Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: u98igMNm7/bkpltIKJPBX0PnA/UU50Wd9YCyAQq2PP0=
Subject key identifier: 14:D9:10:BA:51:70:54:57:A0:74:BE:69:23:76:A5:59:DD:08:E6:AB
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 019CAE3511D8E63B2F71E453B3E19D05D76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:00:39 +0000
Manifest this update: Mon 02 Mar 2026 11:00:39 +0000
Manifest next update: Tue 03 Mar 2026 11:00:39 +0000
Files and hashes: 1: AySsPboe2PxrB1Gyq1W06Px76LY.roa (hash: YaBT4lmGzSO4QjZLhswASZb2ScD2t8fau691sPdnGM4=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: ydAxoLsUJ54Np6onSu+2dO82Yt9PK8RTSir9rDig6+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:11:d8:e6:3b:2f:71:e4:53:b3:e1:9d:05:d7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Mar 2 11:00:39 2026 GMT
Not After : Mar 3 11:00:39 2026 GMT
Subject: CN=14d910ba51705457a074be692376a559dd08e6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:bf:0e:a3:40:5e:c1:ea:ac:55:a1:5f:4e:
02:1d:da:8d:09:1c:20:90:9d:3d:1f:72:f9:28:32:
1f:c6:1d:71:10:f4:b2:f0:de:bc:e1:16:38:05:24:
30:a5:56:01:6a:08:8c:ab:e2:ab:17:51:ad:43:92:
56:14:ee:56:74:b0:f9:86:17:26:bc:9e:da:4a:3e:
5b:15:56:79:15:00:d2:c6:ed:03:18:80:e8:54:d8:
ab:b4:c7:81:77:2c:dd:56:21:c7:f0:3b:cb:f2:d7:
17:1a:30:8b:34:56:95:c7:15:98:05:09:f5:1f:76:
c4:10:65:cf:49:bc:e7:ec:c4:c2:92:7c:b3:82:0e:
a8:02:26:fb:92:7f:44:6d:44:67:e4:4e:2c:23:af:
e8:c7:bc:9d:ce:67:b6:2d:29:3e:46:a6:bb:89:77:
d7:68:44:b1:f4:2d:9d:5d:d5:fc:8e:52:4e:d7:1c:
2d:67:f3:0d:08:b4:7f:fc:31:6d:f3:71:0e:ee:34:
20:71:bd:a5:b7:d9:ee:7f:70:71:3f:ee:8e:60:f9:
2c:2b:3b:07:71:a5:87:c1:a1:47:be:62:68:8b:be:
53:07:e7:e5:af:fa:7e:16:91:6c:55:2a:e0:2b:e0:
50:7d:07:e5:a0:b8:92:23:f7:69:5a:02:90:a9:3d:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:10:BA:51:70:54:57:A0:74:BE:69:23:76:A5:59:DD:08:E6:AB
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2f:fe:38:99:20:8f:76:e6:4f:a6:4f:d0:15:ee:2f:d8:2e:
71:f8:2d:d1:0e:94:44:0b:77:d5:c3:f4:90:9c:a2:55:76:a9:
68:50:e4:16:aa:b3:3f:f3:f4:e7:83:34:d8:ea:2f:d1:19:b2:
35:ce:6a:8d:6f:26:e6:d9:ab:18:32:c1:ef:bb:f3:f8:d9:d5:
b2:d5:97:f1:b0:06:4e:1f:3a:0b:30:5e:d9:3f:6f:94:81:fe:
12:72:fe:65:5f:9f:7d:8f:af:6c:52:10:c4:f2:45:7d:e4:9c:
9d:8e:94:bd:54:e6:12:0c:a9:3e:fe:c2:7a:bf:01:7f:0c:ab:
54:1b:9f:49:3e:f5:19:29:e2:cf:36:8f:c2:00:4a:6b:eb:44:
62:1b:89:7e:a3:2e:e2:5a:af:ad:9e:40:d1:da:e7:1b:c9:a5:
94:3d:7b:4a:13:1b:fc:ef:2e:5a:b8:36:d0:f9:fa:a6:bf:04:
c6:10:8e:fb:b6:1d:05:3d:0d:b9:c3:0d:56:68:42:f5:fa:83:
c3:46:ab:28:74:bc:af:d8:e2:61:9e:b9:18:3e:f6:df:6b:ed:
9b:49:12:71:fd:72:dd:df:4c:3e:d9:86:a3:15:a6:1d:19:cb:
52:34:54:1d:ca:fa:ad:cf:bf:af:5d:a9:29:15:de:f7:2a:a4:
ef:3d:06:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNRHY5jsvceRTs+GdBddtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzc1YmM2YzgxMTBmMWFkNzMzZGY3N2FjZmJiMWQ2ZWM0
NjVjYjgwHhcNMjYwMzAyMTEwMDM5WhcNMjYwMzAzMTEwMDM5WjAzMTEwLwYDVQQD
EygxNGQ5MTBiYTUxNzA1NDU3YTA3NGJlNjkyMzc2YTU1OWRkMDhlNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaq/DqNAXsHqrFWhX04CHdqNCRwg
kJ09H3L5KDIfxh1xEPSy8N684RY4BSQwpVYBagiMq+KrF1GtQ5JWFO5WdLD5hhcm
vJ7aSj5bFVZ5FQDSxu0DGIDoVNirtMeBdyzdViHH8DvL8tcXGjCLNFaVxxWYBQn1
H3bEEGXPSbzn7MTCknyzgg6oAib7kn9EbURn5E4sI6/ox7ydzme2LSk+Rqa7iXfX
aESx9C2dXdX8jlJO1xwtZ/MNCLR//DFt83EO7jQgcb2lt9nuf3BxP+6OYPksKzsH
caWHwaFHvmJoi75TB+flr/p+FpFsVSrgK+BQfQfloLiSI/dpWgKQqT3QmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTZELpRcFRXoHS+aSN2pVndCOarMB8GA1UdIwQY
MBaAFI83W8bIEQ8a1zPfd6z7sdbsRly4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjct
ODA5ODUxYTA2YjZhLzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjctODA5ODUxYTA2YjZh
LzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC/+OJkg
j3bmT6ZP0BXuL9gucfgt0Q6URAt31cP0kJyiVXapaFDkFqqzP/P054M02Oov0Rmy
Nc5qjW8m5tmrGDLB77vz+NnVstWX8bAGTh86CzBe2T9vlIH+EnL+ZV+ffY+vbFIQ
xPJFfeScnY6UvVTmEgypPv7Cer8BfwyrVBufST71GSnizzaPwgBKa+tEYhuJfqMu
4lqvrZ5A0drnG8mllD17ShMb/O8uWrg20Pn6pr8ExhCO+7YdBT0NucMNVmhC9fqD
w0arKHS8r9jiYZ65GD7232vtm0kScf1y3d9MPtmGoxWmHRnLUjRUHcr6rc+/r12p
KRXe9yqk7z0GOw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:30 2026 by rpki-client