Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: 6vy7kWW8j6y/fwHDDAiGKK7NEsnzlFOlWwI6dMGHxEk=
Subject key identifier: DA:6C:12:13:8B:A6:35:18:05:64:30:6A:C1:DE:0C:9B:73:0B:5D:BA
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 019CAC46B57DCCA380C37BF8EB4C078E239D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 148B
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: X7EGq3ULp4qMjdusm-fC_K2E7p4.roa (hash: DCGD9YxklsauNoagw/am2/7dOGgzTpV9Ou4m28+2cEg=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: 9V3FJD11MzWNU3ONPwvA57gp3w2tdnaCMf2s8R4/rzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b5:7d:cc:a3:80:c3:7b:f8:eb:4c:07:8e:23:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=da6c12138ba635180564306ac1de0c9b730b5dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:4d:04:bb:48:ba:90:85:3e:cb:c2:bf:f2:
15:e4:4a:f5:09:91:1f:b3:fa:fe:7d:1f:69:82:44:
25:33:e1:90:92:70:9c:81:1d:a6:4c:a7:d3:25:11:
b9:12:62:20:9a:4c:86:b3:89:67:03:53:9e:f0:61:
76:e7:e6:cc:ce:50:69:55:3f:2b:95:22:79:50:fb:
f1:44:84:0e:47:36:32:d6:79:bb:eb:fa:f7:ac:51:
08:d5:86:7c:a1:04:00:eb:8b:71:0a:07:c8:79:1b:
f4:d4:0c:3f:b7:93:2a:cf:09:ba:1c:6c:07:be:59:
58:dd:23:89:4e:53:c0:6d:f4:1d:b0:b7:ec:15:14:
b7:4e:a1:da:ad:72:e8:d5:a1:bb:50:83:fc:6c:e2:
eb:0b:a3:58:de:80:76:d3:09:39:b7:d9:86:8c:34:
5a:d3:1f:5c:e2:d0:8f:bd:c9:73:52:04:af:f5:c3:
e4:5e:62:7d:e7:c0:72:f7:b1:fa:e9:63:64:d9:7c:
1b:e5:61:91:15:9e:2f:6e:b2:4a:8b:05:e0:64:cd:
66:22:d4:8d:f1:89:55:ec:a8:33:46:b9:62:23:60:
77:41:37:38:29:de:b7:15:3b:cb:6a:88:fc:cd:c0:
ad:9a:bf:f4:67:60:c5:c1:a3:bf:66:08:f4:f6:62:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:12:13:8B:A6:35:18:05:64:30:6A:C1:DE:0C:9B:73:0B:5D:BA
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:25:cc:67:e2:55:1c:27:28:e3:d5:b2:ea:e6:50:7a:5d:79:
54:ab:63:e1:66:d1:f8:89:76:8f:af:41:75:d8:60:5d:90:91:
5f:a2:87:66:d7:3d:2c:5b:9d:78:5d:74:f5:45:c6:80:95:27:
c3:27:81:2c:c1:b7:ab:df:88:3e:6c:38:e9:7c:b3:8b:00:d6:
62:08:72:c7:48:3e:93:55:32:a3:eb:4f:01:c9:2d:c9:3c:da:
7d:ff:51:cd:82:90:7d:94:b2:b3:08:2c:f4:58:12:44:2f:83:
52:e9:48:a3:ea:5d:8f:da:71:b5:2c:bb:d6:6c:c2:74:bd:25:
86:67:85:b2:90:e4:d3:05:b6:8e:99:0d:c2:41:7b:a1:53:06:
21:97:ce:ed:8f:6d:97:b9:70:33:8a:1b:10:ed:ee:f9:48:12:
1e:87:0c:73:42:c8:4c:9a:15:8d:36:d5:a9:34:33:b5:7e:a9:
40:37:3a:56:d8:58:ae:ff:23:13:d8:0e:ff:2f:47:66:6d:f4:
6f:6d:8a:cb:d9:9a:7a:85:6f:39:d3:0e:e2:06:d6:44:c3:dc:
3b:0f:ae:4b:72:39:35:cf:0a:28:dc:ce:e3:25:99:ef:d9:52:
09:94:07:c4:17:64:c0:78:d2:7b:02:dc:ed:cb:c4:d9:ff:d0:
5d:e9:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:32 2026 by rpki-client