Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: 7tsCiVAv2+pjTx/rsQlmRdG7zUxskn10pnvOkpvxovo=
Subject key identifier: 40:70:AC:A6:54:67:61:A3:44:EE:14:D3:10:A4:59:06:6A:45:F5:0F
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019D9886E2518047203CD3BBF4859C5ECD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 128E
Signing time: Thu 16 Apr 2026 23:01:09 +0000
Manifest this update: Thu 16 Apr 2026 23:01:09 +0000
Manifest next update: Fri 17 Apr 2026 23:01:09 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: bZWk4AhB-ix13SfItg99WGR-iHE.roa (hash: /vtIcpptaY2u+l35mug1F/OipcmBaaaq9NSFgSW4I9A=)
4: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: xtEOAGfvMtNsvk/twVDoi3qqiTzuu4P9qEi2DXHZRwg=)
5: rBfN5hySaU80pvKscbKLqXudBew.roa (hash: +ftjLdDbJ5p8switUZfvGRrNauB6kY6yhwTaJeXxA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:e2:51:80:47:20:3c:d3:bb:f4:85:9c:5e:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 16 23:01:09 2026 GMT
Not After : Apr 17 23:01:09 2026 GMT
Subject: CN=4070aca6546761a344ee14d310a459066a45f50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:2c:ff:b1:53:5c:b5:93:52:63:c3:3d:82:
81:c0:eb:fc:4c:c0:ee:26:8e:9e:f1:cc:5c:5e:f5:
9b:50:02:f1:74:2d:04:30:2c:e6:0f:4d:32:d3:ad:
09:89:00:74:1a:e9:02:62:a8:6a:b0:7f:96:5e:c2:
10:b2:53:83:83:c5:2c:69:23:9d:9a:50:b2:43:43:
a5:71:95:e8:8c:25:be:6a:b9:e3:df:15:9b:aa:26:
4a:c2:95:b4:91:28:9e:a0:5f:31:0d:12:8b:20:c7:
4c:29:4b:02:77:9b:62:e6:4c:f0:74:2d:3a:10:cf:
d4:92:d8:0c:d0:10:73:6d:1e:a8:f5:d9:09:b0:e0:
b5:86:6c:3e:0c:f6:36:18:93:89:48:04:c1:86:c6:
8c:69:4a:51:16:81:25:05:11:1c:5d:22:dc:0f:a9:
e8:94:f3:b3:d5:30:1c:53:1e:af:2a:c6:a7:b5:b6:
db:24:30:58:13:88:ab:80:a0:2e:9d:93:bd:3e:f3:
5f:d7:14:e6:8b:22:0d:87:ca:fa:71:cc:a5:17:68:
a7:f0:3d:a9:99:ca:7c:f8:46:ee:c1:20:00:26:8f:
d3:05:ed:b8:6e:f3:3a:11:5a:01:50:b4:4e:7f:cd:
a1:24:eb:76:fb:b0:f6:e2:22:3e:48:d3:7b:2e:57:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:AC:A6:54:67:61:A3:44:EE:14:D3:10:A4:59:06:6A:45:F5:0F
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:92:68:cd:3f:bf:b3:73:23:8a:c9:79:41:00:c6:25:fd:64:
64:22:44:b7:f9:c8:05:5d:61:9b:2f:2d:d3:d4:55:65:95:3d:
c0:4b:ed:b0:b2:60:8a:b8:b5:d5:e2:57:a8:03:20:9c:03:20:
f5:5a:1b:89:b3:ec:86:7b:d7:84:61:a1:1a:56:ea:8b:ee:a1:
36:9f:66:e8:9d:2b:4b:7f:31:f9:58:fc:3c:58:f8:46:fe:86:
22:f5:09:69:d7:5d:b0:b0:cf:9a:03:75:46:93:40:d6:b4:ba:
a5:41:1a:68:25:f4:c8:40:60:fa:5b:b7:4c:32:4b:68:2e:fc:
e2:8a:a1:2b:bb:95:65:2b:4a:9f:c4:87:ca:a5:af:77:a0:87:
08:3a:f9:6b:93:b7:a5:64:c1:c2:d2:a4:66:d0:27:ac:26:bd:
6f:4a:03:2d:66:5c:dd:5a:cc:f2:0e:af:2e:df:1b:44:4c:25:
bf:2c:f3:3c:b8:69:a1:40:f1:d0:0c:c8:9f:25:0c:3d:4d:69:
99:7d:b7:b5:3f:92:e2:91:66:b4:d8:0b:54:fb:4b:af:4f:56:
70:c3:d8:76:c4:b9:21:d9:2b:b0:ac:85:9e:fb:7a:06:8a:23:
1b:9c:a0:e3:be:53:68:3e:93:f2:e7:97:72:be:75:91:cf:e4:
82:b7:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:30 2026 by rpki-client