Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: f7VCqZJE6fdxLUXjphr/TwKXeto64tOfxiU3v2sE7tw=
Subject key identifier: 38:C1:79:E3:44:6E:26:A5:47:47:EC:C9:AD:5E:F3:E3:E4:E5:5F:82
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 019EC36DDC279B06CF06FD855EFA869BB594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 09BF
Signing time: Sun 14 Jun 2026 00:00:17 +0000
Manifest this update: Sun 14 Jun 2026 00:00:17 +0000
Manifest next update: Mon 15 Jun 2026 00:00:17 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: F8za8C1LKf1MkBlYYmgMPqF2ABjV2M/9ak6n026Vko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6d:dc:27:9b:06:cf:06:fd:85:5e:fa:86:9b:b5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Jun 14 00:00:17 2026 GMT
Not After : Jun 15 00:00:17 2026 GMT
Subject: CN=38c179e3446e26a54747ecc9ad5ef3e3e4e55f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:d3:ec:be:16:ea:da:14:5b:71:43:0d:27:
7f:63:0a:b5:80:a5:06:d3:03:4f:be:72:03:a8:5b:
91:0e:0f:d4:04:52:0e:5a:22:67:b4:20:84:8d:87:
49:17:c6:7a:25:2d:b6:11:38:8b:6b:33:ad:4d:a1:
9c:82:55:91:c7:f4:b6:0e:77:59:a5:3a:ab:bf:d6:
b0:8d:11:76:2d:ce:71:83:b8:7b:02:b7:34:2a:ca:
8b:0c:62:dd:38:06:59:53:95:06:88:13:83:ab:26:
b8:38:0e:0a:a2:6a:ab:b8:a8:47:96:d9:44:ff:54:
ae:be:a4:ac:eb:5b:6a:d9:68:d8:85:f3:2d:e0:4e:
1f:70:1d:eb:9b:12:3e:bc:24:18:56:ee:bf:13:a8:
c0:1c:0a:6a:b3:d0:a9:f5:8b:d8:ac:38:1d:1a:55:
c4:85:c7:b9:2e:98:c5:cd:4d:d6:9e:6d:f5:9a:14:
08:dd:86:9f:7f:d9:73:89:01:16:fd:88:01:67:8a:
9e:52:6a:58:36:6e:ba:6e:e4:00:18:d3:e5:97:00:
a6:64:b0:cd:a2:d7:9b:4d:74:c8:b3:de:c1:bb:41:
22:63:88:b3:9f:1a:6f:d2:94:65:24:cf:fa:ee:6c:
1b:ed:18:79:8a:51:6e:67:38:c4:d2:92:09:96:22:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:79:E3:44:6E:26:A5:47:47:EC:C9:AD:5E:F3:E3:E4:E5:5F:82
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7d:f6:62:b7:4f:46:fc:0e:03:25:be:6c:34:18:4d:ae:5f:
28:f0:af:9c:01:78:02:23:ec:04:91:4f:8c:55:96:a9:30:fd:
78:7d:27:08:45:60:77:88:09:7a:44:ec:76:27:8e:68:64:f2:
d9:b4:dd:9a:32:51:c4:fd:33:88:9c:a8:34:02:a7:a1:5c:ea:
d6:43:be:ea:50:83:2a:f0:df:b4:8b:d5:0c:b3:0f:32:2d:10:
ce:b7:95:1a:58:33:b2:ef:eb:b4:84:b2:11:e6:94:9b:ca:91:
77:45:6d:38:f8:61:50:d6:59:d7:92:de:05:9c:34:f2:00:48:
6f:7d:96:44:2e:05:23:26:29:c5:cf:81:3c:63:b8:01:62:e2:
ce:cc:bf:69:f6:ee:11:ce:9d:89:af:4c:d5:a2:97:9e:c6:ba:
0f:04:9f:70:8b:8c:fd:dc:cc:8d:16:5c:36:a0:6b:1a:20:56:
9f:50:c7:f2:69:42:d8:1a:64:cc:0e:be:89:4c:67:84:df:62:
55:5e:c1:54:28:f7:0a:2f:59:66:ec:48:88:31:6e:84:10:1e:
da:4f:6c:f3:42:5e:9b:2d:ec:e8:f6:68:ea:d1:8b:87:83:d4:
a4:39:67:50:5a:ac:bf:7b:f9:33:02:b1:70:ae:0f:d4:88:c2:
21:1c:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:49 2026 by rpki-client