Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: 4rnvOOgpWZR5fbbu3pPsnjLU3dItr7ILN+Dha7OkaHg=
Subject key identifier: A5:23:F2:63:FA:FC:FF:29:7A:F2:D5:CF:6E:45:E0:3E:C5:E6:02:0A
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 019FADC00FEB52D9B40D6BB67DC1F412A823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 19E6
Signing time: Wed 29 Jul 2026 12:01:13 +0000
Manifest this update: Wed 29 Jul 2026 12:01:13 +0000
Manifest next update: Thu 30 Jul 2026 12:01:13 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: O6t1o1jsLpvIYTlV0swsWF0olsEMwJnOqmKXXmb1JEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:c0:0f:eb:52:d9:b4:0d:6b:b6:7d:c1:f4:12:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jul 29 12:01:13 2026 GMT
Not After : Jul 30 12:01:13 2026 GMT
Subject: CN=a523f263fafcff297af2d5cf6e45e03ec5e6020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:da:72:0d:48:6f:62:b7:29:31:75:c7:99:
36:bf:a7:79:f8:33:94:1f:65:22:29:49:1e:d5:c2:
a7:34:3e:5d:c8:26:1c:08:1b:43:f9:22:a5:f2:31:
b0:92:be:4f:c1:3d:2d:de:c3:c6:17:40:e2:2a:08:
6e:c1:9b:46:5f:29:47:00:bf:bb:79:1b:ed:33:4a:
d4:42:6d:27:6e:f5:b6:30:63:1d:15:ee:56:b2:af:
e9:c9:57:c3:34:b1:ac:4f:ee:9a:41:43:ef:63:9c:
f5:a3:00:db:0c:b2:d0:8a:c2:94:a1:42:3b:c1:80:
79:8f:fd:d2:af:17:b2:70:b1:30:90:0e:ff:0b:c0:
c4:23:2d:58:0c:21:87:31:95:19:8f:95:41:d1:54:
76:6f:6a:e7:72:78:08:42:c7:ba:6e:9b:9b:cc:5a:
d1:7d:10:f9:4a:cb:0f:ee:af:ec:03:fa:65:2d:55:
79:b5:f8:12:f0:3f:51:ce:8e:19:d5:09:69:45:5f:
12:10:6e:a8:41:ea:33:3d:c8:b2:97:c1:65:31:f8:
45:8e:eb:d8:c7:45:32:78:11:53:21:53:ed:77:bd:
8b:de:62:40:76:92:17:7f:a1:9f:ec:38:07:0d:f5:
ca:d2:ef:c7:db:48:27:10:65:93:0b:ec:ca:20:09:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:F2:63:FA:FC:FF:29:7A:F2:D5:CF:6E:45:E0:3E:C5:E6:02:0A
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:30:f9:8f:d0:aa:12:b3:74:00:9c:3a:be:ae:98:06:50:
42:09:16:ed:fb:ad:7b:45:d9:54:06:ca:c7:a5:17:6b:6c:7c:
ed:5e:bb:b2:ec:da:5b:53:2a:5a:56:87:91:e9:46:4b:27:98:
54:2b:8c:6b:37:9a:cb:56:6e:98:97:3c:94:77:f3:25:d3:fa:
c1:ec:35:e9:01:72:98:cc:8d:f4:77:c3:fc:44:83:f7:6b:64:
ee:67:f0:32:d8:7b:18:9b:19:d6:bb:31:15:bd:c6:c3:75:06:
88:95:61:9b:2a:78:8b:77:b4:5f:32:51:20:5e:3c:a0:f3:06:
78:32:63:b7:27:b8:f2:6d:18:79:4f:b9:b2:21:fe:14:a8:7c:
0e:62:60:2f:d6:58:ab:df:b8:d3:45:a7:6a:cc:da:a3:7d:01:
5a:51:43:0f:56:ec:5e:1a:d9:33:ae:4a:9d:92:40:13:96:16:
e1:24:55:a0:81:ad:61:f8:27:6a:b0:f8:ce:9c:c4:88:f1:22:
10:aa:a0:d1:e0:04:24:cc:80:08:e8:01:f5:85:25:64:2c:da:
9f:26:07:06:0d:6c:a5:f3:3d:a3:ed:0d:db:8d:14:91:e0:7d:
ce:21:b2:b7:2a:61:8e:60:1f:4b:c8:06:0b:ca:2b:d8:38:e4:
03:0e:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:42 2026 by rpki-client