Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: UJOdw/A5rzRMksee1dy6E/VM56kRKHjS+6MaOjIHFWs=
Subject key identifier: 16:DB:E9:8F:E7:99:A1:26:E6:66:04:7E:18:F1:A3:69:A6:9B:A2:78
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019CAD5A2EAD590F63A9DC80B9E1C5F22682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0BDD
Signing time: Mon 02 Mar 2026 07:01:34 +0000
Manifest this update: Mon 02 Mar 2026 07:01:34 +0000
Manifest next update: Tue 03 Mar 2026 07:01:34 +0000
Files and hashes: 1: SGsCpP2ZWGXYubQPTxvrVXR66kw.roa (hash: JIt4ruXWa/YENYi1/1J1PLXj88CikR7IDYWni7Zr0vM=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: opJA01veYlpi55AxBBAo1gZ79WrZsQ/NSox8KW1RJq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:2e:ad:59:0f:63:a9:dc:80:b9:e1:c5:f2:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Mar 2 07:01:34 2026 GMT
Not After : Mar 3 07:01:34 2026 GMT
Subject: CN=16dbe98fe799a126e666047e18f1a369a69ba278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:24:c7:5a:34:13:8b:1c:aa:d8:f5:2b:e2:
b4:44:d5:0a:5b:21:ac:a1:c5:fd:c4:ed:a6:b9:8b:
4f:30:bd:0a:b4:f0:0a:12:b7:2b:1d:10:4c:65:1d:
49:1b:3c:7f:79:5c:c9:f7:4d:85:dc:9e:81:8b:97:
71:49:56:96:e0:35:29:72:5a:1f:ed:70:b4:fa:c4:
5f:bf:af:cf:15:c5:67:77:8c:da:60:01:01:fb:ab:
c3:d9:c1:84:ee:a8:f0:a5:cc:dd:f8:16:e1:d6:3b:
d4:9a:5e:6c:3e:1e:04:92:24:80:57:3b:83:3a:46:
a7:74:22:97:c7:d2:3c:df:23:1f:1d:6c:29:ae:0f:
ca:bf:cf:ff:54:58:ce:08:4e:27:db:c7:0c:f2:a5:
0e:1d:2e:a9:11:62:c6:6b:9e:d3:24:30:5d:49:46:
12:e0:ea:56:71:8b:30:be:74:50:0f:e5:49:bc:c3:
5e:db:e9:42:40:16:65:35:a8:0d:f2:f0:09:af:80:
7f:46:be:fd:2c:4e:f4:37:da:53:63:a9:fd:f8:91:
4a:69:85:b0:57:be:47:cd:6b:ce:fc:76:ad:ee:1e:
1e:1c:d6:92:df:59:d4:9f:a5:c9:fd:de:c9:f7:1e:
2e:b8:46:df:70:64:db:ed:e4:de:29:de:87:69:1a:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:E9:8F:E7:99:A1:26:E6:66:04:7E:18:F1:A3:69:A6:9B:A2:78
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c1:46:08:4d:2f:e9:85:57:65:cc:38:68:8d:3d:a0:8f:e3:
a2:9d:cf:d0:e0:2f:be:18:da:ee:90:98:41:80:e7:72:a8:14:
3c:80:55:78:bd:23:82:57:d0:1d:43:9e:53:97:ef:39:26:4e:
86:6a:ef:57:59:51:6c:b8:c8:a7:9d:10:49:7c:c6:f6:e9:f5:
23:a3:66:1e:95:3e:2b:d9:e9:dd:90:2d:cd:80:f8:02:d7:8a:
4b:e2:cb:2a:04:02:7b:4d:27:bf:3c:1e:68:9b:73:e4:30:eb:
c0:8d:4c:da:a0:56:6f:13:18:02:52:83:05:ea:9c:e0:b6:6c:
f5:02:5d:b5:32:17:dc:c8:82:f4:ed:2a:34:29:86:a0:14:81:
47:07:0c:f6:4f:0a:7d:d9:cc:c3:da:37:7f:1a:32:1c:91:ad:
33:0d:23:82:d7:4d:cc:fa:cf:aa:f4:ec:40:72:0a:04:4a:67:
89:69:fd:cb:01:fd:8b:fe:e7:1b:65:b3:93:fa:8c:c6:ae:d5:
11:c6:23:5a:66:69:a1:fb:ce:9a:bb:90:aa:78:f7:69:54:50:
d2:ff:c6:a3:35:76:7f:5a:47:8e:be:88:2d:83:69:22:cf:bc:
57:11:e2:33:a3:35:7a:3c:ed:8f:6d:29:06:c9:f0:6f:e4:b2:
f3:f9:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:36 2026 by rpki-client