Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: 9UgoohNeuPRQTTvL0qBSOGZSOKOIQRQwaxOi3L6+xVI=
Subject key identifier: 39:2D:D9:B1:C4:EA:8E:12:D1:7A:D9:3E:6D:8F:34:4B:ED:FB:4C:00
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 019CAC46AB90881C18DF2FE7C17F76F8C384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 07EC
Signing time: Mon 02 Mar 2026 02:00:38 +0000
Manifest this update: Mon 02 Mar 2026 02:00:38 +0000
Manifest next update: Tue 03 Mar 2026 02:00:38 +0000
Files and hashes: 1: WkT4KgurkGkiK6buDbp8jQwN9_M.roa (hash: LR/+wKI0XgbxooBg1c5uhj6z6Vhw1IQPk19X/TJb42Y=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: aOXPXe4EOKl6VsdH4RDQA7Y0s8oaGmH6y3RdAQpwTLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ab:90:88:1c:18:df:2f:e7:c1:7f:76:f8:c3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Mar 2 02:00:38 2026 GMT
Not After : Mar 3 02:00:38 2026 GMT
Subject: CN=392dd9b1c4ea8e12d17ad93e6d8f344bedfb4c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:af:9c:fe:6e:6e:c4:94:58:2d:d4:7a:d8:
e7:27:34:3b:ca:be:5b:ff:67:73:83:02:bb:37:1a:
ae:eb:69:be:8d:74:5f:77:72:90:08:2c:74:0d:81:
8d:31:bd:72:72:da:4a:3d:b7:04:64:cb:67:9c:33:
58:da:6c:a0:0e:2e:f8:88:6c:88:6e:7f:b2:18:ab:
21:09:da:13:4e:8e:2b:ed:91:3d:00:ca:2c:45:25:
e8:c6:9e:ca:5a:25:2d:40:6c:59:b1:c8:85:85:d1:
e0:8c:48:02:44:b0:6a:b8:4d:71:27:60:9a:e2:62:
8a:0e:0a:3c:f8:76:81:33:62:4e:f9:92:63:61:a4:
02:76:a4:7c:a6:e2:d1:74:48:f6:c4:81:a9:4b:d3:
ad:b0:e8:45:cf:04:52:8b:c5:02:2f:bb:b3:34:86:
2e:c1:7b:fd:ec:13:69:44:9a:87:6f:36:e3:0d:62:
bb:26:9c:00:b3:a7:0d:f4:e6:b6:ca:2e:51:db:c1:
89:75:10:ba:21:c3:64:a1:c3:0e:f3:46:d0:db:00:
22:d8:43:66:5e:41:e9:a8:ed:b8:cd:88:60:d5:fd:
14:1c:36:3e:d2:d6:7a:91:c9:8f:a3:17:e6:33:62:
61:93:99:e5:93:ba:72:ad:8c:16:ec:cb:d0:20:fc:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2D:D9:B1:C4:EA:8E:12:D1:7A:D9:3E:6D:8F:34:4B:ED:FB:4C:00
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4f:03:37:55:f8:51:b6:e8:5e:a5:4f:39:62:b6:78:39:d5:
b1:c6:b5:67:8b:94:8c:0b:94:a1:2c:30:b8:37:6c:a4:af:92:
ec:af:5d:29:ea:aa:be:8c:0b:05:b0:e2:d0:e5:25:65:cf:cd:
40:20:67:10:2c:0b:ef:e2:a6:76:57:53:af:35:19:e1:9f:e7:
58:e5:5a:91:38:44:fd:86:1a:d5:78:c5:13:46:54:a1:9b:22:
56:dd:89:08:bb:3b:51:44:90:a0:5d:e4:32:4b:57:5d:51:c0:
10:5b:5b:e3:b3:88:e5:6f:40:2b:1f:2e:d5:bc:2d:77:1c:aa:
cb:cd:97:51:2c:ed:06:04:bb:08:5d:fa:ed:db:8d:5e:e0:4c:
d4:a4:bd:cf:5a:e3:b9:29:82:00:61:db:b0:4a:b3:1f:18:a2:
e3:41:06:17:a2:8b:59:9c:7c:7e:06:ca:02:92:48:cd:e8:fb:
a4:97:73:e8:3a:52:0f:6e:82:46:0d:c1:40:bd:47:e9:cd:2b:
4d:ac:77:9e:17:d4:ed:fa:dc:6f:12:ff:64:c8:6d:c1:8c:87:
4c:f6:3b:4f:dc:35:0b:21:df:55:f3:82:ff:38:09:64:96:f4:
45:70:c3:11:de:fc:06:87:c6:2c:a7:09:0f:e7:ac:f3:75:83:
99:03:a3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRquQiBwY3y/nwX92+MOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy
NzEwYWIwHhcNMjYwMzAyMDIwMDM4WhcNMjYwMzAzMDIwMDM4WjAzMTEwLwYDVQQD
EygzOTJkZDliMWM0ZWE4ZTEyZDE3YWQ5M2U2ZDhmMzQ0YmVkZmI0YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVqvnP5ubsSUWC3UetjnJzQ7yr5b
/2dzgwK7Nxqu62m+jXRfd3KQCCx0DYGNMb1yctpKPbcEZMtnnDNY2mygDi74iGyI
bn+yGKshCdoTTo4r7ZE9AMosRSXoxp7KWiUtQGxZsciFhdHgjEgCRLBquE1xJ2Ca
4mKKDgo8+HaBM2JO+ZJjYaQCdqR8puLRdEj2xIGpS9OtsOhFzwRSi8UCL7uzNIYu
wXv97BNpRJqHbzbjDWK7JpwAs6cN9Oa2yi5R28GJdRC6IcNkocMO80bQ2wAi2ENm
XkHpqO24zYhg1f0UHDY+0tZ6kcmPoxfmM2Jhk5nlk7pyrYwW7MvQIPw3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkt2bHE6o4S0XrZPm2PNEvt+0wAMB8GA1UdIwQY
MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt
YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz
LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE8DN1X4
UbboXqVPOWK2eDnVsca1Z4uUjAuUoSwwuDdspK+S7K9dKeqqvowLBbDi0OUlZc/N
QCBnECwL7+KmdldTrzUZ4Z/nWOVakThE/YYa1XjFE0ZUoZsiVt2JCLs7UUSQoF3k
MktXXVHAEFtb47OI5W9AKx8u1bwtdxyqy82XUSztBgS7CF367duNXuBM1KS9z1rj
uSmCAGHbsEqzHxii40EGF6KLWZx8fgbKApJIzej7pJdz6DpSD26CRg3BQL1H6c0r
Tax3nhfU7frcbxL/ZMhtwYyHTPY7T9w1CyHfVfOC/zgJZJb0RXDDEd78BofGLKcJ
D+es83WDmQOjNQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:57 2026 by rpki-client