:33:71:69:d1:
d1:a5:c0:bb:ac:4b:39:f6:11:0a:1b:b9:06:3b:ca:7d:82:51:
d7:a2:44:b4:10:d4:48:f2:1c:2c:c1:b2:80:6a:e4:1f:9b:93:
63:a1:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:46:32 2026 by rpki-client