Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: 6fnBl4ACZe76v4GfFcTZ264GoezHplL+l3FKn0xpLVA=
Subject key identifier: 32:5E:E0:15:88:6E:03:B5:64:D1:8D:BC:D9:FC:58:6C:D8:20:3A:E1
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 01A0C9D9010F943CCF9DE52D3DEE56359F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 16:00:36 +0000
Manifest this update: Tue 22 Sep 2026 16:00:36 +0000
Manifest next update: Wed 23 Sep 2026 16:00:36 +0000
Files and hashes: 1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: THRSkCzZlsMkjO8Flsp3jYnd/vxs8GhoVOrachWpqZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:01:0f:94:3c:cf:9d:e5:2d:3d:ee:56:35:9f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Sep 22 16:00:36 2026 GMT
Not After : Sep 23 16:00:36 2026 GMT
Subject: CN=325ee015886e03b564d18dbcd9fc586cd8203ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:4d:58:2f:83:bf:06:c7:ce:6f:a6:ce:41:
aa:e9:cf:6b:91:e6:67:72:c3:c6:69:e2:ac:73:19:
08:cc:02:ec:81:b3:6e:eb:53:8d:90:12:b1:ff:d6:
c6:af:72:23:51:e1:cd:3b:dc:10:08:e4:17:e9:62:
98:a1:58:17:bd:6f:04:10:fd:85:18:0a:b8:81:1c:
6f:d1:e1:73:2f:cd:36:f7:af:86:af:33:43:ef:af:
b5:30:57:53:4b:c6:ee:ed:fd:64:b1:03:09:d8:93:
f1:f3:b7:08:54:64:e9:16:b2:2f:29:cd:14:33:90:
13:dd:42:54:f8:b2:e3:a0:35:fd:c8:c6:e5:a5:5c:
29:a3:83:ec:86:32:7f:64:2a:ea:1c:ef:92:4b:a3:
f6:39:3e:ad:6b:51:01:62:49:47:cc:c4:9d:a9:06:
e0:90:de:d9:20:b3:cb:91:7d:87:57:f4:7f:f1:e6:
0e:72:d6:9f:70:39:ff:26:a1:79:87:a7:e0:d6:b2:
df:4c:db:4f:de:0c:95:1a:83:3e:32:44:69:ed:d6:
f8:c8:1f:e6:0c:36:c1:be:5f:27:ba:09:47:cc:f2:
83:56:9d:9c:55:f4:f6:12:32:ab:2d:b9:1f:7d:e8:
1a:5e:47:15:77:1b:27:43:91:c5:38:44:28:a7:e7:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5E:E0:15:88:6E:03:B5:64:D1:8D:BC:D9:FC:58:6C:D8:20:3A:E1
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:55:11:06:76:2b:58:0b:3a:7b:5f:d6:f6:20:fa:9e:f0:f3:
15:c0:88:a7:4f:87:4a:be:5e:6a:fb:b5:08:6a:5d:81:55:c4:
85:f6:5b:7a:af:a9:23:c1:af:05:23:e5:e0:35:c9:90:be:63:
46:a2:77:7f:07:4f:2a:bf:e6:3f:e1:d5:4f:e3:ef:5e:ac:5b:
20:fa:d6:4e:bd:40:3b:0c:26:cd:64:5a:38:39:a7:6c:c5:4e:
b8:8e:ce:62:4c:92:f6:10:cf:b3:9c:f7:bb:e9:23:cb:58:31:
8d:3b:49:9e:d1:52:4c:15:0f:a3:51:ad:67:d6:a2:28:ff:c1:
b8:d4:9e:b7:bf:b7:44:04:a8:7c:ce:37:3a:32:82:cc:3d:ec:
c4:9e:e7:41:9c:5f:62:92:16:21:ac:bf:bd:ef:f8:04:18:ae:
af:5d:a5:f3:59:78:8a:99:ca:53:f8:88:78:fc:d9:47:06:70:
82:3e:f2:71:da:55:8a:56:36:a3:bc:14:02:12:e5:0e:27:77:
80:92:fa:65:ec:8f:70:dd:a3:ce:1b:0c:75:4f:c5:b0:53:1c:
c6:d9:5d:9e:51:c1:44:a5:37:47:58:85:f5:3d:73:1c:dc:5d:
32:f9:f5:58:3a:b5:d8:e7:5d:19:5b:a5:dd:df:35:9a:18:3d:
95:c6:3a:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2QEPlDzPneUtPe5WNZ9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZTdmZmU4ODU4Mzg3ZWQxYjNhN2VjYTc2MjA1ZWYw
ZTIxZjYwHhcNMjYwOTIyMTYwMDM2WhcNMjYwOTIzMTYwMDM2WjAzMTEwLwYDVQQD
EygzMjVlZTAxNTg4NmUwM2I1NjRkMThkYmNkOWZjNTg2Y2Q4MjAzYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+BNWC+DvwbHzm+mzkGq6c9rkeZn
csPGaeKscxkIzALsgbNu61ONkBKx/9bGr3IjUeHNO9wQCOQX6WKYoVgXvW8EEP2F
GAq4gRxv0eFzL80296+GrzND76+1MFdTS8bu7f1ksQMJ2JPx87cIVGTpFrIvKc0U
M5AT3UJU+LLjoDX9yMblpVwpo4PshjJ/ZCrqHO+SS6P2OT6ta1EBYklHzMSdqQbg
kN7ZILPLkX2HV/R/8eYOctafcDn/JqF5h6fg1rLfTNtP3gyVGoM+MkRp7db4yB/m
DDbBvl8nuglHzPKDVp2cVfT2EjKrLbkffegaXkcVdxsnQ5HFOEQop+cHPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJe4BWIbgO1ZNGNvNn8WGzYIDrhMB8GA1UdIwQY
MBaAFI8/nn/+iFg4ftGzp+ynYgXvDiH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMt
ZTdhY2Y5NDFmMzc1LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMtZTdhY2Y5NDFmMzc1
LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlURBnYr
WAs6e1/W9iD6nvDzFcCIp0+HSr5eavu1CGpdgVXEhfZbeq+pI8GvBSPl4DXJkL5j
RqJ3fwdPKr/mP+HVT+PvXqxbIPrWTr1AOwwmzWRaODmnbMVOuI7OYkyS9hDPs5z3
u+kjy1gxjTtJntFSTBUPo1GtZ9aiKP/BuNSet7+3RASofM43OjKCzD3sxJ7nQZxf
YpIWIay/ve/4BBiur12l81l4ipnKU/iIePzZRwZwgj7ycdpVilY2o7wUAhLlDid3
gJL6ZeyPcN2jzhsMdU/FsFMcxtldnlHBRKU3R1iF9T1zHNxdMvn1WDq12OddGVul
3d81mhg9lcY6Ww==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:57 2026 by rpki-client