Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: d7icCSNQusePUmJqDH44Mewll/CePf4kJbvgmCl7WWo=
Subject key identifier: 04:1C:46:CE:B6:1E:2B:88:39:00:6B:62:79:45:B4:E9:EE:3A:47:DD
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019FAB9A646AE54CA876CB8053035DBFF1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 19FF
Signing time: Wed 29 Jul 2026 02:00:49 +0000
Manifest this update: Wed 29 Jul 2026 02:00:49 +0000
Manifest next update: Thu 30 Jul 2026 02:00:49 +0000
Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: IRkzlI07C+3jWr1CiZ7QOFJW081GSJV31xM18SdmtFk=)
7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:64:6a:e5:4c:a8:76:cb:80:53:03:5d:bf:f1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jul 29 02:00:49 2026 GMT
Not After : Jul 30 02:00:49 2026 GMT
Subject: CN=041c46ceb61e2b8839006b627945b4e9ee3a47dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:9f:1b:ad:f8:a7:c1:71:73:0c:7c:ca:77:
fc:4f:2c:a2:1d:9d:6b:95:1d:e6:a7:8f:0c:be:4c:
03:d7:4d:ec:f1:7f:d3:9e:4c:ce:0f:a0:77:8a:0b:
f0:1d:61:9a:4b:ea:50:79:86:35:da:ae:07:f4:66:
69:02:a4:c6:74:5c:92:e1:81:db:0c:f4:7b:09:bb:
6d:70:c7:19:0d:93:24:e6:d1:b2:00:5c:4d:a5:c7:
5e:47:25:94:48:70:f8:f6:09:fb:d1:63:a8:63:d4:
3c:cf:9d:b3:da:4e:88:d8:14:b9:53:77:4c:64:4c:
56:64:5a:ac:98:79:f2:e3:25:c3:0c:12:d5:c8:04:
8e:92:fe:40:74:59:15:db:be:8b:f1:ce:a6:f9:99:
d9:2a:f3:38:ea:a8:05:fc:c3:51:8e:ca:8d:d2:cd:
3a:1b:b8:0d:38:45:20:8a:b9:d6:d4:b2:85:37:5c:
c5:8c:a8:bf:06:ab:62:8d:e7:67:85:ed:4b:a6:7f:
4d:36:de:07:56:84:74:cf:2f:27:56:2f:3e:7d:38:
9b:eb:03:02:34:58:c1:d3:68:06:a0:8a:cf:5a:82:
40:7b:9e:1f:07:42:e4:68:bd:d4:78:b3:df:6a:8c:
e3:c3:91:22:70:ec:01:75:c5:ec:a1:55:ee:f6:fb:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:46:CE:B6:1E:2B:88:39:00:6B:62:79:45:B4:E9:EE:3A:47:DD
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:7e:8b:55:06:da:f3:07:ea:bc:cd:5f:b0:f8:ad:04:4a:
6e:80:aa:90:7f:5e:ee:46:e8:79:b7:d6:a0:97:57:e0:55:de:
65:df:32:9e:79:58:20:e9:94:8f:4f:43:d1:58:39:93:a1:39:
82:5c:e1:ce:57:2e:56:89:73:9b:1a:07:63:8a:c9:ba:1b:d1:
f5:79:2b:c6:df:e4:bb:e3:f2:60:1d:d7:c5:5e:fa:15:3b:5e:
fd:69:e2:03:7c:12:60:b4:87:85:4d:66:10:09:db:f1:a0:32:
c2:91:96:81:ac:59:05:43:42:0d:bc:6e:fe:cc:41:de:1a:bb:
be:ba:ed:34:d2:44:30:9f:5b:a4:ee:13:10:f7:61:c4:36:65:
9d:60:01:99:a9:d4:36:42:03:63:93:03:c0:93:ae:fb:0b:65:
b7:4c:3e:33:d7:17:5e:cf:8b:1f:57:a7:6a:5e:c0:19:30:05:
7c:29:46:f3:58:1b:2f:ea:fc:e9:1f:a8:e0:97:4f:38:dd:a5:
de:fe:09:5a:ca:b8:72:1e:e9:6d:6b:7e:d0:d9:ab:38:7e:5c:
3f:77:90:d9:37:7c:76:da:55:52:45:45:f2:a1:d5:09:73:04:
63:a4:bb:1d:d8:74:04:28:d0:25:61:ec:d8:8c:f7:4e:fb:84:
d6:c9:4b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmmRq5UyodsuAUwNdv/HqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjYwNzI5MDIwMDQ5WhcNMjYwNzMwMDIwMDQ5WjAzMTEwLwYDVQQD
EygwNDFjNDZjZWI2MWUyYjg4MzkwMDZiNjI3OTQ1YjRlOWVlM2E0N2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc+fG634p8Fxcwx8ynf8TyyiHZ1r
lR3mp48MvkwD103s8X/TnkzOD6B3igvwHWGaS+pQeYY12q4H9GZpAqTGdFyS4YHb
DPR7CbttcMcZDZMk5tGyAFxNpcdeRyWUSHD49gn70WOoY9Q8z52z2k6I2BS5U3dM
ZExWZFqsmHny4yXDDBLVyASOkv5AdFkV276L8c6m+ZnZKvM46qgF/MNRjsqN0s06
G7gNOEUgirnW1LKFN1zFjKi/Bqtijednhe1Lpn9NNt4HVoR0zy8nVi8+fTib6wMC
NFjB02gGoIrPWoJAe54fB0LkaL3UeLPfaozjw5EicOwBdcXsoVXu9vs7KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQcRs62HiuIOQBrYnlFtOnuOkfdMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN1+i1UG
2vMH6rzNX7D4rQRKboCqkH9e7kboebfWoJdX4FXeZd8ynnlYIOmUj09D0Vg5k6E5
glzhzlcuVolzmxoHY4rJuhvR9Xkrxt/ku+PyYB3XxV76FTte/WniA3wSYLSHhU1m
EAnb8aAywpGWgaxZBUNCDbxu/sxB3hq7vrrtNNJEMJ9bpO4TEPdhxDZlnWABmanU
NkIDY5MDwJOu+wtlt0w+M9cXXs+LH1enal7AGTAFfClG81gbL+r86R+o4JdPON2l
3v4JWsq4ch7pbWt+0NmrOH5cP3eQ2Td8dtpVUkVF8qHVCXMEY6S7Hdh0BCjQJWHs
2Iz3TvuE1slLFQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:50:51 2026 by rpki-client