Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: LKK27xqezZT9i0jTA8gtz3HgmSqpQ099LrykYL8FpI0=
Subject key identifier: CE:83:E1:41:73:6F:C1:E1:BE:F3:5F:4E:71:F3:57:1F:30:15:7A:35
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 019CAC46F3E4C4AE8C74F0C89ECC11B65046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: jkhYRK4apXHLHJ4HFanP0SfT4FA.roa (hash: Q8Lk/xTao2v2+r34JtDDrlWHGb5NTl6AAYXGaL/XHn8=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: WolY3Ry3i34Wa6e5M+OCBITCGonwDdcL7cvDEE2Elzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f3:e4:c4:ae:8c:74:f0:c8:9e:cc:11:b6:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=ce83e141736fc1e1bef35f4e71f3571f30157a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:7e:c4:d6:9c:95:f6:39:a2:79:f8:f5:d1:
25:c1:36:df:be:a9:29:e1:b6:07:aa:60:f1:52:99:
e6:b8:f0:9d:66:25:1a:eb:39:f8:4f:49:dc:f6:f0:
30:3f:03:a3:42:e3:90:a0:41:07:65:2e:ab:34:ce:
60:41:71:1c:c7:b0:01:83:20:a3:e2:45:66:ae:dd:
dd:20:a5:16:2d:11:b8:54:6b:00:78:62:b7:29:b2:
bc:c8:9f:e8:db:e1:f3:d1:da:7b:c2:a9:9d:9d:47:
a7:6b:a6:07:8b:ea:e8:19:44:67:8f:2a:29:74:28:
d1:2c:27:87:b4:59:21:34:7f:41:8a:0f:02:b6:da:
e1:f2:a4:2b:4a:4c:75:77:3d:b0:9e:5e:e8:67:e1:
43:19:29:80:ec:df:4c:ac:73:0c:91:07:34:9b:fb:
34:52:26:c1:1c:57:fc:a4:57:3d:87:c0:65:7e:be:
35:ea:1c:8f:03:43:d5:a0:d4:32:a4:ee:96:c2:31:
10:f2:06:0f:b8:da:d2:e6:00:8a:f4:da:f1:78:46:
06:2a:43:84:ba:0c:ad:4e:00:4d:6c:16:e2:8d:86:
b4:43:77:01:70:6b:2f:56:94:e6:e3:81:09:5e:60:
4f:1d:3a:b1:2f:1d:f0:5d:fa:12:f2:c6:27:97:85:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:E1:41:73:6F:C1:E1:BE:F3:5F:4E:71:F3:57:1F:30:15:7A:35
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:71:09:fc:c3:a3:94:84:ea:4f:40:f0:5f:e7:77:69:ac:82:
2e:25:37:7c:38:bc:a3:fd:24:7a:f8:af:1b:1d:e5:df:0d:da:
c3:f9:4a:3d:70:26:ba:1b:ea:f2:68:93:50:9e:d5:ac:d1:a3:
a6:09:6a:70:61:c4:ca:c8:7b:f3:35:1f:74:d6:5b:8f:fe:29:
b0:34:e5:7a:29:d4:f4:a3:7c:b0:30:5e:ee:a6:4b:e2:1a:c9:
33:97:2d:c9:dc:be:29:81:80:9c:b5:c6:a5:7d:6b:6e:88:48:
1d:3a:d5:49:44:18:5a:6f:b2:e7:fa:77:d6:49:3d:a2:0d:15:
02:da:a6:78:90:7a:bf:db:b0:79:e3:33:7b:d3:0c:16:d2:1c:
c3:46:0d:8b:d4:b9:fb:0c:8e:a9:c2:22:f0:38:4d:7b:c6:a4:
23:57:9d:03:fe:ae:40:5f:0b:6b:51:45:2a:29:11:e7:39:a3:
f1:0c:c9:6f:e1:c5:f4:44:17:64:c5:b1:59:10:74:37:87:ca:
b6:50:ed:ec:bd:4d:62:33:b8:c3:66:2a:32:60:55:b0:61:c4:
d2:5f:54:3d:97:3c:86:fe:b5:e9:09:22:b0:fa:9a:d1:b3:5e:
2c:36:7c:e4:80:9b:f5:9a:df:2b:5d:0b:66:a5:57:5a:f2:e0:
93:38:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:59 2026 by rpki-client