Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: 0wdUWH0+BNx5WS1PjAnWVx+k+2prV4liJqz8zQ06g54=
Subject key identifier: CF:69:FF:E7:22:3D:9D:06:07:C5:B8:3A:F1:5C:2D:B0:06:83:60:1A
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 019D99D05AC9A47FEAA719903B62E176B6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 1506
Signing time: Fri 17 Apr 2026 05:01:01 +0000
Manifest this update: Fri 17 Apr 2026 05:01:01 +0000
Manifest next update: Sat 18 Apr 2026 05:01:01 +0000
Files and hashes: 1: X7EGq3ULp4qMjdusm-fC_K2E7p4.roa (hash: DCGD9YxklsauNoagw/am2/7dOGgzTpV9Ou4m28+2cEg=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: +T+mHqtD02qs9cW+F5zRY5kpPWhKj6cv4qhpx5C0zho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5a:c9:a4:7f:ea:a7:19:90:3b:62:e1:76:b6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Apr 17 05:01:01 2026 GMT
Not After : Apr 18 05:01:01 2026 GMT
Subject: CN=cf69ffe7223d9d0607c5b83af15c2db00683601a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:10:6b:ee:75:10:5c:cd:3e:c9:9a:04:b0:
fe:b4:0f:59:20:3f:f4:95:6e:f4:5f:5b:01:46:64:
28:39:0d:67:85:52:17:81:e5:d8:fd:45:af:60:68:
4f:90:83:69:25:8d:32:0a:67:36:b0:be:55:a6:d0:
1b:f3:09:b5:e6:d6:e6:15:7b:56:58:e8:d8:15:f8:
db:aa:28:1e:12:db:d9:ad:4a:5e:18:cb:01:6d:99:
b0:8c:38:5c:68:6a:6e:b1:a5:17:6d:0f:01:14:17:
8f:e4:1f:96:aa:3c:17:9e:5d:9c:91:51:a0:c5:6b:
cf:17:29:c2:6b:f4:b5:46:f2:04:54:38:76:45:72:
f1:bc:fb:88:02:20:ac:35:28:2a:51:a1:a4:1b:1b:
3f:66:71:47:9f:b8:7e:ec:f0:67:98:ea:8d:5a:35:
83:7d:b6:91:47:01:80:09:f5:12:c8:13:15:d6:b3:
61:de:af:ef:3b:95:a5:92:f9:4e:d1:5b:dd:24:47:
9d:8b:b2:5d:63:e4:3f:7b:1c:ca:89:fe:63:ac:2d:
1d:65:ef:03:df:60:10:65:7d:82:d1:2c:06:2d:7b:
21:d6:2f:d7:d7:9f:60:2b:9c:d1:aa:47:23:b3:c7:
d5:e8:01:cc:86:9a:ac:01:f2:e7:51:ca:42:e2:3b:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:69:FF:E7:22:3D:9D:06:07:C5:B8:3A:F1:5C:2D:B0:06:83:60:1A
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:61:9f:fd:ed:ec:04:dd:80:f1:25:9a:15:e1:9f:04:6c:
c6:ad:3a:bf:db:53:3f:d1:46:5c:7e:10:fd:f0:20:68:a1:85:
c9:08:26:79:64:75:f6:6b:1e:4c:06:f4:dc:32:14:f6:f6:c8:
ba:42:b2:d2:20:e5:ee:61:57:51:5e:70:27:34:05:47:7c:a1:
d8:79:5e:48:1a:45:27:39:f6:e8:80:70:7d:dd:82:26:52:ea:
e6:e9:b5:cc:7c:1c:9d:81:40:e0:9c:fe:21:db:c1:c2:81:e7:
38:f4:b5:f2:45:d1:c0:e0:43:ee:1d:7c:a3:6b:5f:da:03:bf:
ca:58:5d:de:de:6c:e3:43:08:fe:56:6f:44:3c:19:f1:d0:07:
13:81:41:38:7a:41:ac:06:4b:6f:1e:6c:2d:f8:ff:30:2d:cc:
9b:1f:48:19:9c:b4:53:8c:4d:ed:0f:2d:80:1b:67:14:83:e4:
49:e7:a9:f6:4c:22:0a:d9:e2:f2:0a:16:0d:ca:77:9e:07:d3:
d5:79:16:0c:07:11:dd:fb:bb:b5:98:ce:86:1a:dc:6b:7d:8c:
31:f5:bf:77:6f:ab:76:b2:b9:33:60:7a:1d:1d:cc:38:1a:ea:
0f:ac:61:ae:f8:c2:10:b3:10:5e:ca:5f:2b:02:b0:f7:3f:13:
8f:98:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:51 2026 by rpki-client