Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
File: JZB_kNn52QL88EvQtGFSw4J6fVA.mft (raw, json)
Hash identifier: jlbySMIbT/jRz+l3SP7fee0c0JaQ9whEADaP2Aoazdk=
Subject key identifier: 47:86:01:9A:F5:6E:F4:94:50:06:FF:60:04:90:5D:E8:DC:26:86:C7
Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Certificate serial: 019CAFB5CAC57D8B246DC739E3AF7936FCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
Manifest number: FB
Signing time: Mon 02 Mar 2026 18:00:52 +0000
Manifest this update: Mon 02 Mar 2026 18:00:52 +0000
Manifest next update: Tue 03 Mar 2026 18:00:52 +0000
Files and hashes: 1: JZB_kNn52QL88EvQtGFSw4J6fVA.crl (hash: WAXxlBenD5lseNrOi3PhcqqkaTHqXQe+H7D7k5EemBs=)
2: us20DoJCXsVZzbd3x5fHyF61Jik.roa (hash: 1tw/rfH56Z411UghhNhBV3Cnovjrc0BrKALUNfjqvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:ca:c5:7d:8b:24:6d:c7:39:e3:af:79:36:fc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Validity
Not Before: Mar 2 18:00:52 2026 GMT
Not After : Mar 3 18:00:52 2026 GMT
Subject: CN=4786019af56ef4945006ff6004905de8dc2686c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:8c:2a:ea:13:0f:81:36:66:ac:1f:29:15:
e8:1f:98:f5:67:a4:a3:ac:90:8e:42:c0:61:b8:26:
88:39:be:ee:d0:a9:34:c3:09:d5:84:e0:6b:9a:e0:
88:50:b6:9a:96:47:f5:49:9d:51:16:11:e5:c7:b7:
18:42:f2:db:f6:e7:6f:9d:85:21:de:ae:05:95:9d:
26:7f:18:88:d8:fa:7a:36:33:52:b2:49:ac:50:69:
64:5e:67:cb:76:f7:a3:10:45:f0:81:61:67:97:03:
35:75:f3:8d:6e:d0:5a:d6:04:1f:f2:f2:4e:68:5e:
3d:3d:e9:df:97:6a:d9:02:2f:60:52:b0:39:9a:34:
bf:e8:3d:22:59:78:b0:66:99:ca:4b:69:54:4f:57:
28:a3:5a:70:33:e9:b4:65:e0:3a:d2:48:01:27:cb:
c5:69:37:b7:73:26:6a:b4:b3:36:b8:2b:5c:4a:0d:
eb:ed:26:13:47:60:42:59:18:32:10:a5:26:02:c7:
13:34:31:d5:84:29:b5:35:7d:36:74:b7:12:fd:ea:
e1:0d:48:f6:d4:24:17:9c:0f:34:b4:fb:48:e6:12:
c4:82:06:47:94:82:f7:c8:49:cc:52:90:49:3a:13:
34:0d:a3:67:1f:9b:bb:4e:4c:6a:66:83:0c:48:55:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:01:9A:F5:6E:F4:94:50:06:FF:60:04:90:5D:E8:DC:26:86:C7
X509v3 Authority Key Identifier:
keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:23:69:d6:df:e4:ca:00:99:19:2e:12:6b:2a:91:23:4a:2c:
8a:2f:3c:2d:71:b7:52:8d:ae:6f:79:a8:b5:7b:27:78:20:76:
96:c0:16:57:b9:52:27:39:00:f6:16:91:d3:41:57:86:b3:0e:
88:d7:68:9a:05:dc:7c:51:55:b6:32:bf:72:44:b2:91:3f:a0:
43:81:96:1e:48:8d:ac:1b:af:de:9c:c7:cc:f7:55:2b:bc:4d:
e6:28:bb:25:ce:0e:fc:01:2f:ed:b4:9e:62:d1:73:b5:d8:5e:
0c:a0:c1:51:5f:a5:19:e5:88:99:87:4b:e3:d2:ca:7e:cc:11:
ed:64:3a:3f:2d:2b:90:31:9f:05:86:65:25:43:d5:35:67:25:
89:ad:92:ae:3b:04:78:bc:a0:f0:aa:1f:7e:55:f6:ce:2e:87:
c5:b8:c6:8d:50:a3:2c:7d:c2:7b:75:ee:de:47:99:e1:b6:e9:
bc:b1:03:85:93:23:94:ca:40:7d:68:ab:06:df:8a:7a:e3:d2:
d4:2d:7d:25:dd:12:3f:4b:7f:1c:d8:1d:c7:39:92:9a:60:95:
a9:e5:e2:21:9c:16:d5:87:d0:99:e6:26:d4:06:4c:58:c0:4f:
47:06:ee:73:71:31:34:d6:e6:b5:5f:9e:d7:60:a2:48:f2:9c:
0d:2b:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:38 2026 by rpki-client