Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: UNyynfTcW+Z9iLnJkqmaAnk5kaSzilTEjZVPPe17GDg=
Subject key identifier: 65:4E:05:AB:14:15:AD:23:67:FF:E8:95:09:B4:23:F6:04:CC:92:E4
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 019DA453CC4E9F663F7204C0393F1329D51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 18D8
Signing time: Sun 19 Apr 2026 06:00:48 +0000
Manifest this update: Sun 19 Apr 2026 06:00:48 +0000
Manifest next update: Mon 20 Apr 2026 06:00:48 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: aGC63tpguNIoTQMHy4V4AZMs6Ti3Zq/CI2OUAL2wfEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:cc:4e:9f:66:3f:72:04:c0:39:3f:13:29:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Apr 19 06:00:48 2026 GMT
Not After : Apr 20 06:00:48 2026 GMT
Subject: CN=654e05ab1415ad2367ffe89509b423f604cc92e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:90:8b:32:83:7f:59:92:f2:6b:96:7c:11:
aa:97:f7:94:52:7e:3c:36:9f:f9:d3:c3:6c:bf:36:
ab:fc:b1:57:0f:55:b9:1f:9f:2b:bb:38:d7:da:9d:
23:ff:49:0f:ab:17:82:66:70:29:d1:4d:55:99:ae:
60:ee:cb:99:e8:bd:bc:15:a5:e6:11:eb:6e:ca:34:
09:62:00:7c:aa:29:d2:82:8f:75:8a:5e:a9:b4:66:
0b:84:e9:08:09:cf:18:73:f9:d1:9d:6b:e5:9c:9c:
5e:fc:19:f2:b6:ab:71:6c:8b:c0:ae:1c:2f:1d:9c:
6f:54:e6:c4:1c:9d:cf:32:d6:8d:07:f3:3a:1c:b4:
15:94:9f:a8:ba:d0:2b:83:96:45:57:d3:61:85:c4:
a7:e6:ca:a2:ff:c0:96:83:b0:f0:bb:54:7c:08:8a:
b8:cb:ed:bd:6a:25:62:14:be:1d:12:b8:3d:40:01:
3e:7a:a0:85:90:c0:8e:4f:69:3e:3e:b9:0f:05:3e:
d8:13:f5:28:e3:b2:48:5f:a9:6c:41:e4:80:e9:9a:
fc:35:da:23:48:fb:f2:21:80:51:6f:13:14:f2:8d:
d3:93:d2:1c:aa:4c:c2:c8:f0:d6:8a:28:7d:f3:94:
04:f9:7e:c3:76:ed:d2:49:d3:b5:27:d9:1d:6b:27:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:05:AB:14:15:AD:23:67:FF:E8:95:09:B4:23:F6:04:CC:92:E4
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:81:99:64:96:f3:c5:e0:a4:dd:62:52:de:6d:ab:78:3b:
d4:75:95:9b:fa:df:95:ea:c6:f8:ea:71:55:68:7d:de:2e:c4:
31:3c:95:e1:de:d8:9c:11:1b:49:33:e9:b0:72:cf:56:82:20:
13:a4:5e:94:df:ef:aa:74:07:d5:74:35:b2:19:0b:f1:73:42:
3b:d6:d8:26:c2:67:2a:e7:86:ed:d5:f9:50:7f:08:92:f5:5a:
1d:a2:3e:45:e0:6f:ec:d1:9c:24:18:aa:4b:ef:0a:4f:65:39:
9f:4b:8c:50:7c:7f:d0:e4:2b:03:be:fa:a9:18:a5:16:a1:a3:
20:cb:93:f7:08:5a:ad:e9:c0:28:b2:9f:7b:77:29:9c:63:c8:
9e:44:78:e0:8a:95:a3:65:26:e3:3d:a9:8a:d9:24:e9:3e:b0:
a8:4b:bd:7e:81:20:28:dc:fb:af:ba:1c:46:e4:35:f5:d8:ed:
87:35:43:41:8d:34:3c:a5:78:1e:1b:8e:e8:77:53:97:c8:c5:
72:39:a5:3c:e1:38:76:5f:2a:e7:47:c1:0b:53:5e:42:78:0c:
38:57:d5:32:7e:e3:b8:f5:d1:3c:27:cf:3c:e3:d0:7f:cd:ff:
ad:20:04:b4:b2:1d:29:0a:7b:f4:c3:d9:82:8b:12:14:c3:94:
7a:04:9e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU8xOn2Y/cgTAOT8TKdUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjYwNDE5MDYwMDQ4WhcNMjYwNDIwMDYwMDQ4WjAzMTEwLwYDVQQD
Eyg2NTRlMDVhYjE0MTVhZDIzNjdmZmU4OTUwOWI0MjNmNjA0Y2M5MmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmQizKDf1mS8muWfBGql/eUUn48
Np/508Nsvzar/LFXD1W5H58ruzjX2p0j/0kPqxeCZnAp0U1Vma5g7suZ6L28FaXm
EetuyjQJYgB8qinSgo91il6ptGYLhOkICc8Yc/nRnWvlnJxe/BnytqtxbIvArhwv
HZxvVObEHJ3PMtaNB/M6HLQVlJ+outArg5ZFV9NhhcSn5sqi/8CWg7Dwu1R8CIq4
y+29aiViFL4dErg9QAE+eqCFkMCOT2k+PrkPBT7YE/Uo47JIX6lsQeSA6Zr8Ndoj
SPvyIYBRbxMU8o3Tk9IcqkzCyPDWiih985QE+X7Ddu3SSdO1J9kdayf+1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVOBasUFa0jZ//olQm0I/YEzJLkMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8GBmWSW
88XgpN1iUt5tq3g71HWVm/rflerG+OpxVWh93i7EMTyV4d7YnBEbSTPpsHLPVoIg
E6RelN/vqnQH1XQ1shkL8XNCO9bYJsJnKueG7dX5UH8IkvVaHaI+ReBv7NGcJBiq
S+8KT2U5n0uMUHx/0OQrA776qRilFqGjIMuT9wharenAKLKfe3cpnGPInkR44IqV
o2Um4z2pitkk6T6wqEu9foEgKNz7r7ocRuQ19djthzVDQY00PKV4HhuO6HdTl8jF
cjmlPOE4dl8q50fBC1NeQngMOFfVMn7juPXRPCfPPOPQf83/rSAEtLIdKQp79MPZ
gosSFMOUegSeyQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:08 2026 by rpki-client