Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier: mDqUUDctmCcd58Je7Nc2AJ1XiPpjYlMnSOVjLtYxHLY=
Subject key identifier: A1:C0:87:C7:2D:D0:AD:98:E9:A8:3D:ED:DB:2D:06:77:9C:AA:F1:8F
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial: 019D9A74C349A3F59EFABF6D1E9CA71D8C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 08:00:36 +0000
Manifest this update: Fri 17 Apr 2026 08:00:36 +0000
Manifest next update: Sat 18 Apr 2026 08:00:36 +0000
Files and hashes: 1: 4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa (hash: XBbtmyDxr/MaSevTjNm0YVLmtgk2DlOz9kdPZzWObLc=)
2: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: 3AjbGcjR0cViHTq6DLICFjqMBHygN8oFxK4/UR5QkCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c3:49:a3:f5:9e:fa:bf:6d:1e:9c:a7:1d:8c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Validity
Not Before: Apr 17 08:00:36 2026 GMT
Not After : Apr 18 08:00:36 2026 GMT
Subject: CN=a1c087c72dd0ad98e9a83deddb2d06779caaf18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:54:3c:52:6e:a3:fe:4b:4f:94:ab:af:41:
36:9d:f6:d8:0f:11:5f:6b:ca:42:05:e7:f6:53:8d:
a7:ae:09:19:b6:7c:0c:72:eb:5e:92:58:70:69:43:
65:22:59:df:55:17:06:dd:48:0b:24:7a:e1:22:65:
6c:bb:16:30:66:2f:45:96:20:fd:b9:02:dc:22:c3:
28:5a:3e:7a:50:99:1c:71:5c:0f:1a:2f:e9:8b:01:
55:2c:15:a1:75:26:f7:06:85:0e:70:3a:9a:db:16:
e7:96:92:33:42:b9:48:c6:ed:b4:3f:4b:ad:d6:a6:
4f:74:8f:e6:25:0c:d2:34:d1:e0:ce:47:ec:b7:00:
43:1d:6e:fa:5b:32:61:04:93:89:64:30:37:3f:ad:
18:85:37:a2:6a:71:04:f3:7b:54:68:46:de:18:e2:
c4:57:7e:74:30:7e:86:c5:05:b7:fc:f5:97:c4:3c:
23:7a:74:f3:fe:41:96:19:eb:e9:58:b2:29:76:7a:
ad:98:62:fc:43:61:d2:88:29:12:24:21:1c:a4:83:
f5:b2:76:bd:5b:b7:31:86:6a:66:11:0b:c5:65:cf:
37:93:95:52:f8:41:68:12:52:d8:0c:27:64:99:b4:
5a:62:ea:7b:5e:1e:b3:2f:66:50:6e:ad:6a:86:2c:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:87:C7:2D:D0:AD:98:E9:A8:3D:ED:DB:2D:06:77:9C:AA:F1:8F
X509v3 Authority Key Identifier:
keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dc:2c:5b:69:fb:0b:23:3d:78:03:a7:76:52:30:46:91:a5:
8e:ce:41:93:85:09:39:5e:43:04:67:5f:4d:d2:d9:53:87:b9:
5b:fd:ad:49:f1:07:fe:7e:87:81:10:7b:46:62:e2:1d:76:41:
98:da:82:56:e4:93:74:d1:fe:38:74:f1:43:c5:fa:9d:02:4f:
02:78:64:15:d5:54:6e:89:a9:6b:5a:80:70:79:63:1a:f8:20:
6b:dc:cf:e5:e5:fd:c3:66:14:4b:2c:1f:3b:d7:df:d4:f0:f4:
3e:52:c3:ce:7b:d5:cd:8b:28:34:a2:d2:40:f4:0c:d4:b9:50:
00:fd:9b:bd:56:a4:b9:40:a4:41:20:3b:e4:6d:3e:4c:3d:f9:
18:68:2f:e8:9c:98:89:46:45:da:55:2f:64:b3:71:b8:49:af:
f0:31:5c:d8:c7:ce:43:90:f9:12:a8:7c:5a:ef:5c:9c:ba:98:
76:16:09:cc:d7:0e:ef:da:a9:57:58:45:ea:b5:b7:c0:ff:66:
f0:5d:ab:51:8e:60:10:da:34:9b:3e:2c:89:04:c4:7e:07:75:
e6:96:d2:55:11:6c:ac:07:66:4a:8a:ec:ac:f6:3c:7c:94:74:
9a:ee:4b:66:71:ed:42:39:e8:24:13:43:91:92:a8:36:1c:38:
94:59:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:32 2026 by rpki-client