Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: zFcSEwbM5A6lvcby+4g+QFyIcJJZ1MxoQEbOCDUPstg=
Subject key identifier: DE:D3:C9:6E:3D:63:7C:97:88:42:19:35:77:8E:86:8C:1B:10:E0:B8
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019CAA8FB1924EA066670733DDD078186020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 1870
Signing time: Sun 01 Mar 2026 18:01:09 +0000
Manifest this update: Sun 01 Mar 2026 18:01:09 +0000
Manifest next update: Mon 02 Mar 2026 18:01:09 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
4: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
5: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: uN99WN/Q91yR4Z5P+7kGDxCJLqBbQwREessmEwoXwYo=)
6: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
7: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
8: xRX3eIjahO4puPTf1ETFcIeZtqM.roa (hash: uyFEZOqDVgGWkkphz2xd63YtUHxoX2hF8v7uVO62XeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b1:92:4e:a0:66:67:07:33:dd:d0:78:18:60:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Mar 1 18:01:09 2026 GMT
Not After : Mar 2 18:01:09 2026 GMT
Subject: CN=ded3c96e3d637c9788421935778e868c1b10e0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:f0:06:71:0e:84:cf:fe:f5:61:08:de:e3:
ef:c1:0d:42:bc:d8:a3:c1:fc:22:b4:e5:26:79:cd:
c1:63:8e:4d:54:7c:28:7c:1f:ca:bf:1e:4c:2e:68:
03:49:1d:28:be:56:c2:ee:db:f9:fb:ce:56:1d:2e:
13:1f:ef:a7:28:cc:cd:d5:b5:75:7c:22:66:0c:4d:
66:bd:07:f8:a8:9d:c5:2f:9d:21:0e:14:b2:ed:98:
8d:1f:e5:92:d0:e7:81:fd:07:b5:ad:38:d3:7c:d7:
c9:c7:19:36:07:9e:1b:f3:b3:fa:69:01:2d:60:a9:
43:6c:99:58:36:ab:d4:f9:27:00:82:16:22:43:4b:
e6:4d:08:65:7f:33:0b:20:ee:b3:26:69:fc:0e:2a:
e6:ee:20:d7:82:82:b8:b8:d5:ee:0b:02:09:88:c3:
ff:dc:56:a7:e9:e0:35:77:7e:8d:db:1a:39:2c:53:
d0:8a:38:a9:8d:ed:2a:d6:5a:ef:d7:81:0b:44:a0:
6a:aa:06:5d:cc:18:2e:41:14:bc:f9:43:9b:9d:13:
0d:da:87:df:e2:84:ab:dd:89:65:82:61:18:08:88:
c9:9a:2d:51:1c:7c:38:69:ca:2f:fc:ee:dd:23:bd:
1d:35:d4:6d:14:50:50:ba:8f:7d:71:78:65:2c:0b:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:C9:6E:3D:63:7C:97:88:42:19:35:77:8E:86:8C:1B:10:E0:B8
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a3:00:7d:97:80:a4:b4:8c:d3:8f:31:33:4d:55:10:54:7d:
7f:72:44:ba:86:8f:dc:5c:7c:3d:94:10:b0:14:ba:7a:73:62:
8d:70:2c:76:cb:00:5e:59:d4:e8:e5:a7:57:23:7c:9f:4e:a2:
80:54:f7:25:46:75:b1:00:2b:c5:2f:70:ae:f9:5e:38:25:d2:
ab:cc:f5:0e:f4:01:60:43:90:c8:5a:d4:dc:1e:3f:d5:56:b8:
18:77:b1:22:e1:c8:c5:7c:6d:7f:5a:f2:1c:db:ba:17:c3:36:
84:f6:5f:3e:0c:b9:53:38:87:84:b8:5e:06:2b:70:f6:c9:fd:
19:71:27:1a:f2:07:9f:ab:1f:ce:81:c1:42:36:d2:f1:65:57:
be:34:f2:1e:4d:4b:72:22:17:cf:9c:49:82:d5:9b:83:61:d0:
e1:86:7b:5a:fb:c7:1c:48:00:40:c6:13:8a:da:dc:14:bf:71:
d2:8c:b7:d4:f3:03:19:d6:d2:28:07:9d:38:ce:b2:31:65:a9:
b7:59:25:04:52:24:3f:8b:52:b0:08:87:80:5a:03:ca:e9:85:
bd:45:6d:00:01:04:e3:40:8c:e7:a6:0c:f2:92:a0:d1:50:11:
b9:90:a0:26:c6:58:3b:38:70:c4:18:eb:a0:43:3b:ca:ff:7c:
63:bb:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:36 2026 by rpki-client