Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File: JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier: vBGK0ZJ/GrVT05+o2U96ouWg0Ne4CfZzaGaepnTAN0w=
Subject key identifier: A3:2B:28:FD:99:31:3F:70:90:D7:31:C9:74:9B:D6:97:70:26:DF:21
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial: 019CAAFD8A321837D0195FCA3FEEBD8CFAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number: 05AA
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: rErfpEIcWC8kQA2uvNeaPX9WU/SI+7RQ+FRnoAqmcHQ=)
2: g84cD1l0NIWiAh0qYxQZFWYbDew.roa (hash: 3YtnarT57s4PMZl4o0PMkx+Dnjlo0jMzpQu5PPXZZnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8a:32:18:37:d0:19:5f:ca:3f:ee:bd:8c:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=a32b28fd99313f7090d731c9749bd6977026df21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:3d:8d:56:75:aa:63:ce:24:02:4f:07:b8:0e:
b3:6f:5e:af:66:7c:47:6d:52:3d:f8:5f:ce:47:e6:
bf:84:38:0c:14:f6:8c:f0:33:04:34:cf:f1:aa:bb:
31:15:b9:f1:29:c0:04:5f:20:1c:de:b6:1a:1c:b7:
a3:f0:c6:f1:a9:bd:58:ff:fe:73:ca:b1:81:db:5f:
93:86:86:c9:d6:be:87:70:8f:ce:11:5e:36:21:97:
64:28:a6:d8:56:a1:11:aa:e5:5e:08:f1:76:e8:bc:
58:3e:9b:87:7b:c5:77:7b:e4:fb:c6:01:28:59:61:
05:fb:02:6c:1f:59:d7:f1:6e:37:4c:83:5c:28:4c:
5f:98:ad:88:4d:2f:3c:27:09:9d:9b:7a:11:7b:71:
80:5d:7a:96:b9:99:be:ef:85:7d:3a:4e:6e:58:15:
26:5d:e3:81:90:22:5d:07:89:99:76:36:59:09:9e:
5c:b5:53:1c:b3:30:e2:cc:4a:8e:1d:71:22:dd:c0:
4e:eb:d2:5e:9a:e9:30:3a:bc:bb:4d:84:a4:a3:5f:
a7:e7:86:c3:62:2b:f4:86:38:41:98:10:98:b4:d2:
a5:f1:24:03:a5:1d:2b:cc:71:10:40:56:21:f0:f4:
06:16:5a:d8:58:a9:ec:32:04:be:1f:c6:cf:74:52:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2B:28:FD:99:31:3F:70:90:D7:31:C9:74:9B:D6:97:70:26:DF:21
X509v3 Authority Key Identifier:
keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:67:2b:d5:52:03:bf:8b:40:12:c4:1a:de:68:d8:d8:c3:
17:e4:f3:75:f2:3b:6d:1b:ba:b5:35:cd:ab:7b:4f:93:bb:c0:
e9:8a:5d:14:a6:40:db:8e:c1:99:c4:e8:a0:3b:56:94:e4:64:
fd:71:36:1c:f8:19:65:59:94:55:ca:18:e4:b0:bc:67:8b:20:
22:4b:31:b3:4e:13:81:38:ce:9f:7a:3e:4b:35:ea:a5:32:49:
d2:e0:c2:09:24:08:e7:0f:5f:cc:5d:ce:e6:bf:52:7a:bf:ae:
45:1c:82:1a:42:96:dc:9b:9f:62:a3:e0:c0:4f:0d:a5:ae:4d:
6d:b6:14:40:b8:02:10:17:53:cf:45:c0:da:e5:a8:88:a2:13:
23:51:09:dd:3d:5e:3c:3b:f4:63:2f:65:e7:8a:06:9f:f6:f4:
9c:6f:bb:29:03:90:89:e0:54:d6:5a:96:07:ed:ec:04:c5:fa:
52:22:95:ce:06:2e:43:4a:23:11:11:07:bd:e9:32:8b:79:27:
d6:dd:6e:7e:86:65:8c:8a:1a:d9:91:20:7a:db:e8:de:30:5f:
f1:9d:3e:75:14:24:c4:e8:c4:e0:4c:45:2b:d6:83:5b:b6:2d:
e5:d9:c8:12:10:4b:ef:07:8d:20:c2:18:f1:fe:8a:ae:e3:7b:
9d:e7:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:32 2026 by rpki-client