Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: u9TgeyMlGSfUPrKImLAWlCcCc5yTqzO9EvTt0MEGGbM=
Subject key identifier: 03:C7:DF:70:4F:7F:3D:A3:D3:C2:E8:E1:B4:33:3A:94:7B:AA:7F:C0
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019DA4F90333E376B8711CE1303E3F31238B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 01C7
Signing time: Sun 19 Apr 2026 09:01:15 +0000
Manifest this update: Sun 19 Apr 2026 09:01:15 +0000
Manifest next update: Mon 20 Apr 2026 09:01:15 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: VKF/3MLYnAm7jBE0gw6LX8GSGwlteVl62JkyCf8rnV8=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:03:33:e3:76:b8:71:1c:e1:30:3e:3f:31:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Apr 19 09:01:15 2026 GMT
Not After : Apr 20 09:01:15 2026 GMT
Subject: CN=03c7df704f7f3da3d3c2e8e1b4333a947baa7fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:d9:ca:58:9d:2a:74:02:d2:dc:bb:c0:c2:
bc:56:fb:77:95:48:64:e1:33:db:0c:dc:7c:c4:c0:
a6:37:eb:c1:ef:1d:71:dc:72:a9:13:ec:f4:1d:9b:
ba:50:c9:1b:d1:54:c2:2d:09:39:8f:df:db:01:7a:
87:69:43:cc:d0:c7:21:e2:c9:fa:28:4d:38:2b:3f:
39:52:b7:77:16:99:21:ff:6c:2b:00:0b:be:6c:91:
0c:a4:ad:9e:74:5d:da:e2:ca:63:6a:00:ab:4a:5f:
e8:cc:b8:17:1d:00:73:b8:6f:f8:40:51:70:20:87:
6a:ac:bf:ec:6a:c7:22:08:30:04:58:c3:14:cb:29:
6d:90:85:5a:31:81:0b:06:c5:95:bb:af:60:96:e8:
ab:d2:63:16:4c:6b:d7:2f:98:89:b7:ed:df:02:59:
dc:e7:64:b2:6b:64:51:7e:e4:93:bc:a0:88:40:e3:
d8:4b:4e:41:3c:7f:cb:73:4c:66:99:e9:d2:98:1d:
4c:26:61:40:3e:de:08:97:ea:e8:1b:f5:a1:dc:a2:
d0:7c:61:e1:a0:c4:60:fa:ad:eb:00:25:d5:dc:e6:
5a:b0:37:4a:b9:21:8b:b8:e7:fb:f9:4c:cb:2a:75:
bc:db:a4:d7:19:38:c0:63:72:13:65:8a:65:1a:a2:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:DF:70:4F:7F:3D:A3:D3:C2:E8:E1:B4:33:3A:94:7B:AA:7F:C0
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d5:96:07:f3:1c:3e:a1:4f:f2:fa:c4:81:43:fb:5c:ae:cd:
d4:32:48:c7:02:6b:b6:5d:57:e1:77:b1:ba:f8:c2:fd:35:dc:
cc:c9:c2:6a:7a:72:94:b0:ec:a0:1c:39:b4:83:e8:e5:84:17:
6a:b0:0d:c9:f2:54:05:99:c5:3f:86:0d:35:f1:6c:c3:14:5e:
ac:68:f1:79:10:e3:2c:0a:cd:bb:3c:d0:35:5b:a0:8f:e5:f5:
9e:fd:45:15:51:aa:ce:63:6c:1b:93:48:87:85:31:5e:55:74:
b9:74:80:84:f8:7b:84:2f:7a:8d:35:f8:e0:cf:dc:67:4a:58:
c2:cb:aa:bd:16:bd:a9:62:7a:4b:c9:b5:d6:c7:45:66:33:01:
0e:d9:33:08:9b:18:30:c2:ee:73:4f:42:8f:9c:e1:a2:94:93:
c6:23:bc:d7:65:1a:9f:a4:42:b8:e4:e3:ce:a6:c0:c4:fc:f6:
c8:06:b5:6d:88:b3:cd:7b:6b:10:3e:57:c7:8b:4b:10:86:69:
00:55:f7:2d:1d:ed:f5:e1:e5:0d:64:df:e4:23:61:40:ce:c3:
44:89:8a:11:02:7e:b2:0b:90:28:d3:a4:10:6c:83:0c:50:99:
ea:b4:c7:ec:e1:56:1a:6f:63:c5:46:93:d6:67:6d:59:cc:e9:
61:d2:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:42:48 2026 by rpki-client