Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: kEan+bvgMWd03yX+rHxCpysBrCQiQssWhKMLhFF+KyQ=
Subject key identifier: 20:91:FF:D5:14:19:48:13:E4:7F:2C:6E:09:27:72:9F:DD:89:48:F6
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 019D99D0C7D153D64FF77D0460D02EE1C832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 0867
Signing time: Fri 17 Apr 2026 05:01:29 +0000
Manifest this update: Fri 17 Apr 2026 05:01:29 +0000
Manifest next update: Sat 18 Apr 2026 05:01:29 +0000
Files and hashes: 1: WkT4KgurkGkiK6buDbp8jQwN9_M.roa (hash: LR/+wKI0XgbxooBg1c5uhj6z6Vhw1IQPk19X/TJb42Y=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: mAzo7zPI580QH53TA8/gSRWlspBL3Ph+yfBCRsbD68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c7:d1:53:d6:4f:f7:7d:04:60:d0:2e:e1:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Apr 17 05:01:29 2026 GMT
Not After : Apr 18 05:01:29 2026 GMT
Subject: CN=2091ffd514194813e47f2c6e0927729fdd8948f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:70:e6:3e:14:74:ca:c8:76:b3:46:ef:f0:
43:b2:c0:ca:aa:ec:01:3d:8b:ba:94:42:4d:bc:c4:
a5:d7:d1:05:c4:35:67:d2:26:2a:60:ed:35:1a:8b:
bc:b4:d7:2e:c9:a5:fc:53:9a:d1:66:e9:f0:cd:66:
ad:c3:77:0c:8d:c4:eb:ad:84:37:10:96:6e:21:52:
31:f2:05:9a:be:c7:0e:82:9c:5f:60:fd:d7:10:51:
1d:85:a0:c9:ca:b8:08:bc:09:1a:9f:00:6b:7a:e0:
ef:be:f8:22:04:32:6b:e4:eb:f9:1e:f7:56:0c:35:
1b:2e:de:d8:9a:a3:79:83:c0:a6:91:b2:a1:51:25:
69:52:fa:5f:e4:2f:5c:9a:2d:53:4e:86:5a:f2:16:
e8:ef:d7:fc:b7:fa:2e:56:2b:32:77:c8:55:bb:a8:
05:51:7e:75:48:86:7f:65:1d:9a:46:d5:41:83:39:
93:95:db:e4:06:21:e9:69:4a:97:10:19:4e:a6:7b:
d0:ab:0b:45:eb:0b:c5:ea:e1:7d:ab:71:69:59:59:
b6:d4:de:15:0c:63:14:c5:b8:dc:78:ca:a3:8d:a8:
94:57:1a:92:57:66:8b:54:37:16:fb:28:6a:68:4a:
75:09:0b:8b:66:5a:ab:07:76:ac:c0:11:6f:43:5a:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:FF:D5:14:19:48:13:E4:7F:2C:6E:09:27:72:9F:DD:89:48:F6
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9e:ce:22:91:1f:39:ca:7d:52:30:28:3d:90:d9:80:32:bb:
f5:91:f6:55:44:12:3b:51:ab:56:a7:e8:5c:00:93:11:29:f7:
b4:01:96:e4:b6:5b:13:81:40:b3:2f:20:f4:2a:ea:42:f7:78:
7c:17:6d:bc:23:a2:c3:69:d6:d4:75:44:d9:63:0c:bf:ea:fe:
1f:0b:df:a6:20:05:55:da:a6:0e:df:4b:39:15:d0:10:1a:1e:
e5:dd:db:d2:34:e0:8a:1a:c0:96:f1:04:5b:fa:8e:1a:8c:e6:
11:70:d0:9e:3e:62:9e:87:77:17:98:21:45:d0:6d:52:7d:e3:
39:85:d2:ff:e1:5f:4e:ac:57:23:90:38:3d:ff:79:4d:c7:9c:
3d:b0:9c:4b:b2:d0:17:ec:94:8b:a5:94:20:a5:11:10:85:73:
68:20:07:79:04:aa:df:f8:5e:aa:4c:0c:a7:c3:b6:4e:c6:64:
c1:8e:16:ef:c6:45:19:58:ed:c6:92:99:f2:a4:5f:92:55:6b:
90:a2:59:68:2d:20:cc:aa:9a:92:8d:57:62:24:5b:dc:21:f0:
01:d1:26:86:57:ba:f7:e0:04:35:d9:73:7a:9f:a8:ec:8a:30:
b8:8f:06:7d:c2:aa:69:e5:81:a1:2b:14:75:16:3a:ca:c1:6f:
95:64:61:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0MfRU9ZP930EYNAu4cgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy
NzEwYWIwHhcNMjYwNDE3MDUwMTI5WhcNMjYwNDE4MDUwMTI5WjAzMTEwLwYDVQQD
EygyMDkxZmZkNTE0MTk0ODEzZTQ3ZjJjNmUwOTI3NzI5ZmRkODk0OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMdw5j4UdMrIdrNG7/BDssDKquwB
PYu6lEJNvMSl19EFxDVn0iYqYO01Gou8tNcuyaX8U5rRZunwzWatw3cMjcTrrYQ3
EJZuIVIx8gWavscOgpxfYP3XEFEdhaDJyrgIvAkanwBreuDvvvgiBDJr5Ov5HvdW
DDUbLt7YmqN5g8CmkbKhUSVpUvpf5C9cmi1TToZa8hbo79f8t/ouVisyd8hVu6gF
UX51SIZ/ZR2aRtVBgzmTldvkBiHpaUqXEBlOpnvQqwtF6wvF6uF9q3FpWVm21N4V
DGMUxbjceMqjjaiUVxqSV2aLVDcW+yhqaEp1CQuLZlqrB3aswBFvQ1o+BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCR/9UUGUgT5H8sbgkncp/diUj2MB8GA1UdIwQY
MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt
YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz
LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp7OIpEf
Ocp9UjAoPZDZgDK79ZH2VUQSO1GrVqfoXACTESn3tAGW5LZbE4FAsy8g9CrqQvd4
fBdtvCOiw2nW1HVE2WMMv+r+HwvfpiAFVdqmDt9LORXQEBoe5d3b0jTgihrAlvEE
W/qOGozmEXDQnj5inod3F5ghRdBtUn3jOYXS/+FfTqxXI5A4Pf95TcecPbCcS7LQ
F+yUi6WUIKUREIVzaCAHeQSq3/heqkwMp8O2TsZkwY4W78ZFGVjtxpKZ8qRfklVr
kKJZaC0gzKqako1XYiRb3CHwAdEmhle69+AENdlzep+o7IowuI8GfcKqaeWBoSsU
dRY6ysFvlWRhFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:22 2026 by rpki-client