Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: MfH6qmWSRmIDtI4Zhj4adRLRNitUkuQU/nHQODS/iSQ=
Subject key identifier: C9:70:53:28:27:42:77:D7:DC:14:01:CD:10:F1:AD:00:A6:C1:D9:45
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 01A12D69FA0E57579AAF5A07DA5B8AD297FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0AFF
Signing time: Mon 12 Oct 2026 00:01:22 +0000
Manifest this update: Mon 12 Oct 2026 00:01:22 +0000
Manifest next update: Tue 13 Oct 2026 00:01:22 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: YvoAELCC6zCfgTRZIUxJycBfnwZWUfvPnXJyOGtwJz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:fa:0e:57:57:9a:af:5a:07:da:5b:8a:d2:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Oct 12 00:01:22 2026 GMT
Not After : Oct 13 00:01:22 2026 GMT
Subject: CN=c9705328274277d7dc1401cd10f1ad00a6c1d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:42:56:1e:41:d5:6a:47:cc:29:93:2b:96:
e0:69:a4:ba:73:3e:ac:1a:c2:71:9e:d0:a7:02:43:
18:eb:44:38:ba:d8:17:6e:77:54:38:5d:91:71:50:
f2:1d:c4:d5:6f:8d:90:98:3b:25:46:71:75:2e:44:
28:28:79:b8:38:a5:c0:02:36:cc:b2:7a:c8:00:1e:
32:a1:7b:4a:65:c4:cd:75:4e:57:f2:88:10:71:c6:
8e:db:b6:3c:ae:56:ae:93:40:5b:9c:15:b5:a3:c5:
c9:77:34:1c:d1:88:ea:4f:ca:7f:27:f9:70:9d:68:
6e:21:6e:4d:fa:5f:9d:93:aa:49:25:57:45:7c:34:
00:92:dd:1a:a4:96:a8:be:67:00:94:14:f3:ad:2c:
42:c3:a5:64:ad:a1:06:0d:72:1c:1b:0c:fb:bf:ee:
83:bc:31:0c:02:62:72:32:63:df:d8:18:1b:e4:84:
e4:e7:6f:81:5b:44:5c:40:19:31:34:e4:dc:09:f8:
ad:28:ef:b4:47:3a:d8:82:98:e6:8c:aa:d8:58:ed:
7a:80:54:84:ec:51:e3:ca:96:ef:7a:0c:53:8d:17:
63:d1:48:4e:b9:9a:eb:5d:e9:f9:bb:e2:f6:76:14:
4f:97:6c:9b:1f:fe:86:bd:82:ad:4a:ba:7a:1b:da:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:53:28:27:42:77:D7:DC:14:01:CD:10:F1:AD:00:A6:C1:D9:45
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:11:d8:b7:61:b2:84:32:bb:30:15:eb:be:22:b1:0c:8d:46:
63:84:b4:af:6b:85:44:82:72:4c:30:b3:b9:a3:b1:9f:d8:e1:
28:e6:d0:9e:cf:d2:15:a0:ab:26:6a:b1:9b:40:40:76:be:d5:
2b:9b:6f:6c:20:ff:20:df:62:5d:88:7c:3c:63:e7:16:ad:1d:
d3:80:bb:b4:49:52:cb:d9:20:c3:65:7e:0d:ce:78:c7:c4:ca:
6c:9c:1f:09:b0:20:85:50:40:3e:fd:49:84:99:b0:2e:db:b5:
b4:de:9f:94:f2:a0:75:a6:44:d6:38:f5:ac:b6:5d:b6:d2:41:
ee:0c:22:64:40:ce:7f:3a:15:54:64:04:66:bf:14:0a:30:88:
94:f7:85:32:19:ab:71:74:4b:f3:47:cc:5e:23:c9:58:0b:60:
1f:dd:b0:5c:e1:10:d7:4b:c7:38:87:90:ff:48:98:bc:4e:fa:
7e:1e:b1:83:13:db:46:c5:40:80:a3:2d:b4:b8:e3:eb:04:b5:
8d:6c:08:af:94:e1:eb:92:c5:5a:9e:e5:44:2b:e0:0b:9a:b9:
2d:cd:0f:09:ea:04:d9:4a:5b:4d:f1:41:9b:19:18:72:bf:b1:
c1:72:e0:fb:9e:5f:23:8c:ba:75:73:aa:b2:0f:44:c8:57:6f:
ee:25:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:46:34 2026 by rpki-client