Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.mft
File: jzh1EEFTs87NpyhHoXHPHXQHzfs.mft (raw, json)
Hash identifier: ElLd6SGlZ3OKlgmnziZAvA4f8e9FgkhKRob8HV2S4QM=
Subject key identifier: 5C:DC:B4:66:92:A8:75:FE:54:A3:28:BD:42:70:EB:8F:94:E2:71:83
Authority key identifier: 8F:38:75:10:41:53:B3:CE:CD:A7:28:47:A1:71:CF:1D:74:07:CD:FB
Certificate issuer: /CN=8f3875104153b3cecda72847a171cf1d7407cdfb
Certificate serial: 019FAC771DD04185AA29D0B2F2CAE1A64138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzh1EEFTs87NpyhHoXHPHXQHzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:55 +0000
Manifest this update: Wed 29 Jul 2026 06:01:55 +0000
Manifest next update: Thu 30 Jul 2026 06:01:55 +0000
Files and hashes: 1: 02nny0XnUPgyNEc13FaEXhxNt78.roa (hash: PIVVFgffJL+nqQl6vKKb2KqQA+bMxTYxLNjjcTyQqmA=)
2: jzh1EEFTs87NpyhHoXHPHXQHzfs.crl (hash: cOt4xOadZ7EwYAGPC3qgNYl3r/9Gn6+Ivs0NwRywS9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzh1EEFTs87NpyhHoXHPHXQHzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:1d:d0:41:85:aa:29:d0:b2:f2:ca:e1:a6:41:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3875104153b3cecda72847a171cf1d7407cdfb
Validity
Not Before: Jul 29 06:01:55 2026 GMT
Not After : Jul 30 06:01:55 2026 GMT
Subject: CN=5cdcb46692a875fe54a328bd4270eb8f94e27183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:ab:c4:c2:b8:fd:c3:82:55:4a:63:18:b1:
d9:df:b0:1e:4f:6f:84:af:b9:99:1f:2c:7c:ab:1c:
d1:8e:6b:0a:a7:78:37:52:d5:f1:20:58:a6:b8:d1:
7f:6f:a7:da:f9:cf:8a:1e:79:02:e0:2c:f1:71:bf:
b3:f8:7d:7f:70:65:91:07:7f:1c:cd:2a:3b:df:8a:
af:b9:75:47:ad:4b:41:0a:ca:a2:0e:4f:23:22:4d:
52:6e:6f:1a:9c:4f:2b:e6:b5:49:bd:4b:1f:05:ec:
45:5a:b5:f2:03:4b:ce:7d:ec:9b:f6:ad:e7:92:5a:
79:25:23:1a:2e:c6:ec:7d:c6:c0:1f:07:0d:f5:36:
96:b6:f1:12:79:71:63:3d:a2:07:11:e8:6f:48:08:
62:02:35:f4:f0:cd:d3:34:7a:51:c8:c1:40:67:76:
0c:90:18:31:5d:71:78:4a:29:13:27:38:32:2f:74:
52:06:06:4a:d0:80:a6:9d:3b:39:4c:a0:bd:ba:13:
4b:b2:0b:53:b5:ac:20:e9:05:c3:44:c4:3e:97:28:
94:0a:09:5a:d4:66:4c:53:9f:4e:5f:32:94:14:46:
70:ff:c1:87:ab:01:53:da:d6:82:c0:fc:9a:0b:8a:
79:7e:23:25:08:b4:2f:a5:6a:88:d6:38:82:b3:f0:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:B4:66:92:A8:75:FE:54:A3:28:BD:42:70:EB:8F:94:E2:71:83
X509v3 Authority Key Identifier:
keyid:8F:38:75:10:41:53:B3:CE:CD:A7:28:47:A1:71:CF:1D:74:07:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzh1EEFTs87NpyhHoXHPHXQHzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:3a:62:2d:f8:ac:81:84:a5:69:8d:ab:a4:eb:5a:a5:e0:
04:5c:6b:f9:f5:3b:2c:ae:a7:a8:f7:a7:97:c5:3b:ec:24:0a:
1f:99:b2:13:74:c1:a0:1a:5e:cb:74:22:e9:dc:6f:c3:57:30:
a4:f3:c6:b0:3f:1f:6f:74:d0:6f:b4:b6:88:54:e6:d2:bf:86:
3c:63:b5:af:6e:23:da:d5:3d:98:7f:ec:95:5e:88:c1:72:e6:
dd:1a:a4:b8:13:8f:e5:8a:52:30:64:ae:1f:27:87:f0:01:2c:
6d:aa:5f:fe:be:0c:5c:ab:1e:57:5c:e6:5c:f0:ef:c4:32:31:
8e:5b:0f:f5:03:b7:bb:fb:0a:eb:c2:d5:26:96:52:9e:25:08:
3a:3c:e8:e6:ad:55:4d:ec:3a:64:ce:dd:d4:4f:f6:1a:06:2b:
42:ce:d9:bf:1b:3c:cf:46:7d:50:d4:36:75:91:f6:25:6d:13:
c7:4a:d5:37:7a:f7:1a:b2:2a:ea:40:87:2c:3b:ba:44:3d:4d:
b4:9d:f9:f9:23:ca:22:3d:5f:fd:00:44:7f:fe:0a:b3:a6:18:
15:56:55:ab:00:8d:3b:b8:29:64:a6:dc:2f:e2:c0:64:4f:82:
d6:09:b1:5d:52:7f:a4:88:b1:5e:d6:05:c8:24:01:8e:8b:d6:
9f:d0:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:40 2026 by rpki-client