Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: HTxxipET+1K70ptRYks345NUGgoH1wTnY7iYuAIEISA=
Subject key identifier: 4E:64:7E:95:36:9B:7D:24:A3:8A:AB:59:07:28:F1:58:C3:B7:C1:CB
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019D9A752D52F20E39A65FFD268645313333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 18ED
Signing time: Fri 17 Apr 2026 08:01:03 +0000
Manifest this update: Fri 17 Apr 2026 08:01:03 +0000
Manifest next update: Sat 18 Apr 2026 08:01:03 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: Dfww0c+NSK/I/PeseHrmJ0rHHmzewBcWm6jsZydp6SA=)
7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2d:52:f2:0e:39:a6:5f:fd:26:86:45:31:33:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Apr 17 08:01:03 2026 GMT
Not After : Apr 18 08:01:03 2026 GMT
Subject: CN=4e647e95369b7d24a38aab590728f158c3b7c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:62:e7:d6:da:ff:7a:4d:25:a9:f2:68:75:
6e:9e:1c:a7:73:70:17:99:4b:31:e2:25:29:3f:e2:
14:4b:8d:f8:52:a5:8f:79:ca:0e:de:d6:38:7e:18:
38:7a:70:ae:df:9a:f8:2c:91:63:6d:fd:b0:ba:ea:
fa:d2:6a:f3:38:06:29:49:8e:ca:53:5e:55:4d:70:
fe:f8:49:41:39:50:3f:2c:5c:22:e5:f2:ff:0c:ef:
52:7f:40:e8:e2:1c:d3:a9:0a:7b:3d:cd:67:2b:cd:
8b:dd:16:39:75:64:08:d5:ef:30:d0:3e:76:e5:68:
13:e1:55:f1:af:c6:25:ae:71:56:3b:ee:27:67:22:
1c:f1:31:ca:08:63:42:48:dd:65:e9:26:98:21:e7:
89:94:38:fb:8b:65:26:82:18:68:0f:b9:65:69:fd:
b4:d7:b0:37:ec:99:e0:aa:ae:ec:13:5a:f2:9f:7c:
98:d4:5e:d6:fd:23:d5:b0:1d:13:e5:a8:fc:09:38:
84:ee:e1:3e:1f:e3:cf:cd:b0:57:08:8d:d0:de:87:
0f:86:83:8a:fa:97:93:df:31:5f:25:61:45:3d:8f:
dd:d6:4a:f6:45:6c:02:3f:7f:00:74:f9:14:a3:37:
6a:5b:60:a3:6a:b6:89:cf:73:53:d5:80:fa:80:34:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:7E:95:36:9B:7D:24:A3:8A:AB:59:07:28:F1:58:C3:B7:C1:CB
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:38:1a:88:7d:f9:81:46:de:f1:8e:87:3f:07:02:39:b0:2f:
e6:3f:53:eb:b5:77:a1:d2:c9:94:41:95:38:84:13:7d:50:11:
14:1b:f0:04:73:d2:6e:e1:67:b6:b9:4e:de:dc:05:49:9a:75:
4f:58:9f:1a:3e:b0:48:d7:a6:c3:ba:1a:75:89:92:d6:ed:0b:
dc:90:a7:6d:79:d9:1f:b5:db:53:88:c7:32:96:86:c1:5f:05:
46:6f:45:66:6f:75:64:ee:32:89:77:21:8b:63:02:39:f7:87:
80:37:50:ea:f7:2c:00:df:10:30:d6:ab:8c:cd:78:eb:41:d5:
e3:a9:4c:82:d2:7c:3e:a5:8e:3f:91:32:ad:b9:a1:e2:3b:2f:
e5:a9:c9:4a:29:d1:97:83:52:c8:01:26:21:0b:5b:36:4c:1e:
5d:f2:4e:b5:01:78:56:a9:a5:22:5d:cc:56:c7:d3:70:a0:af:
d6:4a:a1:86:a1:e5:a3:9c:f3:10:30:97:d5:92:42:ca:d7:f9:
35:90:36:cb:1d:18:32:3a:4e:5e:9b:2a:54:2a:f0:57:35:d5:
d9:d9:9c:1a:83:52:d8:f6:c1:9b:d4:82:09:ee:f9:80:df:78:
fc:f8:e1:44:a5:db:bb:86:3d:71:fe:c7:ee:69:a2:f7:7a:55:
31:5f:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:04 2026 by rpki-client