Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier: u/L1q0xeDN6prQCPnpZwqS9WlceWO2QDsmBzcjIVzzQ=
Subject key identifier: 6E:8A:2D:9D:15:D6:96:AF:B6:2B:F5:96:88:4B:C8:F9:0C:86:17:00
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial: 019CACEB4D52125F5C4CBFE4596767CE0EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 05:00:27 +0000
Manifest this update: Mon 02 Mar 2026 05:00:27 +0000
Manifest next update: Tue 03 Mar 2026 05:00:27 +0000
Files and hashes: 1: 4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa (hash: XBbtmyDxr/MaSevTjNm0YVLmtgk2DlOz9kdPZzWObLc=)
2: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: uv6oPma2mtFRuv8Ux2+FnRg+ZKZaKxpVXlMFnKdpAFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:4d:52:12:5f:5c:4c:bf:e4:59:67:67:ce:0e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Validity
Not Before: Mar 2 05:00:27 2026 GMT
Not After : Mar 3 05:00:27 2026 GMT
Subject: CN=6e8a2d9d15d696afb62bf596884bc8f90c861700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:89:66:ad:b7:80:78:bd:26:e7:64:c1:fb:
78:0f:b4:0d:32:ed:02:9c:ee:3b:64:e1:6a:c2:e0:
46:fd:c7:4f:dc:b3:ed:4a:69:28:73:a9:c1:d1:28:
f2:b6:73:2f:e8:51:1a:4c:1c:16:05:85:21:2a:69:
2b:78:da:ff:2b:e2:b3:68:7f:20:83:bb:3b:e2:fc:
bf:4c:97:65:56:dc:0e:e6:c1:f1:74:33:9e:05:4c:
0f:8d:e5:49:4b:46:8e:00:e3:b6:77:5a:b5:6a:8d:
35:68:7f:ec:01:99:da:89:81:52:d7:f1:2a:a9:43:
fd:18:d2:f6:a3:c1:2b:81:dd:ac:fd:f4:9c:85:2c:
3d:fb:27:c6:2e:05:f9:dd:44:0e:67:1b:be:8e:53:
b1:f7:7f:5c:96:9d:45:4d:8f:cb:4b:bd:7e:ec:14:
47:d8:a5:93:fe:19:1f:21:d4:2f:b8:ae:67:25:8a:
e0:d0:89:e8:4b:3f:68:40:85:13:97:23:24:a6:30:
d6:80:23:6e:84:d2:22:98:cf:ff:63:b2:60:5c:10:
54:46:52:45:fe:c2:b9:a1:d1:45:4a:07:cc:6a:5c:
f7:a7:0a:f6:15:7a:a5:4a:60:e7:67:f4:a8:82:91:
b3:79:13:8e:05:51:2a:b3:4a:4b:c4:25:46:70:63:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8A:2D:9D:15:D6:96:AF:B6:2B:F5:96:88:4B:C8:F9:0C:86:17:00
X509v3 Authority Key Identifier:
keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:93:0f:d7:32:1e:d8:0c:ed:41:5b:9e:65:0f:e0:16:dc:84:
60:2f:b2:b1:9e:c3:33:86:94:e1:96:78:13:de:e2:6e:0a:d5:
27:61:0d:d8:3a:88:e0:69:79:64:41:09:b2:fe:c6:10:f6:64:
73:5d:f4:f3:e0:6e:da:66:14:1f:5f:1e:42:c4:3e:26:19:1b:
73:97:12:d6:cd:01:bd:d0:7b:8b:05:e8:60:0c:5d:22:0f:6b:
8c:29:bd:ea:e7:d0:ec:f4:c6:16:18:a7:5a:c6:9d:6f:1b:e3:
f5:fa:84:88:7e:a5:40:94:8a:a0:3b:88:67:51:d4:f9:c8:1b:
14:b9:8c:51:a8:5f:17:50:f2:3f:17:08:b0:51:60:de:59:5f:
3a:d8:36:a7:ef:40:df:e0:7a:95:9f:c7:a7:1d:98:29:32:9d:
fb:6a:c9:45:72:83:83:76:b6:e8:b0:50:08:69:cf:11:bd:fd:
c9:b6:3c:07:e7:b5:f0:89:b1:be:d8:5a:02:97:24:51:44:57:
20:bc:69:47:b8:81:41:1a:f9:75:1f:c9:32:f9:7a:2a:76:a4:
84:d4:3b:5c:d5:69:b5:b0:aa:d4:e3:21:ea:b8:4c:6d:6a:a0:
89:63:77:16:f0:43:8b:e4:f9:7c:b4:68:3f:02:48:c0:67:e4:
74:ee:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:37 2026 by rpki-client