Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: QkCw47zctk7i/XdyDeQ0VGrRClVgOZUeF33LWTLxlzM=
Subject key identifier: 71:E3:DE:04:54:69:E1:7D:A1:2E:31:AE:CD:C4:92:96:3D:C8:C5:AC
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019CA7FCB120CC1898A24D3688E5768AA9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 0144
Signing time: Sun 01 Mar 2026 06:01:21 +0000
Manifest this update: Sun 01 Mar 2026 06:01:21 +0000
Manifest next update: Mon 02 Mar 2026 06:01:21 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: w3LbxVib3vT+c/wkdUHpxMuVgZns/88wTFyNP4PvvXY=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:b1:20:cc:18:98:a2:4d:36:88:e5:76:8a:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Mar 1 06:01:21 2026 GMT
Not After : Mar 2 06:01:21 2026 GMT
Subject: CN=71e3de045469e17da12e31aecdc492963dc8c5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:2b:ca:e1:4c:25:ae:67:6b:62:28:29:f6:
0f:20:fb:13:56:62:8d:c7:7a:ff:8a:a3:bb:e5:87:
b9:77:88:c1:11:b5:61:ea:fb:f9:f4:87:28:d9:8d:
19:db:14:47:3c:cb:20:c6:e2:74:ad:2f:3c:8b:36:
7c:fc:8b:f4:fc:56:35:de:f1:23:60:bf:34:c0:0c:
86:40:4b:28:52:c3:3a:61:1a:8f:6a:f3:25:77:f9:
a1:27:d6:3f:df:28:7a:ee:50:de:8a:58:b8:f3:3e:
5f:8d:8c:d1:7a:73:9a:c7:55:4c:df:ef:e2:20:41:
3c:c6:a3:fb:7e:5c:22:a7:15:9d:c4:14:4a:05:e1:
40:61:4f:8a:c5:14:5e:d1:a2:2b:81:ed:94:8d:7d:
55:a0:3e:c5:fe:52:42:a5:24:a7:4d:a3:b0:ee:4e:
c4:91:11:a7:2b:25:c1:f7:6b:43:b9:32:48:e5:16:
09:12:e3:52:a0:cc:da:31:dc:e9:64:f7:55:90:f7:
8e:9a:f9:2f:61:ad:ec:1a:0e:ec:87:53:ad:7a:7f:
82:3e:32:07:9e:eb:62:8f:96:72:31:a7:ca:f5:83:
72:7d:24:5b:3f:65:b5:da:5a:de:e0:90:39:f7:bd:
64:d5:e4:2c:fb:49:51:b1:c6:e2:85:15:48:16:50:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:DE:04:54:69:E1:7D:A1:2E:31:AE:CD:C4:92:96:3D:C8:C5:AC
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:aa:cc:03:ad:f1:c4:dc:9b:2f:1c:86:ca:89:36:5e:01:
07:12:0b:3d:4c:a0:aa:a4:02:ff:bd:21:16:11:ef:0d:ec:19:
09:9a:1a:28:4d:72:99:77:40:b0:8f:eb:27:81:3c:28:0d:fa:
f8:bc:c2:32:d8:43:4e:09:3a:ec:f6:1c:61:d6:13:d6:3f:d7:
c4:84:24:27:16:b3:93:fd:31:af:84:80:0e:2c:e3:ee:f1:d5:
54:c1:22:29:ea:f7:e0:22:03:d3:e7:fb:42:88:a2:c8:03:c8:
a2:6e:e7:db:02:43:f6:f6:98:bd:e3:74:29:3c:85:98:5f:17:
a3:60:d4:d1:5b:ad:44:15:49:84:fe:c6:02:c5:6c:ac:cb:05:
b5:ec:45:81:1e:9c:73:ba:e2:64:fc:33:b1:5a:e5:f3:b4:b5:
b1:56:60:d3:3e:16:ca:70:3f:78:1c:fe:bb:fb:a1:9b:ad:a1:
07:5f:29:a6:50:26:de:a3:ca:3c:88:31:b9:05:a8:6c:c1:4d:
ae:db:4c:dd:21:07:c0:e9:be:ee:db:a1:16:89:95:11:e7:4d:
75:5c:6f:22:10:46:6d:68:40:8e:a4:9f:68:f4:b6:92:c7:df:
41:4e:43:6b:85:7e:f0:1c:2c:09:d1:4e:16:5f:23:e9:b3:d9:
d6:6c:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:14 2026 by rpki-client