Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: HOHAYO9juQ8aqRDegHb5G5O1wuP1MfB/mUuga871zUY=
Subject key identifier: 88:67:9B:BA:70:77:6F:A4:82:63:3C:C9:A8:98:E2:8B:17:C2:C8:9F
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019D9CD140D02DC39195E47B68731631141E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0C59
Signing time: Fri 17 Apr 2026 19:00:52 +0000
Manifest this update: Fri 17 Apr 2026 19:00:52 +0000
Manifest next update: Sat 18 Apr 2026 19:00:52 +0000
Files and hashes: 1: SGsCpP2ZWGXYubQPTxvrVXR66kw.roa (hash: JIt4ruXWa/YENYi1/1J1PLXj88CikR7IDYWni7Zr0vM=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: R1tIrhMOJJefF118yqDSFZWgOV1xaAvp6ICUTRR01jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:40:d0:2d:c3:91:95:e4:7b:68:73:16:31:14:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Apr 17 19:00:52 2026 GMT
Not After : Apr 18 19:00:52 2026 GMT
Subject: CN=88679bba70776fa482633cc9a898e28b17c2c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:3e:08:c7:bf:e4:5b:6e:e9:08:93:97:19:
47:cf:77:73:ec:d3:0a:c8:21:a7:58:5e:78:e2:47:
cf:d0:ab:89:62:82:c4:91:35:f4:26:e8:91:78:53:
14:9f:a7:0c:5a:2b:ed:f6:55:b7:6b:40:3d:cd:5f:
fd:55:4c:85:63:3e:4b:5d:a9:59:ab:4b:1f:73:75:
92:ac:04:7f:6f:c1:d8:a2:54:8d:ea:66:c9:a5:8c:
a0:e5:55:bc:78:ff:3e:76:94:c3:99:f7:00:64:78:
eb:84:7c:aa:24:eb:3f:ab:57:35:83:83:40:0f:64:
58:3b:24:a5:9a:3e:20:d6:b1:da:dd:07:51:df:13:
dc:ad:57:15:cb:03:17:fa:22:b7:bb:c9:92:c0:53:
ff:9d:e0:bb:fa:6c:40:0b:59:fd:53:08:e2:e9:34:
12:08:bb:d5:c4:8c:3d:0d:86:66:6e:eb:ac:3b:fe:
97:44:ce:b4:36:dc:b0:7e:74:ff:91:12:c7:f2:f9:
04:9f:6b:12:d4:56:01:c7:4a:56:06:23:8f:45:d9:
a7:70:f6:03:85:91:72:a5:78:72:37:25:87:14:b5:
b1:7f:c6:a8:5d:6f:bc:1c:81:ff:d2:ba:a7:c2:1d:
b1:83:5f:86:51:10:c2:e9:18:fc:d0:86:52:26:d2:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:9B:BA:70:77:6F:A4:82:63:3C:C9:A8:98:E2:8B:17:C2:C8:9F
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:84:f0:02:ba:2c:c1:83:eb:9a:32:91:dc:02:4a:be:1d:28:
dc:ca:65:be:d9:17:3c:84:56:c8:db:21:b7:82:04:1e:f7:d0:
d5:15:0e:ad:27:ba:67:c7:3d:d8:a8:54:44:7f:e7:5e:50:2f:
ed:d9:5a:e1:d3:66:51:7f:79:ed:07:c4:78:cc:3f:5a:2f:8e:
a8:e6:7f:c4:68:0e:09:9a:f1:6b:bc:de:5a:97:2e:ad:3e:16:
14:2d:2b:18:92:cc:fc:6e:33:59:0b:53:bc:d1:6f:50:29:5c:
b6:8a:d7:93:2f:84:ec:b7:2b:cc:d9:48:62:51:9e:f6:22:a8:
1a:c0:74:b4:0b:c0:9e:f4:72:2c:38:37:02:c4:23:96:e0:ed:
aa:f6:87:f7:df:99:cc:e8:b2:e6:b7:5e:e5:c0:db:63:e4:27:
4f:34:74:ae:c4:38:ed:d7:28:2f:da:48:55:f9:b8:19:11:d7:
66:55:34:dd:43:1c:98:2d:d1:6a:6f:2c:8e:b1:37:b6:30:c1:
a5:0e:b7:fe:dd:3f:9e:d5:bd:e9:a2:8f:04:1d:6d:75:9c:94:
6c:0f:e4:b7:c0:6f:93:e3:f6:2a:d1:7b:fd:d0:df:3c:55:88:
4a:4b:20:26:a6:8c:4e:1a:26:a8:5c:52:2b:08:05:d2:20:db:
ef:57:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:00 2026 by rpki-client