Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: PSzShtIyecoLJ/df7YVNKzin7V4t8Prqkjzuo38ckKo=
Subject key identifier: 99:DE:0C:33:FD:A6:AD:0E:79:46:8D:1C:8A:C1:6B:53:1D:95:D1:76
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019CACEBD6816411EF333A9126FAF7AD3483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 1214
Signing time: Mon 02 Mar 2026 05:01:02 +0000
Manifest this update: Mon 02 Mar 2026 05:01:02 +0000
Manifest next update: Tue 03 Mar 2026 05:01:02 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: bZWk4AhB-ix13SfItg99WGR-iHE.roa (hash: /vtIcpptaY2u+l35mug1F/OipcmBaaaq9NSFgSW4I9A=)
4: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: NZ8/8Gz+UVjChQ71OBxj3nmSmfv8/SPsEVkF8edBdMk=)
5: rBfN5hySaU80pvKscbKLqXudBew.roa (hash: +ftjLdDbJ5p8switUZfvGRrNauB6kY6yhwTaJeXxA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d6:81:64:11:ef:33:3a:91:26:fa:f7:ad:34:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Mar 2 05:01:02 2026 GMT
Not After : Mar 3 05:01:02 2026 GMT
Subject: CN=99de0c33fda6ad0e79468d1c8ac16b531d95d176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:4b:ff:8c:d8:0e:e7:17:b9:17:8d:43:0b:
f8:1b:10:f3:65:61:2b:64:96:bb:fd:5d:ac:84:5d:
8a:08:54:86:a2:ec:4c:ec:24:4a:ee:27:f5:84:1e:
51:59:2e:04:26:e5:06:5e:f9:e1:82:b4:b9:5d:c5:
13:44:c6:9e:cb:a4:c1:f8:b8:30:43:58:d7:11:41:
32:31:2c:5d:24:0b:d7:9a:68:e5:02:a9:13:b7:6c:
2a:ea:02:89:8d:7f:0a:54:0a:5e:b2:ea:63:fc:96:
d5:c7:30:bb:b0:8d:a7:50:e6:de:ce:3a:0e:1e:2d:
00:38:5e:ba:d0:72:b9:5d:0b:af:dc:bf:33:86:2b:
23:31:93:57:25:5c:82:57:98:c9:3e:c3:db:91:e1:
ca:1d:7e:c3:46:e8:41:6d:82:3d:40:be:55:58:cc:
51:6c:9a:94:ea:f1:80:13:8d:62:bb:75:ca:40:20:
19:cc:44:8a:5d:af:0a:d8:e1:91:bc:a2:e9:49:fa:
8d:bd:0e:56:d7:70:1d:1f:88:61:01:7c:ab:1a:e1:
9d:ce:49:c1:16:5d:a0:06:ff:9e:c0:95:df:bf:30:
ee:6a:c8:fb:33:71:e4:1e:bf:5c:0b:67:f7:c1:eb:
a7:9c:63:e4:d7:cd:46:67:04:21:cf:c3:5e:8c:be:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DE:0C:33:FD:A6:AD:0E:79:46:8D:1C:8A:C1:6B:53:1D:95:D1:76
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b1:25:ce:b5:cd:1d:b6:51:dc:bb:f3:23:67:d9:dc:0d:1e:
48:7a:3b:08:72:8f:b1:bb:fa:86:19:74:ac:44:42:62:ae:3c:
3e:11:66:29:b4:a1:6f:56:5d:ea:ad:95:81:12:09:61:40:df:
b3:d2:59:b9:ec:93:6e:bd:4b:91:92:ca:91:f2:46:d1:c6:76:
20:b1:58:03:a1:83:11:ea:29:05:bf:85:b1:98:34:f2:47:33:
19:70:b5:f1:4e:63:f8:94:0f:41:18:6b:f0:77:e2:f4:99:c3:
6e:86:2f:72:f5:c0:3d:25:b5:b6:b7:9a:33:94:2a:1b:62:20:
2c:5f:4f:3c:70:27:d5:85:96:ec:d7:ae:2d:1a:97:97:4a:cf:
a7:07:f8:aa:ee:d4:bb:56:9c:fb:27:20:75:75:27:1b:83:07:
0b:d3:9f:5e:5b:73:eb:8f:78:be:93:e9:d1:6e:a1:d0:a3:59:
78:db:16:28:37:0a:c5:5c:42:3b:c3:9d:b2:4c:51:cc:d3:19:
9b:14:bf:ac:78:b6:fe:46:1d:45:19:aa:31:f0:c4:48:b4:cf:
20:5a:3c:80:1e:67:65:1e:88:85:e9:18:17:16:4a:97:08:e2:
f6:87:cb:38:71:9f:91:58:4e:6b:9d:da:06:98:06:fc:b9:fb:
74:6c:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:44 2026 by rpki-client