Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: HcGZHe5qMuL+ZHu+Or6j9Zy5Jh4G1VFGYSbm0RomtK4=
Subject key identifier: BF:40:51:75:FC:66:BF:28:9A:F3:40:D8:47:19:87:46:70:8F:AF:D6
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 019CACB47AE157E360CDD512D25E26D58434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0D4F
Signing time: Mon 02 Mar 2026 04:00:34 +0000
Manifest this update: Mon 02 Mar 2026 04:00:34 +0000
Manifest next update: Tue 03 Mar 2026 04:00:34 +0000
Files and hashes: 1: dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa (hash: X1YBtggX7sXN/XI659Z7sShfySUKcJ9Z3YnMpVPGY7o=)
2: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: 6vV3TxT3VPyDWp1CoIhinkW45oRExLDilXryBrK0BII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:7a:e1:57:e3:60:cd:d5:12:d2:5e:26:d5:84:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Mar 2 04:00:34 2026 GMT
Not After : Mar 3 04:00:34 2026 GMT
Subject: CN=bf405175fc66bf289af340d847198746708fafd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:dc:5d:87:8e:f8:90:d4:94:b2:d6:5d:d6:
97:ea:18:07:ea:aa:7d:b0:5c:ea:e8:95:cd:5c:eb:
8c:08:e6:03:47:ac:11:0d:da:63:77:0d:52:1c:f3:
8a:72:de:76:bc:36:6c:3a:b7:41:68:04:ef:4d:17:
7d:09:9b:f0:01:0b:6e:03:75:8c:9c:be:ff:51:7d:
fd:3e:41:92:4c:ed:24:7d:46:2a:00:a0:e8:49:c8:
9c:55:40:1a:bb:48:4f:bd:e5:dc:74:d0:48:fe:0d:
5d:33:a6:70:13:3b:d1:92:79:0a:39:bb:82:7e:d9:
9e:52:37:8b:7c:52:14:6d:e9:4b:08:06:c8:e3:3a:
5a:19:ef:72:c9:86:12:4f:19:4c:91:5d:57:e1:78:
59:9a:51:ca:8f:a7:fc:bf:10:8e:de:61:c1:d7:41:
7d:84:ad:e9:ce:bb:20:98:ea:13:22:6d:23:ab:7e:
9f:d8:c0:0a:dc:77:99:85:8f:f1:d7:fa:7e:83:7f:
fb:be:a4:3f:1d:a8:0a:ed:22:e9:93:a8:9f:d9:8a:
74:88:3f:3b:63:e4:6b:11:8b:5b:20:fc:4f:99:a6:
7d:85:e5:76:36:d3:df:68:d2:44:74:54:01:51:e3:
17:ee:1b:66:cd:d4:8b:08:86:ff:f1:8f:c5:38:45:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:51:75:FC:66:BF:28:9A:F3:40:D8:47:19:87:46:70:8F:AF:D6
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:06:d6:0f:06:53:cc:05:9a:02:64:cd:d6:de:c0:c5:dd:
bd:5c:f5:89:97:c5:25:a3:60:ce:b2:b8:e3:48:45:16:9e:f3:
8f:0e:1e:f4:89:c9:6b:c4:95:23:20:3c:7d:76:88:06:07:7c:
23:8a:3d:69:bc:4c:2f:96:92:70:b9:40:70:76:28:63:23:7b:
52:12:9c:15:07:ea:76:93:3d:40:54:98:2a:a3:63:aa:6f:4f:
a8:fb:ba:c7:51:8b:44:3a:65:91:24:06:db:02:b2:10:5b:25:
8a:c5:29:02:b4:aa:eb:35:ec:d5:db:1c:09:5b:a2:d8:9e:55:
94:da:92:9f:66:15:c1:13:b8:21:aa:4e:9d:9b:8d:3c:df:ff:
c4:94:bd:f3:ac:c4:82:e5:11:2f:43:77:00:c1:b9:b9:00:bb:
bf:fe:50:bd:b1:28:3b:c4:96:7f:00:b8:66:34:b2:75:cc:87:
6c:35:2d:7e:a8:ff:24:24:79:53:c9:1f:94:af:20:0e:d1:10:
f0:cf:70:35:27:a9:14:a1:3b:57:1b:62:d3:8c:4d:f3:35:ad:
e4:a2:f5:89:79:be:a7:ff:a6:d2:78:04:5c:7b:5a:30:59:97:
4a:ca:3f:f7:63:24:ab:d7:ef:32:6f:6f:40:04:34:5c:a3:6c:
0f:30:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:18 2026 by rpki-client