Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier: im2mg9kRVFdulzIJiyci8UHBGKGwz1KGMOME32DMXUs=
Subject key identifier: 10:25:39:CF:E1:12:B7:31:FB:E2:6C:F3:E6:58:8A:4C:14:FB:C0:A7
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 019CAAC6ACEF5650886D28C3380EFEF1B2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number: 1656
Signing time: Sun 01 Mar 2026 19:01:12 +0000
Manifest this update: Sun 01 Mar 2026 19:01:12 +0000
Manifest next update: Mon 02 Mar 2026 19:01:12 +0000
Files and hashes: 1: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: r3qkN2YIu9BfF4w3XagTazCnBDYdU9S7qTG+DI6sZP0=)
2: won-rMlVc5f0fR1j1wVR-WJ4XwM.roa (hash: sFqj/s20YQjjosi4ia2yNwu6UamPVX+VuDC5TE8JqcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ac:ef:56:50:88:6d:28:c3:38:0e:fe:f1:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Mar 1 19:01:12 2026 GMT
Not After : Mar 2 19:01:12 2026 GMT
Subject: CN=102539cfe112b731fbe26cf3e6588a4c14fbc0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:1f:93:08:db:02:03:2f:f9:d2:d2:3c:2e:
f7:56:37:fb:b9:63:9b:fe:fb:ab:28:78:a1:b9:4c:
af:69:1e:1e:ae:6c:96:42:01:31:95:e8:6c:07:8b:
d5:7d:85:a1:5f:33:f5:2c:57:a4:ae:9c:44:3f:3f:
60:41:8b:81:c0:4b:e5:8a:a7:e5:7e:8e:33:a6:15:
51:dd:cf:29:8a:b7:0a:32:da:06:9d:b9:91:12:f5:
80:69:3f:1a:0f:de:62:92:ff:7b:4f:90:8b:05:66:
8b:d8:25:fd:38:f2:3e:74:3b:8d:62:b6:a3:60:e2:
d2:0f:1b:58:57:31:59:c8:d7:59:59:6b:87:d3:1c:
fe:7c:37:1f:8d:5d:2d:01:10:3d:d9:63:d3:5b:7c:
db:23:66:ba:e2:68:b7:55:1f:ac:2f:2d:f3:75:52:
7a:0d:92:2c:f1:d5:23:af:f5:72:cc:1b:31:e7:ad:
2d:d7:76:3b:70:20:08:93:0a:56:12:20:b2:8a:ff:
41:b5:90:1b:d4:a8:b2:2d:f8:89:e3:68:0a:1a:ae:
1b:e4:d5:42:31:3f:d8:34:bd:cb:9e:49:fd:94:6b:
77:d3:3a:8f:77:ce:c0:03:ba:41:60:07:bd:56:73:
37:67:5a:3f:e7:ee:58:cc:b3:7b:8f:1c:da:81:70:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:39:CF:E1:12:B7:31:FB:E2:6C:F3:E6:58:8A:4C:14:FB:C0:A7
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fb:30:df:c2:15:4e:f9:72:02:db:49:e7:e2:1d:0f:09:ac:
80:6b:f1:cd:ba:9f:4d:62:5c:c9:82:64:23:d4:75:ce:bf:b5:
06:3c:48:7c:49:c4:a6:5a:41:5d:75:ed:49:a8:48:bb:90:e3:
2e:b3:48:7b:4f:35:aa:a6:f3:f8:9b:47:14:f2:b8:b3:a6:4e:
69:0b:d2:fa:31:2e:21:a7:e9:1c:61:62:d1:e0:96:2c:a0:9b:
18:d9:2f:6f:3c:f4:31:85:ec:64:d8:3a:9d:c4:12:c1:7e:2a:
b4:eb:ee:d8:bf:b6:86:64:89:ca:7d:f0:77:ed:97:0a:6a:fd:
ab:ba:d1:19:f8:ed:74:dd:b7:94:ef:58:32:7b:01:a2:fc:9d:
f6:14:ff:8f:00:1f:e3:a2:fb:a2:b1:7a:48:95:95:c8:d7:b8:
53:e0:ef:92:ff:f1:7c:10:a8:ad:a6:4b:83:db:0f:cf:85:a0:
b2:52:ac:06:bf:e3:dc:5e:20:5b:7e:ed:19:33:fe:c8:0e:fa:
1b:cf:cd:72:cd:ed:05:3c:b3:b3:fe:e7:dc:e7:06:9a:67:1e:
55:ab:13:1f:d9:96:a4:bd:52:d4:d7:1e:4b:32:47:8c:d1:df:
a3:2e:e7:c2:33:47:6b:e2:5d:28:a3:e5:87:d4:a8:4a:97:21:
ac:ae:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:42 2026 by rpki-client