Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File: jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier: A3dDs2NkzL6evD5wvNOucNoIplDtM5ZMTJMmSP57PLc=
Subject key identifier: 1E:76:E9:24:6E:36:FF:F2:67:09:E7:55:94:7E:3F:E6:CF:B4:EF:CB
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial: 019DA453E7D0222D4DBB51155228AD623283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 06:00:55 +0000
Manifest this update: Sun 19 Apr 2026 06:00:55 +0000
Manifest next update: Mon 20 Apr 2026 06:00:55 +0000
Files and hashes: 1: 75-KqODx3w8CvM9m5Nq3kRsXyMo.roa (hash: A6bAUCVGwzASuTY5FNYElUtdHA4J3zfHfU7IL2XZWu0=)
2: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: g0aX67y6jyCAK7zpkj7MpNUI25IRcLQ7I358998Wkwc=)
3: kN8sJaIrd98steTWsu3vc7sEjKI.roa (hash: MkLW8K9XVhuTwi22jPlIAzX7VARe0fbKX4ZjMGnmNrI=)
4: tTnZl8uF6ADN5gv_dFCnGczPy10.roa (hash: yFxKga5LtYoglKO/yUWDlJacjL9nZm+MXR5rVDyXPDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e7:d0:22:2d:4d:bb:51:15:52:28:ad:62:32:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Validity
Not Before: Apr 19 06:00:55 2026 GMT
Not After : Apr 20 06:00:55 2026 GMT
Subject: CN=1e76e9246e36fff26709e755947e3fe6cfb4efcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:c4:ab:94:42:40:b0:2e:78:cd:c7:ef:31:
38:60:b1:fc:20:f9:25:fe:b5:d4:89:cc:8e:ec:c7:
f9:c3:1c:93:6a:ce:9d:57:8e:c5:f0:7d:73:29:9b:
6e:62:cf:4a:4f:32:29:e6:7c:ee:31:df:ad:0d:c6:
d3:8a:04:0b:35:ec:f9:d9:e6:a7:28:8a:8d:b8:1a:
1d:e0:07:08:eb:19:b1:b2:8f:d5:55:86:9d:43:37:
70:99:0b:c9:bf:8e:f8:0f:0a:90:fc:e6:d5:77:20:
74:ac:a8:8a:f7:bf:b6:2f:b0:c0:57:ba:2d:1a:eb:
c0:32:b6:4a:97:07:16:51:49:4b:74:f8:74:5a:d8:
ab:e5:19:24:b5:72:11:ec:0f:07:fe:03:9f:79:1b:
4e:8c:7c:ca:4c:71:81:13:04:60:2f:1d:44:9e:f7:
a5:89:19:ce:b6:f0:e1:a8:63:4b:4d:90:8f:f3:53:
23:f3:5c:11:d4:86:2f:5d:81:51:34:2d:86:ab:5d:
72:fd:f2:bd:2e:10:bc:c8:1f:5f:a0:3e:ba:0b:35:
e6:d8:ed:d9:60:2c:23:35:2f:63:6c:12:a9:e2:22:
82:50:f0:d0:f9:ea:6e:ee:25:90:e7:0c:c5:50:da:
8e:7b:24:d0:7c:97:26:17:30:bd:3b:cd:ca:99:a6:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:76:E9:24:6E:36:FF:F2:67:09:E7:55:94:7E:3F:E6:CF:B4:EF:CB
X509v3 Authority Key Identifier:
keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c3:f3:7e:4d:4a:5e:9d:7c:e2:04:0d:7e:43:e0:96:04:18:
b1:95:48:cc:ee:b6:2a:f8:ad:b2:11:a8:77:d6:e1:33:52:3e:
b1:06:f9:03:5b:c1:fa:cb:52:d9:98:55:22:b3:b1:8b:af:36:
ca:be:7f:65:2d:4f:81:2a:03:bc:ac:ab:a7:86:35:61:9f:97:
5a:b6:ee:e5:a6:87:cc:68:ae:96:b9:2e:06:00:5c:f2:7e:ce:
4b:18:4a:47:6a:81:ee:35:be:8c:99:4c:38:15:d9:80:5e:7c:
af:1b:d5:1a:66:dc:57:e4:e3:e0:8e:80:7d:59:1d:06:76:59:
3c:96:a2:4a:e8:72:9c:91:50:59:e2:ea:05:9d:ca:b5:ed:f3:
60:97:d9:45:0e:56:9e:30:e8:78:de:17:cc:9f:39:35:c4:2a:
96:6b:5b:b3:a7:7c:fc:16:99:ca:22:cc:ff:5e:4b:34:26:3e:
b2:4c:70:b5:8c:b5:50:b6:70:fc:04:26:22:69:46:04:85:22:
de:61:27:17:5f:64:67:ba:ec:4e:59:95:0a:11:08:20:79:12:
c9:7d:5b:52:f6:c4:52:c6:ec:c1:1f:36:a3:5d:18:02:91:6d:
05:5a:f0:5f:9a:f3:4f:f6:41:49:d8:c9:73:26:4f:24:74:bf:
b1:85:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:10 2026 by rpki-client