Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: PROGxGZB4ebQm7Q0MFEG3YbyZQtnTbA3vxBJ0xTH6iw=
Subject key identifier: 76:45:4B:C6:89:DD:4E:92:20:85:26:84:83:C1:68:D0:BD:64:F7:1B
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 019D9BBEBC2AAE7E65823A3BE055EFAE038B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0EEB
Signing time: Fri 17 Apr 2026 14:01:01 +0000
Manifest this update: Fri 17 Apr 2026 14:01:01 +0000
Manifest next update: Sat 18 Apr 2026 14:01:01 +0000
Files and hashes: 1: K4KaGgPmLYRO5soG4eqjbkAncaI.roa (hash: +VJK/j11hj/8ZaPbxR19b24TkZkYatUXvpZgb0IWSzc=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: PhsjnixBGitNrRj3MVXf5UQJYiO7Br6HpXK3qYcHaNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:bc:2a:ae:7e:65:82:3a:3b:e0:55:ef:ae:03:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Apr 17 14:01:01 2026 GMT
Not After : Apr 18 14:01:01 2026 GMT
Subject: CN=76454bc689dd4e922085268483c168d0bd64f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:2b:a2:0d:94:1b:5b:a8:b5:28:b3:aa:bb:
3f:4f:da:88:60:5e:7a:fd:69:52:01:4b:f8:8e:ff:
1b:7d:c7:e5:71:69:07:00:cd:db:1a:19:15:89:c8:
91:40:cf:bd:2c:45:2e:27:88:22:78:16:7d:1c:b9:
e7:e5:5b:b6:eb:27:c6:da:47:09:a5:09:7b:2e:89:
b2:35:51:bc:d8:c4:56:bd:e5:69:e2:5a:6c:b2:0d:
02:ad:ed:08:4f:b0:1f:12:b1:f3:6f:64:4b:b7:19:
46:59:0a:d4:2f:66:cd:15:f8:71:3f:ab:32:fd:3e:
65:af:9e:43:28:35:0e:6f:13:9c:b2:05:1f:d6:bb:
2e:cc:02:f8:95:ee:b7:30:bb:ec:82:6d:11:0b:8c:
61:a0:d4:41:af:51:8f:e2:76:4b:91:e5:fc:2d:d8:
03:90:31:e9:be:43:c1:1e:f8:41:24:f0:9e:ec:72:
72:4e:78:ce:11:bc:a9:c2:37:48:a2:fc:9e:cb:a3:
03:f2:6a:12:6a:aa:b3:24:2b:ff:f9:89:00:5b:56:
3e:e2:9a:94:ab:c3:7b:c7:95:74:d8:39:7b:3c:86:
ec:d9:fb:9f:1c:f9:fb:77:95:ec:d6:f6:11:0d:b5:
68:e8:aa:0a:ba:a3:96:d2:83:90:ec:1a:4c:13:f3:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:45:4B:C6:89:DD:4E:92:20:85:26:84:83:C1:68:D0:BD:64:F7:1B
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:60:ce:2b:d4:49:15:1e:02:f4:29:d7:b5:22:69:e9:4f:
3a:e7:15:4a:00:10:4d:34:7a:70:e7:b0:b2:f2:f0:1a:52:62:
e6:81:8e:37:04:8b:d0:ee:2f:01:8e:4e:5f:17:53:9d:0f:ae:
87:d6:55:b4:da:5b:5d:8c:c1:2b:cf:d2:4f:93:25:dd:e1:e4:
17:98:51:78:7d:88:c0:df:bf:42:a7:d4:8b:a5:07:37:ba:a9:
90:a7:8a:8a:0a:65:77:f7:24:cb:54:74:16:26:8b:1a:c9:3f:
a6:4d:d3:a1:2c:0f:b6:8f:46:1f:47:d3:26:2d:47:40:aa:d2:
18:ae:5a:87:82:66:e6:6f:e5:0b:ba:60:2e:cf:52:18:b1:72:
84:34:7b:91:a0:42:35:f9:0d:1e:86:24:da:d7:7e:de:80:52:
1c:b9:f7:8a:ff:2a:89:78:e7:29:9c:22:41:26:7e:d8:27:da:
30:9b:91:ce:7e:38:44:c3:3b:96:9b:9e:7b:2a:a7:a7:6b:0d:
8a:e7:09:aa:1f:b0:37:6f:3f:34:a1:74:05:60:a1:5a:0f:2a:
6b:17:b1:f3:8e:d4:e1:d1:83:52:ec:32:e5:6e:05:cd:26:26:
b7:1c:67:2b:b7:ec:b7:06:90:64:4a:e1:d4:b9:0e:dc:90:92:
9d:ea:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:57 2026 by rpki-client