Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: 2jT0JqAY8JBtwDgQsKqsrswG7L/eyeiOa+By1YDqWgE=
Subject key identifier: D8:7A:7D:77:54:40:60:C4:A9:25:72:F7:96:03:A4:6B:11:5B:3A:28
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019FA9E293E80464F0EFB47CE73059D0DF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 1204
Signing time: Tue 28 Jul 2026 18:00:26 +0000
Manifest this update: Tue 28 Jul 2026 18:00:26 +0000
Manifest next update: Wed 29 Jul 2026 18:00:26 +0000
Files and hashes: 1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: 3we/9WrKRZcXgVwewyXBGJzPoG7D6IFpUMahGVhKZHk=)
3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:93:e8:04:64:f0:ef:b4:7c:e7:30:59:d0:df:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jul 28 18:00:26 2026 GMT
Not After : Jul 29 18:00:26 2026 GMT
Subject: CN=d87a7d77544060c4a92572f79603a46b115b3a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:a8:1b:03:43:91:a9:d7:4e:e1:82:ac:97:
33:b2:ad:8f:1d:28:ec:ce:2f:16:f2:22:44:d6:45:
86:d5:39:51:c9:bb:9f:fb:7d:90:46:2a:ea:91:e5:
bb:64:bc:31:4d:82:c8:3d:19:63:88:7a:5b:15:c2:
1f:88:b9:11:12:50:b7:45:1b:b9:6c:f9:77:8c:c0:
85:bd:c4:42:ea:7d:66:8f:64:0e:72:1f:46:3d:fd:
60:1e:ca:c0:4f:d8:eb:ff:95:38:5a:0b:7b:83:66:
cc:cf:b4:4a:16:96:4e:c0:86:e8:80:8e:35:3b:56:
7e:82:12:ef:bb:68:26:6f:bd:37:c7:79:7f:d9:99:
ce:d6:aa:9b:1d:e9:c2:85:25:ee:31:14:fc:57:30:
71:e4:30:20:45:46:96:1e:94:32:a8:b2:e2:98:47:
16:de:e1:66:fc:7b:ba:7b:e6:14:51:9c:26:54:90:
a1:87:b1:92:a6:6f:75:a7:d2:6a:a1:af:58:a7:b9:
7e:01:82:da:1e:69:ab:08:99:17:8c:95:51:28:d3:
d7:59:b4:8d:da:60:9c:12:9c:6f:7d:3a:c2:52:1f:
fc:17:21:6e:37:a6:af:ee:91:6f:d7:6e:94:c2:b6:
8b:cd:a8:1a:e1:8d:e2:4a:ae:bc:18:22:df:90:8f:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:7D:77:54:40:60:C4:A9:25:72:F7:96:03:A4:6B:11:5B:3A:28
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:19:ba:95:da:8f:0b:27:cb:3f:c5:02:07:9d:67:03:e9:d6:
12:41:46:00:2d:b6:d7:9f:51:dc:be:f1:4a:a3:33:f3:7c:ee:
1d:2a:f1:7a:4b:53:98:c0:ba:2e:5d:92:c0:83:32:dc:b3:a1:
98:7c:98:e4:a6:6d:43:4e:09:e0:38:0a:e2:e1:b6:f7:9d:6b:
4a:00:88:94:6e:e7:90:f9:36:62:7e:c8:be:18:0d:08:84:ca:
42:50:eb:3b:50:d0:d8:57:c8:c4:81:ed:1e:60:b6:54:b6:9c:
bf:39:5a:60:09:3d:fa:ed:85:e6:f3:f6:fa:cf:f7:52:48:dd:
53:21:97:e8:fb:5c:fd:69:84:05:4f:70:29:1f:db:0d:1f:bc:
3b:bf:c3:fc:a3:c5:83:fd:50:81:73:ec:f5:55:ac:f6:00:64:
0a:6b:f8:a9:2c:de:bb:39:04:d6:be:5c:44:eb:be:de:87:bb:
c6:13:78:7a:0b:54:de:81:15:8a:92:ad:43:22:87:ae:b6:92:
39:46:8d:07:17:d6:43:fb:1f:da:37:30:6e:de:c7:43:a8:ef:
86:b1:74:55:e6:c0:a7:46:dd:9b:fc:e0:7e:83:9f:d4:e8:c4:
be:77:44:7c:65:06:31:75:c5:31:56:a0:cc:1a:37:22:83:51:
15:3f:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:10 2026 by rpki-client