Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File: jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier: mKoxWARC149IJwph9RVzMEaLu5tO+AiHWpdbe8h9gXg=
Subject key identifier: 44:05:D2:C1:61:7C:30:B2:D9:50:79:E6:08:7D:C0:B8:49:B3:2B:54
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial: 019CABD956250CE390A20E9A962F009E83F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number: 1531
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: Dule4tvJ3qFl2Zo7PutVO0GwX38.roa (hash: syF4br28pc65nkl9HefLa2vI5/Y6Wcc0BagaK/INN5U=)
2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: sFgyBKVQ+3IegiDP09DfyF97fIfssnJ/KwXvkxhI42I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:56:25:0c:e3:90:a2:0e:9a:96:2f:00:9e:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=4405d2c1617c30b2d95079e6087dc0b849b32b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:6c:53:cc:6b:c2:28:fa:a5:d3:82:bd:84:
a3:a8:d6:cf:e3:e5:55:30:18:0e:0f:1c:2c:b2:98:
7a:f8:4a:c2:43:4d:ab:19:a2:9a:8e:3d:c7:55:ec:
30:98:67:46:8f:6d:d1:2e:98:bc:4c:00:b9:1b:21:
c9:8c:82:b3:64:40:62:ee:67:d7:05:56:75:84:d7:
c8:10:c6:f2:b3:8c:7b:0b:1f:7b:ae:85:70:7e:00:
34:4d:ba:8c:ad:67:08:4e:92:33:9e:84:81:b2:db:
58:75:55:1b:58:56:4a:b1:25:3a:2b:cd:52:8a:90:
29:29:b2:84:a6:41:1b:73:a3:4d:37:2e:00:19:1f:
dc:00:16:f4:41:8a:ec:92:1a:5a:54:6d:af:93:ef:
9c:9e:5a:af:ed:92:ee:2b:35:a6:c8:e4:a4:be:bb:
9f:cd:f3:54:01:27:53:20:97:53:b5:64:8c:45:52:
82:ad:c5:8f:e9:d5:71:65:85:a5:58:72:97:cc:35:
48:be:cf:52:53:ce:9b:f3:10:d5:21:66:9f:ad:32:
f2:04:52:4d:85:cc:94:01:9d:57:25:d3:68:e2:a6:
53:4e:50:95:1c:6b:44:25:50:b9:4c:fe:2d:cc:76:
f0:73:8e:14:52:4f:6d:61:65:f7:bc:bb:1c:82:77:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:D2:C1:61:7C:30:B2:D9:50:79:E6:08:7D:C0:B8:49:B3:2B:54
X509v3 Authority Key Identifier:
keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0f:e0:17:be:c6:a2:07:54:db:dc:ec:65:65:f6:c6:d2:f9:
a0:18:a8:c1:a0:23:3f:30:db:27:89:18:0d:9e:74:8b:6e:82:
3a:43:d5:29:38:b0:02:98:a7:d6:93:91:53:60:8b:6c:02:e0:
db:c7:55:47:5c:ba:cc:77:8e:23:da:f5:ea:ba:dd:2d:9e:c6:
11:e5:3d:9b:da:28:50:8a:6b:d7:7c:92:0b:cc:5d:90:31:10:
42:74:30:0f:97:35:c0:1d:78:bf:8c:2a:de:4a:73:dc:2b:9c:
6f:f3:c6:c4:78:45:d3:c4:dd:1f:19:9d:42:ee:9e:83:c6:7b:
6a:b4:45:41:68:1b:72:fd:98:7b:10:1d:d1:f9:f3:3d:ef:9f:
d3:29:0d:e6:00:ec:03:29:06:74:a0:95:84:58:27:db:dc:1f:
e3:6b:51:a8:fe:49:5c:b3:35:0b:ef:14:64:9a:bd:af:dd:57:
56:24:48:31:d1:f3:8f:b3:5b:19:1a:73:72:2d:9e:38:2f:b4:
67:db:7d:9d:35:79:51:21:42:4f:6d:12:6c:27:aa:50:84:74:
0e:80:42:fa:ca:05:2b:87:f0:51:5c:d4:22:aa:80:f2:eb:29:
dc:a9:63:81:7f:d2:d0:bb:8c:a1:c7:9d:a3:20:6f:29:af:a2:
f6:36:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:48 2026 by rpki-client