
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: /9f+spKeVpSyzmd2sfLHNpl2yN5nX4dGjXSe6sG8vD0=
Subject key identifier: D6:91:6B:1B:58:C9:5A:BD:91:E6:C7:71:20:F8:81:EE:12:71:1A:0E
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 019FAC08B19B37B4033A33F5F427F30F933B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 1567
Signing time: Wed 29 Jul 2026 04:01:18 +0000
Manifest this update: Wed 29 Jul 2026 04:01:18 +0000
Manifest next update: Thu 30 Jul 2026 04:01:18 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: HgdMYrQ2kL6TQFIB41xmnqr9MYA8jLQXpJCvrPohGIQ=)
2: o82as8Pp65IOMGZ2l9--UN04jxE.roa (hash: 1ACvBsYWfHGc1kJQlC6LwuaFRNU2JMZS6o4Vp3pXj6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:b1:9b:37:b4:03:3a:33:f5:f4:27:f3:0f:93:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Jul 29 04:01:18 2026 GMT
Not After : Jul 30 04:01:18 2026 GMT
Subject: CN=d6916b1b58c95abd91e6c77120f881ee12711a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:4f:29:69:8a:af:27:4a:8e:cb:f5:e7:f4:
e2:73:93:ba:86:ad:34:9a:cd:62:50:98:77:f1:60:
16:a8:35:75:1b:c9:eb:b7:54:20:83:08:65:93:1a:
07:42:8a:02:c3:81:4a:6d:54:f6:14:e9:cd:bd:12:
81:58:23:62:98:7e:46:7f:72:ad:7d:97:ef:85:e1:
08:d1:ef:e1:b3:37:33:62:a9:3a:d9:fd:38:84:76:
bc:b9:ff:b0:ca:a6:da:16:54:44:d1:71:b7:64:12:
8f:bb:63:d2:60:f7:67:15:16:14:c7:dd:96:15:39:
16:87:9e:6e:66:b6:bc:bc:62:0a:cd:98:b3:77:4a:
24:7a:ac:30:63:38:22:6e:72:03:7e:90:fe:cd:eb:
56:43:d4:54:2c:a7:2c:0b:22:91:76:79:fe:15:37:
35:93:e8:3e:2a:df:6b:38:0e:3d:25:95:39:ee:01:
64:9b:51:1d:26:e6:73:25:c3:54:2d:3f:80:ce:ac:
40:cd:d3:28:0e:8b:65:ac:7f:81:95:2b:12:b8:6c:
70:60:d7:8a:78:53:a1:f0:24:7f:65:38:5d:94:0d:
67:39:0b:90:39:fe:ec:ae:5f:9e:6e:06:16:eb:80:
c7:a9:21:e8:a8:01:99:a2:c1:b6:60:0b:af:0c:10:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:6B:1B:58:C9:5A:BD:91:E6:C7:71:20:F8:81:EE:12:71:1A:0E
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d6:d4:24:a7:1b:72:67:d4:6f:79:2b:ec:06:73:e8:fb:14:
39:44:fa:75:b8:7b:bb:91:50:8d:4d:68:f1:8e:19:f3:5e:7a:
ee:d3:ad:0d:a6:a6:5b:22:28:50:4f:53:b3:c5:f0:23:75:8c:
35:66:dd:97:e1:1a:6c:fe:b3:83:ee:8a:28:ab:cd:e8:6b:20:
96:66:53:55:bd:cb:60:25:37:e0:77:1f:5a:2a:7c:97:29:e4:
6d:0c:20:e8:2e:91:8d:96:36:62:9e:19:44:75:a9:c0:ba:be:
f1:ec:50:5d:b3:08:91:87:30:ae:2c:96:d5:8c:08:d1:3e:e8:
14:f3:1e:6a:d6:2f:0e:0d:8c:d4:8a:28:71:c7:24:04:1b:ec:
06:79:27:2e:74:d4:da:58:7f:be:65:e9:8b:93:d1:a5:e4:34:
60:c7:6d:b7:9d:8a:3e:b1:f6:a7:21:ad:c0:f6:18:18:09:9a:
1a:93:83:79:0d:dc:6f:04:98:ea:99:bd:cb:9f:4b:a1:fe:39:
d5:76:99:d8:d7:0e:e4:eb:c0:4b:9c:20:68:b3:9a:dd:c9:9c:
4b:df:c8:b1:e0:42:d3:67:f7:67:09:06:72:26:14:40:bf:c2:
35:97:11:ad:62:7a:b8:3f:2a:72:98:e2:78:a5:a3:58:0c:bf:
43:4e:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:02 2026 by rpki-client