Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: M7jMGEDrOew9wx8EjOSsZGTmOMDLN5C4IPakcVjNpRo=
Subject key identifier: D6:19:72:A2:27:E2:E7:AB:13:3B:3F:76:91:05:3D:03:1A:05:C1:C3
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 019CA945EC76F5ED3078E16CC7BEA883E204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 1856
Signing time: Sun 01 Mar 2026 12:00:57 +0000
Manifest this update: Sun 01 Mar 2026 12:00:57 +0000
Manifest next update: Mon 02 Mar 2026 12:00:57 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: cFFm2BPvCBybqt8Qy6FFJSuFXTxxFeRdY66GA2WTXkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ec:76:f5:ed:30:78:e1:6c:c7:be:a8:83:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Mar 1 12:00:57 2026 GMT
Not After : Mar 2 12:00:57 2026 GMT
Subject: CN=d61972a227e2e7ab133b3f7691053d031a05c1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:25:75:62:df:ee:03:a2:f8:d9:7e:a9:7c:
c2:b7:a6:61:84:a4:fb:69:3f:a4:8f:c9:bf:e1:b1:
9c:87:90:09:6d:97:cc:f3:a4:ed:c9:13:7f:d8:32:
0f:d0:d6:52:49:9f:3e:c6:64:45:7e:a7:53:72:a2:
81:73:bc:31:c4:69:51:75:b0:eb:02:a1:07:c3:95:
2f:ac:cd:44:d5:dd:67:ca:b6:bf:2b:b3:53:d2:1a:
d8:9d:ff:02:be:29:e2:b2:77:8c:ed:25:90:61:c7:
19:b5:fc:86:a0:cb:09:d2:5f:09:0c:3d:d3:79:ff:
72:b2:87:d4:11:b8:7f:3e:20:a5:9c:3c:42:cf:75:
51:69:f7:8d:c1:f8:9f:a3:c8:c8:3e:c9:ae:7c:bd:
3b:00:7a:60:a9:3b:0f:dd:93:7c:77:dc:7d:19:1d:
6a:79:8e:6c:be:85:2e:8a:b1:7c:3e:b0:82:cb:50:
4b:ef:20:f1:21:aa:8e:29:b5:06:6d:5f:64:48:4b:
65:db:52:0d:6b:a2:b3:2d:c3:84:43:24:7d:b1:d2:
8f:ea:9e:5c:0a:88:74:85:91:cb:e1:db:50:75:7c:
c9:2e:56:91:73:22:ed:8d:3e:d1:e0:66:27:31:e4:
29:79:e9:56:78:1e:93:bd:f4:7b:6a:0e:05:39:ac:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:72:A2:27:E2:E7:AB:13:3B:3F:76:91:05:3D:03:1A:05:C1:C3
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9b:50:40:4d:03:83:ac:a4:c7:c4:69:a2:96:ab:e1:e0:c6:
89:e2:d1:78:03:60:1d:17:5d:68:d3:05:d4:3a:39:82:18:b8:
0b:de:5a:5a:3c:17:3e:b8:bd:ec:55:6b:ae:43:77:68:0e:bd:
f7:ce:42:72:d4:bd:b9:81:86:1b:15:e8:3a:91:d1:0e:fb:0b:
16:b2:89:22:ec:8e:09:bd:be:54:97:38:aa:6d:d2:f1:86:c0:
0f:0e:fd:62:f1:d0:cb:ba:48:7f:71:62:69:59:52:cd:a3:a8:
3b:3e:2a:bd:49:1c:d7:85:07:55:aa:5b:32:64:67:8a:a6:1f:
60:51:6b:51:c0:be:4a:4f:27:4f:66:54:eb:e1:e2:36:28:b1:
0d:1c:c1:71:04:10:2e:f5:74:cf:62:c2:d2:9b:3d:17:79:c5:
d5:90:36:2d:10:3b:3a:ee:53:42:27:66:b3:69:51:bb:da:44:
39:73:9c:fb:3e:3a:1e:c2:2c:d0:31:69:fc:50:05:e5:e5:b6:
5b:39:e1:2e:d5:ac:ba:c6:c1:91:f6:11:dd:93:16:2c:96:02:
35:bd:92:a9:9f:4c:27:62:de:cd:51:a2:e4:29:09:df:ef:e4:
95:a8:55:ba:67:66:0d:d6:1f:89:1a:89:38:a4:fd:2b:eb:3d:
0a:97:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:45 2026 by rpki-client