Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: MHPMjsNKF1AnbNyMm3QwU88BD6z4e5f9cq9dNrdyHMs=
Subject key identifier: 7B:18:D1:A2:A5:4A:37:BA:15:F5:ED:A0:D4:9C:4C:0E:6F:F0:C0:43
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 019D98506DBF8D78F5549974EE08C68DE6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0DC9
Signing time: Thu 16 Apr 2026 22:01:40 +0000
Manifest this update: Thu 16 Apr 2026 22:01:40 +0000
Manifest next update: Fri 17 Apr 2026 22:01:40 +0000
Files and hashes: 1: dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa (hash: X1YBtggX7sXN/XI659Z7sShfySUKcJ9Z3YnMpVPGY7o=)
2: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: cACw6QzpZ8Abhb8CP+p1e3zebLnMAL6EEg5XTXY1C0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:6d:bf:8d:78:f5:54:99:74:ee:08:c6:8d:e6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Apr 16 22:01:40 2026 GMT
Not After : Apr 17 22:01:40 2026 GMT
Subject: CN=7b18d1a2a54a37ba15f5eda0d49c4c0e6ff0c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:3e:85:95:4e:95:2d:5e:f7:bd:59:d7:00:
45:4b:87:4b:88:c9:bd:02:36:a7:3b:a0:25:50:ba:
6e:50:5d:2f:22:22:82:a7:d5:1f:cb:ba:43:ed:ba:
21:e3:76:95:df:6f:f0:f5:05:c0:67:18:3b:f5:2f:
b3:73:d9:70:ff:2b:44:4d:74:35:cb:84:61:0b:e8:
d7:ee:7a:40:31:f9:b9:f9:02:e9:ee:70:03:e1:ce:
a0:d5:e4:08:ba:8e:77:8e:42:7c:b4:b7:9e:3c:4c:
e3:c8:82:99:5b:94:53:8c:1f:a0:ea:e0:24:55:ee:
9e:95:41:e5:a0:49:08:09:78:f9:b6:59:1a:96:27:
39:71:ce:e0:6b:0d:d2:3d:f2:b8:63:aa:78:97:38:
39:53:6b:1f:89:2d:f3:a7:3d:fe:e0:53:21:e1:10:
c7:ef:cc:96:cc:75:eb:cf:f1:cd:98:b8:d6:e4:06:
7a:17:fc:85:7e:b3:a0:d5:d8:82:67:73:f7:44:67:
e0:5e:7e:67:2a:e3:01:c6:65:7c:20:e1:bf:f1:7c:
2f:51:85:98:5f:0d:f2:ed:c2:d5:ce:80:d5:af:5e:
92:6c:44:93:27:ca:6f:ec:9d:10:7c:f5:28:24:59:
f9:62:1a:ae:09:7e:2b:b0:89:a2:dc:39:28:56:36:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:D1:A2:A5:4A:37:BA:15:F5:ED:A0:D4:9C:4C:0E:6F:F0:C0:43
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:43:5a:36:fd:93:3c:40:dc:28:2a:e5:8e:ba:f2:69:1e:
ca:b9:83:56:4f:a3:c7:66:1f:f6:51:3f:c8:9a:85:22:9b:b9:
21:43:07:de:70:f1:9d:dd:0b:eb:ca:1d:5a:a2:28:c5:b0:16:
d4:42:93:cb:38:7a:c3:ac:3b:07:45:b6:c7:c5:67:dd:37:21:
56:2c:82:df:86:ac:2b:a9:c5:61:96:e5:be:d6:2b:dd:68:b0:
9b:19:2e:42:a6:3a:9d:70:c1:d5:3d:f6:da:18:3a:f2:c8:df:
99:6e:7f:0a:c8:e4:a0:5c:4a:94:2c:3a:24:c3:ca:fb:26:27:
68:8c:33:80:05:ad:bb:5d:a1:4a:d1:72:0d:7d:4b:b5:ea:bb:
df:37:44:35:36:4f:0c:b3:d6:b5:f8:a3:13:9f:23:fd:48:18:
7f:df:af:9f:96:42:9e:28:e0:a9:24:cb:7f:c1:5e:b8:21:e1:
ce:ca:b9:ca:c4:9d:91:31:67:a2:af:dd:e2:31:df:62:81:ff:
b6:12:64:bc:23:16:88:24:8a:e4:22:9e:f6:16:5f:67:c7:37:
36:50:29:de:38:4b:2d:c9:6e:3b:1e:f4:0e:5f:00:0c:c5:0b:
d3:8b:68:ad:53:93:be:a8:cf:7a:03:b8:31:64:9f:2e:6d:d2:
76:f5:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:40 2026 by rpki-client