Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: EFBZ17mWgMNVIcasTY755rVX07o29iHKCH19EMUD2Fs=
Subject key identifier: 8F:9A:03:A6:5D:92:F0:43:65:B3:91:71:7E:CE:72:74:7F:8E:D4:5E
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 019CABD9E334F4800584F020CCCCD9EC7EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 1665
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa (hash: yuGCrAPUyjxlYSHRZDhM2aJs4WM249W9d+i/Vuix/5Q=)
2: KUSYPuHV0BPhErEp3TcpVUt1EQA.roa (hash: sBg+JjnzDUbRmXsbrD21Od6LO8lyYKiFXNtgEPlf+T0=)
3: irgcza7ueUyMGnD413LhS2bOjJI.roa (hash: daWp79CmAXWz32HU7ki6gyN205KgB+0e3s53G3yOlXg=)
4: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: ihDt3yb79DNfpZ18xgfotQfXzWTBtNKKrM6n9zEo/Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e3:34:f4:80:05:84:f0:20:cc:cc:d9:ec:7e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=8f9a03a65d92f04365b391717ece72747f8ed45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:a8:99:12:89:31:51:6c:63:fe:1e:19:3c:
7f:10:b1:e7:9f:33:e5:e3:97:32:bc:d3:78:ef:13:
6a:e6:68:16:2f:82:a6:18:2e:dd:8a:16:31:cd:f1:
6c:7e:b1:79:e6:96:84:5b:2e:56:8b:a7:bc:b4:88:
10:6d:77:59:63:a5:ed:94:0c:4f:fe:62:64:14:e6:
b6:22:56:bd:f0:41:08:b5:03:1e:9e:a9:98:c4:f2:
2b:10:2d:c3:29:07:32:60:83:6a:31:4b:d0:19:60:
05:52:f5:57:b3:8d:82:05:97:57:8c:ef:54:8c:e0:
b3:38:10:36:4a:d5:c3:7f:17:da:d7:ab:11:a0:36:
b1:9a:d1:cd:55:dc:9c:23:80:68:f1:69:f4:ec:47:
57:9d:51:c9:55:c4:70:07:b6:e7:2b:41:77:45:8b:
b6:90:3a:c4:00:1a:bd:9b:7f:e5:d5:38:5e:65:e1:
70:35:2f:62:3a:a5:24:72:49:27:4e:e0:2c:57:74:
68:55:41:ab:67:5b:71:63:d8:2b:d3:b4:37:f1:f3:
37:7d:af:ad:96:d4:05:a3:62:14:cd:ad:4e:b7:b9:
91:b6:47:43:18:55:5f:17:11:bb:f3:1b:b6:de:a4:
df:fe:c7:76:7d:8e:d1:41:cc:30:35:a2:35:62:f6:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:03:A6:5D:92:F0:43:65:B3:91:71:7E:CE:72:74:7F:8E:D4:5E
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a8:73:2b:60:99:26:15:8d:be:2c:1f:34:46:6f:96:b7:58:
c6:0f:26:91:24:6d:30:9e:a8:cd:81:f9:d3:e7:e0:6b:63:59:
38:f9:7b:07:f7:76:cd:0b:fa:31:7c:56:8c:93:7f:34:af:2b:
cc:d4:58:ac:b2:06:1a:6e:f3:08:76:2a:ac:f1:ee:1f:47:d8:
f0:ed:ff:de:86:3a:95:31:30:ab:9b:6b:7f:67:6a:22:92:50:
2f:4e:14:ca:db:fa:72:9a:67:55:32:4f:2c:5b:3a:40:93:dd:
e4:73:fd:00:1d:0f:eb:d5:d5:b2:bc:11:0c:17:ad:03:67:a4:
e6:d6:f6:4f:6b:21:b1:a1:a8:ee:bf:6f:66:b9:80:9a:1a:7a:
f5:24:3f:d9:d3:7d:72:49:30:db:3c:7c:84:a8:c1:f4:7c:8b:
b4:98:48:48:94:9c:46:cc:bc:ad:e1:f1:28:6c:38:95:fb:e7:
6c:b9:6a:5b:ab:3c:5f:3b:8b:5e:7f:4e:66:8e:df:a2:bd:98:
fe:d9:a8:1c:30:9d:1b:e6:80:46:d7:1f:eb:4d:e9:bd:74:62:
f1:70:c4:cd:10:a1:fe:f5:e4:6a:a6:fe:de:e5:47:35:16:20:
67:66:fd:ab:87:1c:d2:eb:92:aa:11:d7:ca:2e:b9:fb:f1:02:
c4:6f:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:12 2026 by rpki-client