Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: tYqkF5bZrUF9ZAWFiCumOL9ir2c+yXsUK+0bbDhAV7c=
Subject key identifier: 37:DF:40:4A:98:43:CA:1C:62:42:3C:FC:58:48:F8:C7:01:B8:E1:95
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019DA48B097BCE7C4DD1695D19A718381DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 185A
Signing time: Sun 19 Apr 2026 07:01:08 +0000
Manifest this update: Sun 19 Apr 2026 07:01:08 +0000
Manifest next update: Mon 20 Apr 2026 07:01:08 +0000
Files and hashes: 1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: ywsSqGRZPxsJfgmfucvAbml+plZpJmkHedbtBx/pSBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:09:7b:ce:7c:4d:d1:69:5d:19:a7:18:38:1d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Apr 19 07:01:08 2026 GMT
Not After : Apr 20 07:01:08 2026 GMT
Subject: CN=37df404a9843ca1c62423cfc5848f8c701b8e195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:f4:f7:98:75:cd:30:01:37:c0:ab:b3:33:
ea:56:eb:eb:dc:70:00:54:10:af:45:88:a7:a0:d6:
ff:7f:f4:e3:c3:b6:da:9c:b0:fd:96:a5:ce:92:ba:
e2:39:38:4a:24:1a:11:50:19:4d:7b:4e:7a:81:b4:
a5:d7:8f:c3:13:e1:45:f4:84:4a:49:b4:77:d6:ba:
15:20:05:d0:8c:2b:cc:2e:2d:5b:d1:ea:3c:85:de:
49:72:98:0d:ae:78:3e:e7:34:81:12:56:f9:0b:3d:
84:20:48:7f:7b:1f:f7:02:fa:ad:33:24:1b:4f:b3:
9a:bd:4c:48:c1:de:c1:9e:a5:96:79:5a:f6:e8:24:
f7:b5:ab:77:eb:73:4b:db:ae:1b:21:6e:be:b8:88:
84:f2:4a:fa:2e:cd:8f:2a:62:f9:c2:c1:22:54:7e:
52:6f:20:59:af:c5:de:1f:43:7a:8e:10:33:1f:85:
da:27:5c:d2:7f:79:6f:4e:c3:ed:13:69:25:5e:88:
a3:f3:89:67:ef:1b:20:1a:a3:e1:24:9f:15:43:f6:
3e:1a:4c:6b:45:31:3d:7d:50:d5:07:2a:0d:1f:4d:
6c:64:fc:6f:71:80:1d:43:b2:df:de:a0:31:66:3e:
9f:8e:f9:1b:b0:b9:be:18:a1:fc:dd:a3:0c:03:9d:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:40:4A:98:43:CA:1C:62:42:3C:FC:58:48:F8:C7:01:B8:E1:95
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d9:64:bc:2f:ae:02:26:3d:5c:84:8a:ee:9c:22:e6:ce:84:
c5:29:ba:91:ad:64:bc:04:30:2a:59:53:32:12:76:fb:ba:18:
30:33:52:66:cc:34:80:87:37:2a:82:72:2e:42:9c:d1:d7:0e:
de:2b:59:cf:2a:c0:1c:38:65:fe:86:4e:f6:2a:9a:65:ac:59:
0e:16:9b:9a:39:fd:06:06:b6:d5:53:bb:70:80:b5:31:da:d4:
03:fa:1e:16:26:21:39:ca:9c:c7:1f:b8:e2:bb:4e:52:c7:03:
4d:f8:5e:a0:75:2c:fd:d4:33:4f:99:dd:6f:69:29:c9:82:40:
dc:9c:16:35:fa:81:d0:7e:37:a7:fb:ad:6a:70:04:a1:d9:46:
e0:ef:97:57:31:de:8f:ad:65:0b:59:40:23:3e:f0:dd:74:8f:
09:0d:e8:6c:5c:c8:3d:71:96:5b:cb:25:92:48:46:13:16:8d:
41:85:15:cd:f9:6b:e3:33:71:6f:79:0e:d7:e5:f3:b3:63:4e:
1c:b1:81:e2:15:84:cb:a7:3c:50:05:00:e1:03:69:e4:52:1b:
a7:bc:6c:09:82:95:bf:0e:b7:07:85:3e:2d:bb:f8:99:b2:f6:
86:f6:27:45:28:58:ce:38:52:a0:f9:f0:ca:c2:b9:b5:49:67:
cc:47:bb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiwl7znxN0WldGacYOB2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZTdmZmU4ODU4Mzg3ZWQxYjNhN2VjYTc2MjA1ZWYw
ZTIxZjYwHhcNMjYwNDE5MDcwMTA4WhcNMjYwNDIwMDcwMTA4WjAzMTEwLwYDVQQD
EygzN2RmNDA0YTk4NDNjYTFjNjI0MjNjZmM1ODQ4ZjhjNzAxYjhlMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzT095h1zTABN8CrszPqVuvr3HAA
VBCvRYinoNb/f/Tjw7banLD9lqXOkrriOThKJBoRUBlNe056gbSl14/DE+FF9IRK
SbR31roVIAXQjCvMLi1b0eo8hd5JcpgNrng+5zSBElb5Cz2EIEh/ex/3AvqtMyQb
T7OavUxIwd7BnqWWeVr26CT3tat363NL264bIW6+uIiE8kr6Ls2PKmL5wsEiVH5S
byBZr8XeH0N6jhAzH4XaJ1zSf3lvTsPtE2klXoij84ln7xsgGqPhJJ8VQ/Y+Gkxr
RTE9fVDVByoNH01sZPxvcYAdQ7Lf3qAxZj6fjvkbsLm+GKH83aMMA525pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDffQEqYQ8ocYkI8/FhI+McBuOGVMB8GA1UdIwQY
MBaAFI8/nn/+iFg4ftGzp+ynYgXvDiH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMt
ZTdhY2Y5NDFmMzc1LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMtZTdhY2Y5NDFmMzc1
LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitlkvC+u
AiY9XISK7pwi5s6ExSm6ka1kvAQwKllTMhJ2+7oYMDNSZsw0gIc3KoJyLkKc0dcO
3itZzyrAHDhl/oZO9iqaZaxZDhabmjn9Bga21VO7cIC1MdrUA/oeFiYhOcqcxx+4
4rtOUscDTfheoHUs/dQzT5ndb2kpyYJA3JwWNfqB0H43p/utanAEodlG4O+XVzHe
j61lC1lAIz7w3XSPCQ3obFzIPXGWW8slkkhGExaNQYUVzflr4zNxb3kO1+Xzs2NO
HLGB4hWEy6c8UAUA4QNp5FIbp7xsCYKVvw63B4U+Lbv4mbL2hvYnRShYzjhSoPnw
ysK5tUlnzEe7Gw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:15 2026 by rpki-client