Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: 2jK20HTTZPJfrwQuTgzgi/XizqNYylVHSdgaRkz5uiU=
Subject key identifier: 3A:5A:5B:FA:0F:E8:B1:A4:08:6F:3E:B8:D0:93:A4:58:CA:70:A0:61
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 01A0E2BDC3D01E428A3A24460332B2864965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 1A86
Signing time: Sun 27 Sep 2026 12:01:22 +0000
Manifest this update: Sun 27 Sep 2026 12:01:22 +0000
Manifest next update: Mon 28 Sep 2026 12:01:22 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: VRuDEvF6tLEE+icKX66HUtaCyu1vAwRCLU5Ze1oBoQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:c3:d0:1e:42:8a:3a:24:46:03:32:b2:86:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Sep 27 12:01:22 2026 GMT
Not After : Sep 28 12:01:22 2026 GMT
Subject: CN=3a5a5bfa0fe8b1a4086f3eb8d093a458ca70a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:7f:c6:8e:57:12:6b:dd:52:92:31:2e:79:
e9:58:f7:92:05:69:6f:6e:e1:66:32:5d:30:33:09:
eb:83:c4:6e:bc:92:3f:51:a0:bc:85:48:92:50:2a:
f9:51:dd:8c:18:a5:f8:be:b3:c2:3b:92:50:ef:e5:
10:78:2b:1c:7b:a2:5d:7c:12:5c:86:85:8a:1d:31:
11:fb:2a:04:9b:e6:3e:06:d1:df:da:2e:5a:24:44:
a7:6e:2e:d7:63:90:a2:c1:29:25:d6:ac:7e:3b:38:
a6:73:db:7d:e9:69:c6:19:7d:62:57:f3:c2:53:ba:
b1:67:b7:13:a2:16:cb:a5:15:73:c1:96:ab:cd:47:
0c:97:e8:f6:eb:f5:af:ba:69:3d:05:6e:8d:2b:fb:
b0:4d:b6:66:66:27:04:47:cc:1b:ab:4c:e0:35:5b:
f8:b1:fd:43:79:8d:39:23:2b:33:55:86:14:32:a0:
fb:23:85:56:ef:d4:ad:b0:49:af:34:e0:a2:0e:6b:
e0:5f:f0:a6:b8:71:5b:23:f8:99:8e:df:5e:4d:be:
34:cc:56:db:04:ea:d0:9f:82:df:e9:d9:70:0f:1e:
5b:8d:19:c5:cc:ff:7a:18:38:9c:2c:7a:5e:24:3b:
5e:a3:1e:ae:54:38:dd:0a:52:1a:ca:9e:fc:bf:47:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:5B:FA:0F:E8:B1:A4:08:6F:3E:B8:D0:93:A4:58:CA:70:A0:61
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6b:ff:19:0a:b3:aa:2c:90:4e:c3:f7:5e:de:c6:04:da:e8:
a1:d6:1f:21:82:f0:64:58:52:09:4d:f2:ea:1e:d2:cc:db:e7:
ae:b7:92:5a:91:96:b0:6e:45:6e:34:d7:08:8a:ed:af:2c:ef:
b1:f3:52:6c:c9:7a:d8:0d:b3:4b:c8:01:8c:f6:39:ff:9e:5b:
a5:bb:85:22:b7:f1:c1:7e:e7:63:af:52:e3:43:ee:a8:89:c6:
83:48:85:3a:56:d0:4a:ef:eb:10:d2:3c:93:ef:16:c2:b4:12:
7c:ae:bb:fa:54:85:6e:ef:1d:90:a6:25:86:a5:02:92:cd:ff:
ad:42:85:45:b2:e2:cc:6b:d7:8f:0b:2d:be:90:0f:34:4f:f8:
30:de:05:4b:a2:94:6b:5c:25:a9:0a:0d:95:e9:6d:78:49:20:
30:00:92:0c:90:6c:15:db:e5:f4:27:fa:d0:71:02:2c:b1:62:
c3:f9:2d:4f:0b:61:a5:d6:d1:2b:82:bb:52:ba:a9:7e:0c:dc:
a9:cd:f9:e9:88:fd:56:30:0e:bd:87:f0:db:02:13:f8:85:c4:
3a:3b:80:54:c2:25:94:fc:95:ba:19:ea:5a:8d:b7:82:2c:21:
88:9e:81:53:85:8c:2d:d4:bf:cc:16:49:14:c7:25:77:6d:fd:
1e:8f:3e:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDivcPQHkKKOiRGAzKyhkllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjYwOTI3MTIwMTIyWhcNMjYwOTI4MTIwMTIyWjAzMTEwLwYDVQQD
EygzYTVhNWJmYTBmZThiMWE0MDg2ZjNlYjhkMDkzYTQ1OGNhNzBhMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6R/xo5XEmvdUpIxLnnpWPeSBWlv
buFmMl0wMwnrg8RuvJI/UaC8hUiSUCr5Ud2MGKX4vrPCO5JQ7+UQeCsce6JdfBJc
hoWKHTER+yoEm+Y+BtHf2i5aJESnbi7XY5CiwSkl1qx+Ozimc9t96WnGGX1iV/PC
U7qxZ7cTohbLpRVzwZarzUcMl+j26/Wvumk9BW6NK/uwTbZmZicER8wbq0zgNVv4
sf1DeY05IyszVYYUMqD7I4VW79StsEmvNOCiDmvgX/CmuHFbI/iZjt9eTb40zFbb
BOrQn4Lf6dlwDx5bjRnFzP96GDicLHpeJDteox6uVDjdClIayp78v0fV6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpaW/oP6LGkCG8+uNCTpFjKcKBhMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmv/GQqz
qiyQTsP3Xt7GBNroodYfIYLwZFhSCU3y6h7SzNvnrreSWpGWsG5FbjTXCIrtryzv
sfNSbMl62A2zS8gBjPY5/55bpbuFIrfxwX7nY69S40PuqInGg0iFOlbQSu/rENI8
k+8WwrQSfK67+lSFbu8dkKYlhqUCks3/rUKFRbLizGvXjwstvpAPNE/4MN4FS6KU
a1wlqQoNlelteEkgMACSDJBsFdvl9Cf60HECLLFiw/ktTwthpdbRK4K7Urqpfgzc
qc356Yj9VjAOvYfw2wIT+IXEOjuAVMIllPyVuhnqWo23giwhiJ6BU4WMLdS/zBZJ
FMcld239Ho8+NA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:15:37 2026 by rpki-client