Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier: 3VZntcFO1IR5s83jWe/H75syQugVoyxwo13rYBZBD90=
Subject key identifier: 39:35:AA:73:77:FB:1D:72:E4:52:FE:50:0F:15:0B:05:DA:13:19:12
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial: 019CACEBB7D8956BBFC744A1404425C177A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number: 02FA
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: 4AlDyKYyp01uhUQICE/MhMIl0Z5dMCKxC1VKuwbtPJM=)
2: q2iMHMpPinukFM5Qhc4ZwsftRx0.roa (hash: +p+ImNbpg+AUu5Y3P8c/ugT7MQsuGHh+4k2E8cJ52tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b7:d8:95:6b:bf:c7:44:a1:40:44:25:c1:77:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=3935aa7377fb1d72e452fe500f150b05da131912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:49:4c:73:53:5e:d0:b9:a2:e3:99:08:76:
47:60:91:79:c0:93:10:99:fc:63:85:70:04:08:c2:
d4:57:b9:7f:86:b3:e5:26:74:40:21:0c:d5:60:0b:
95:6e:9f:88:6f:d2:fe:c8:44:2c:55:9e:4f:8a:ce:
ee:b0:27:01:f6:45:56:d0:28:6a:bf:66:6c:ac:bc:
50:76:62:07:52:6d:b1:4c:70:88:9a:a2:a1:92:73:
7e:6d:f2:54:8a:d9:17:ea:fa:e5:b3:a1:89:f5:3b:
ba:bc:16:a2:4e:95:ca:25:d1:89:ae:f0:5e:1e:32:
6c:42:a2:48:8d:78:c8:98:e2:6d:33:c4:96:9f:30:
06:fe:a1:0b:1e:9e:6f:f9:c4:85:63:55:e6:bc:5c:
e1:97:b2:15:23:b5:8a:8d:dc:ff:56:43:15:c2:f0:
85:2a:43:7f:97:8a:e7:e2:4b:91:43:54:76:02:6a:
13:c7:43:f0:a3:bb:1c:9f:50:19:58:2f:c5:66:b9:
f0:5f:e0:6d:72:69:2c:be:d9:c5:89:b8:fb:91:8f:
39:30:9e:c4:3d:f1:18:11:6e:c9:37:d7:5f:5b:dc:
c9:b0:46:e5:30:65:60:6c:3a:19:2b:7b:e4:e7:16:
82:b4:50:e9:62:12:d1:bf:25:68:51:e1:f3:ad:a8:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:AA:73:77:FB:1D:72:E4:52:FE:50:0F:15:0B:05:DA:13:19:12
X509v3 Authority Key Identifier:
keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:21:2b:e1:8d:83:96:16:3a:37:05:e9:e4:99:ac:e1:c6:a1:
96:87:ab:38:11:f9:b0:1e:c2:43:cb:22:d6:da:af:53:60:74:
61:e4:24:5d:e9:8c:1f:77:90:86:41:0b:bb:ad:1c:b3:73:36:
4d:ee:35:b0:f3:2e:cd:55:ae:f7:4c:72:88:37:81:24:76:20:
40:8c:4a:4e:62:f4:29:a0:da:df:4b:61:e6:8d:1e:db:72:9c:
fc:78:16:a4:c7:50:e9:33:65:98:c4:e4:2c:79:f8:1d:6c:ec:
dd:36:b9:29:1b:62:8c:c9:30:82:c6:7f:f6:34:dc:26:99:50:
9d:e4:3b:5e:ef:6b:89:27:fa:43:19:ac:88:0a:75:1e:41:79:
93:fe:90:34:e6:26:ff:7c:dd:e6:61:a9:71:2f:24:8a:f0:13:
0b:ed:05:ba:15:b2:cb:a4:32:1d:fa:87:06:6a:4f:99:29:c7:
ef:5b:16:9c:d5:91:7c:c3:2e:83:c8:af:43:0d:2d:16:0e:3c:
8d:8a:a6:84:e4:61:d3:68:32:18:24:b6:40:cd:55:91:fd:e9:
6c:01:84:8e:79:90:4a:a7:35:b3:b3:c7:1a:a2:ce:c7:19:a5:
dc:14:fb:37:eb:ca:4b:95:73:ae:dc:b2:4b:23:50:af:90:73:
05:74:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:21 2026 by rpki-client