Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: b5AyBw2xVskeOsMEsMt5UuOSaCZ63Be1CdL10rrrbEQ=
Subject key identifier: 34:AE:75:CB:9C:6B:BF:9F:40:13:3E:42:5F:EA:42:25:0A:20:45:E1
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 019D9A078B2136623F4F81617CE6C67C571A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0925
Signing time: Fri 17 Apr 2026 06:01:18 +0000
Manifest this update: Fri 17 Apr 2026 06:01:18 +0000
Manifest next update: Sat 18 Apr 2026 06:01:18 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: SjKfeeb9AWLXcO0mEbWyIXvJjpxkHrmIT2S8Mojt6KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:8b:21:36:62:3f:4f:81:61:7c:e6:c6:7c:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Apr 17 06:01:18 2026 GMT
Not After : Apr 18 06:01:18 2026 GMT
Subject: CN=34ae75cb9c6bbf9f40133e425fea42250a2045e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:80:8a:15:ce:14:2e:cd:5b:d8:ec:78:e5:
ca:88:53:fd:c9:3d:bf:ab:89:6e:55:cd:fa:82:57:
c5:99:21:45:53:85:ae:f9:ba:21:6a:6a:dd:bf:1b:
81:3d:87:da:c2:ad:3a:5e:10:c4:6f:58:4d:cd:a6:
0e:be:08:33:bd:93:61:16:6d:7e:90:a7:f5:43:49:
de:63:fa:d8:15:02:ea:d6:ff:4e:8f:83:c6:25:82:
4e:a1:91:6f:6f:42:f9:cb:a0:81:57:ca:2f:62:64:
ba:d8:43:ff:18:57:79:2c:42:57:e3:02:4e:4c:44:
ef:57:9b:48:c7:a1:12:08:50:a3:a2:1b:c5:6f:19:
cb:8c:f1:24:3e:fc:9f:fe:74:84:a3:f6:5d:91:ca:
0f:2d:48:40:52:90:f1:20:ca:48:96:5c:1e:3b:64:
2c:f2:7f:7b:bc:81:91:87:02:cc:ab:cb:3a:35:bf:
47:0d:5b:71:2b:66:91:5e:d8:06:b1:ed:ae:04:2e:
30:8c:be:a1:08:81:c0:3b:46:7f:c1:28:2b:2c:5b:
59:88:e9:58:ac:95:52:81:e5:ed:21:11:a5:12:a3:
52:df:c1:dd:78:f2:7f:d1:fd:d6:bf:c6:51:26:95:
bd:da:3b:77:18:ad:ef:41:11:af:f5:87:c3:2d:d0:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:75:CB:9C:6B:BF:9F:40:13:3E:42:5F:EA:42:25:0A:20:45:E1
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:e6:90:b6:9b:26:ae:c0:72:4f:95:bf:71:b4:df:3a:dc:
76:e2:5d:44:07:bb:be:ae:b3:23:09:0d:4d:66:14:53:d8:f7:
d7:8d:72:16:e2:0a:45:17:96:cc:ac:9f:50:5d:1d:44:11:e8:
df:4b:50:a4:34:e2:72:bf:b9:25:4a:b0:3e:bb:d8:6d:6d:29:
f0:bb:f1:55:86:99:ab:67:ed:03:ad:84:6c:dd:25:fe:9e:49:
e4:e5:86:08:37:76:12:0c:b4:b7:3d:28:3a:8a:75:2f:12:63:
c5:6c:ab:30:03:60:fa:8d:55:06:c3:18:ff:19:4d:f0:81:93:
8e:0b:75:ea:2e:9e:c1:9e:ed:51:da:ad:d8:dd:ad:b6:be:f7:
ce:52:67:27:63:26:28:c1:1a:1e:8e:fb:ce:dc:0e:e4:dc:98:
80:67:f2:da:19:dd:10:35:c4:f7:91:e5:a5:ea:9a:54:71:d7:
68:20:c7:7a:5c:34:f9:99:64:d6:24:48:d1:42:18:17:9e:78:
1a:bc:5c:2b:84:b4:02:03:7a:3b:67:12:8d:64:71:50:4f:02:
0a:f3:af:1a:33:75:a2:b1:bb:bd:56:78:95:64:e5:dd:13:f7:
66:96:43:43:c6:01:d1:6d:d7:42:fe:a3:7e:97:55:5c:5f:2b:
d0:2b:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:19 2026 by rpki-client