Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: TRWTEedy/5Vb/2PFxKdX0mVO0aYC2Kp6utJIlkDMyJw=
Subject key identifier: CD:49:7F:F2:DC:33:26:D5:94:C1:BC:7A:A9:75:56:CC:84:E5:D6:96
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 01A0C7B3571624A82DB05849FDF4EF0F32CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 1436
Signing time: Tue 22 Sep 2026 06:00:14 +0000
Manifest this update: Tue 22 Sep 2026 06:00:14 +0000
Manifest next update: Wed 23 Sep 2026 06:00:14 +0000
Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=)
2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: eIlvMj2hSlztXjtosxk2j9BvMn/c9I4bKQMVPCEbCDk=)
4: rP1URTYVfd_9XdYb3WISbeQbVvs.roa (hash: IQMQ/usDnC3qoYl80XNrpZJSW6cDKlPPV05RatnNmDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:57:16:24:a8:2d:b0:58:49:fd:f4:ef:0f:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Sep 22 06:00:14 2026 GMT
Not After : Sep 23 06:00:14 2026 GMT
Subject: CN=cd497ff2dc3326d594c1bc7aa97556cc84e5d696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:1d:97:32:08:21:0f:43:ad:2a:02:6b:f0:
6c:b9:f3:24:3c:a1:87:16:78:08:cc:d5:aa:37:49:
ed:33:83:ef:a4:f3:64:5d:25:7a:8e:6c:8d:7a:a4:
36:67:51:60:0b:34:70:0b:76:8c:9b:95:90:bf:68:
f0:38:0b:d9:02:b9:21:cc:73:18:5d:83:a1:a2:f1:
95:43:89:9d:4c:43:49:fe:2c:bc:2a:84:2a:65:cf:
65:96:7c:85:18:5d:76:32:b2:28:86:02:04:7a:45:
2a:07:ec:b6:55:c9:94:2f:32:75:c5:91:35:2e:9e:
17:f3:62:21:2d:6b:0f:7c:3b:1a:ff:75:71:0f:cb:
23:87:94:ce:7c:62:f5:12:a7:8f:73:20:d0:18:b2:
6d:3d:b2:a7:3c:9c:e1:6c:93:28:87:51:26:77:07:
5d:12:21:dd:b9:c2:ac:bf:1d:08:22:28:a2:0b:18:
92:f7:39:66:a2:f6:9a:b1:8d:bd:a4:a1:0d:07:d9:
60:21:5f:30:00:34:d1:57:9e:63:9e:9c:ed:2c:29:
99:6f:43:f0:82:d8:ff:8c:cf:18:ef:ae:c0:ab:f5:
a4:15:f3:01:56:08:bd:fb:3f:eb:ee:7e:ed:c2:7b:
c7:e1:76:4c:8c:00:2e:6b:21:b7:d2:c7:c5:c6:61:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:7F:F2:DC:33:26:D5:94:C1:BC:7A:A9:75:56:CC:84:E5:D6:96
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fa:58:68:57:ab:92:51:50:ec:55:09:a1:f8:98:44:9d:5f:
d9:f3:b1:16:38:11:b9:3c:ba:24:86:01:2e:11:b8:6a:ff:6b:
ee:6f:0c:a9:bf:0d:2c:5b:51:e4:1d:76:d1:f0:b7:c4:1d:0d:
2f:4f:aa:bc:a8:fb:1d:49:ae:29:bd:4c:bb:b7:aa:b4:fc:70:
44:ec:58:01:13:eb:5b:38:78:d7:d0:e6:af:53:19:f8:bd:90:
20:fd:06:81:21:20:b5:1a:63:e2:a0:f6:77:1c:9d:7d:2c:8a:
f6:7d:e0:98:4d:bb:27:ea:03:c6:8c:68:73:56:8b:61:03:70:
73:66:5e:c2:6e:82:59:82:83:26:c9:c1:87:cf:9d:db:8e:33:
0d:96:e6:31:74:4f:d8:57:58:30:0d:1a:89:31:a0:f9:98:9f:
03:49:8d:b2:b6:44:22:56:4e:35:c2:6d:58:6d:9c:71:2b:16:
3d:1a:f2:81:0d:b1:a3:80:54:07:28:2e:e7:f6:7e:0e:9e:ec:
67:18:7d:bf:9b:83:c0:11:56:0d:ea:71:e0:df:8c:f3:75:fd:
16:a0:b3:8b:38:52:75:64:a4:dd:2a:05:31:0e:6e:61:b1:e4:
dd:4e:10:72:d0:5b:24:83:f7:07:93:72:25:56:a4:52:65:3e:
dc:89:b1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs1cWJKgtsFhJ/fTvDzLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjYwOTIyMDYwMDE0WhcNMjYwOTIzMDYwMDE0WjAzMTEwLwYDVQQD
EyhjZDQ5N2ZmMmRjMzMyNmQ1OTRjMWJjN2FhOTc1NTZjYzg0ZTVkNjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBwdlzIIIQ9DrSoCa/BsufMkPKGH
FngIzNWqN0ntM4PvpPNkXSV6jmyNeqQ2Z1FgCzRwC3aMm5WQv2jwOAvZArkhzHMY
XYOhovGVQ4mdTENJ/iy8KoQqZc9llnyFGF12MrIohgIEekUqB+y2VcmULzJ1xZE1
Lp4X82IhLWsPfDsa/3VxD8sjh5TOfGL1EqePcyDQGLJtPbKnPJzhbJMoh1Emdwdd
EiHducKsvx0IIiiiCxiS9zlmovaasY29pKENB9lgIV8wADTRV55jnpztLCmZb0Pw
gtj/jM8Y767Aq/WkFfMBVgi9+z/r7n7twnvH4XZMjAAuayG30sfFxmGTFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1Jf/LcMybVlMG8eql1VsyE5daWMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvpYaFer
klFQ7FUJofiYRJ1f2fOxFjgRuTy6JIYBLhG4av9r7m8Mqb8NLFtR5B120fC3xB0N
L0+qvKj7HUmuKb1Mu7eqtPxwROxYARPrWzh419Dmr1MZ+L2QIP0GgSEgtRpj4qD2
dxydfSyK9n3gmE27J+oDxoxoc1aLYQNwc2Zewm6CWYKDJsnBh8+d244zDZbmMXRP
2FdYMA0aiTGg+ZifA0mNsrZEIlZONcJtWG2ccSsWPRrygQ2xo4BUBygu5/Z+Dp7s
Zxh9v5uDwBFWDepx4N+M83X9FqCzizhSdWSk3SoFMQ5uYbHk3U4QctBbJIP3B5Ny
JVakUmU+3ImxAQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:55:27 2026 by rpki-client