Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: R2Ck6WEmQ/LUZBtGWppRMr/mT4wADqReYoEJcn5FzPc=
Subject key identifier: 53:EC:B7:55:7C:73:A6:33:11:9C:A2:C8:01:B5:68:35:CA:37:87:E7
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019CAB6B0B682F7C8AA1750CAC098D4EF98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0D2B
Signing time: Sun 01 Mar 2026 22:00:44 +0000
Manifest this update: Sun 01 Mar 2026 22:00:44 +0000
Manifest next update: Mon 02 Mar 2026 22:00:44 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: HI7dU1RYKZjiJZ8XEKorD1rFyicxjxKn2zSh68fBqEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0b:68:2f:7c:8a:a1:75:0c:ac:09:8d:4e:f9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Mar 1 22:00:44 2026 GMT
Not After : Mar 2 22:00:44 2026 GMT
Subject: CN=53ecb7557c73a633119ca2c801b56835ca3787e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:0c:88:8f:7c:8b:6e:a1:80:64:13:3d:67:
93:46:46:0f:c3:50:3e:64:97:97:c6:3d:93:8c:02:
45:58:c6:36:cd:14:b3:09:73:5e:da:ba:64:b3:f1:
72:91:62:b2:b6:a2:fb:97:aa:24:2c:20:18:70:47:
40:0c:b3:a6:7d:67:9d:d3:4c:89:d1:43:d7:26:38:
af:f5:52:bf:96:09:50:74:23:7f:45:fc:b1:d9:14:
e6:4d:06:06:60:2c:5d:96:cb:33:da:1c:58:4e:a3:
5c:bf:76:da:fd:53:5c:da:c4:c7:f7:3c:a7:74:1d:
52:a9:5f:80:2a:2e:21:31:f2:6f:95:59:60:92:e5:
34:0a:3a:c5:33:a2:31:bf:01:cd:1c:ca:49:8f:67:
55:0b:4b:ca:6e:98:a8:3a:e9:77:47:06:1a:96:20:
b3:65:ec:94:13:83:ca:55:f7:43:5d:11:a1:2b:a6:
10:a6:87:23:37:7c:93:05:9f:f4:87:19:5d:54:0e:
77:ea:d7:06:df:21:d4:9d:20:be:c1:34:da:a5:2b:
66:0f:ac:ae:fb:ea:dd:2b:50:79:e7:02:1a:8e:25:
b5:0c:45:71:45:1f:df:94:0a:40:f1:49:03:3b:72:
a5:f0:93:a8:65:50:09:54:08:f7:eb:30:6c:e0:8e:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:B7:55:7C:73:A6:33:11:9C:A2:C8:01:B5:68:35:CA:37:87:E7
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:76:7e:21:9f:70:37:20:f6:0a:73:04:9a:19:30:1c:f7:04:
a8:19:0f:9b:bb:e9:4e:db:b7:f3:a1:c2:4d:44:bf:ce:d1:3e:
b2:d9:5c:f1:36:f9:9f:d8:9e:96:e6:12:61:b8:23:d5:fc:a1:
84:80:12:f7:4f:4b:f7:fb:64:8d:36:07:3f:2c:4d:b2:41:5b:
0a:80:15:ac:2b:ac:1c:e2:74:89:27:41:a4:ce:07:9c:bd:8a:
60:fb:67:9e:43:70:f4:1f:d3:d1:ed:bb:3b:1f:6a:f2:7d:ce:
8f:76:e7:35:d9:6b:ec:c9:98:dc:5c:86:29:ce:e4:cc:93:d8:
d5:97:b2:c5:50:2f:1a:e6:81:fe:79:de:69:6f:b0:f4:9a:5c:
fc:66:20:45:5f:c8:d5:1c:7b:98:4f:15:18:3f:b1:17:9f:f1:
0f:11:49:b9:20:55:a4:dc:52:f8:37:d5:12:61:85:40:9c:5f:
5b:3e:c3:42:f0:35:6d:f8:11:39:97:89:56:4b:f0:7c:46:27:
b8:a1:4e:12:6f:da:9d:63:9e:37:39:f4:e1:77:2f:c1:45:02:
0c:6c:31:e3:b1:0c:7e:98:e8:e7:a0:6d:b3:63:18:06:a1:0b:
a7:47:f9:df:a9:05:5b:48:af:89:53:2a:1b:cc:0c:17:67:b2:
36:3f:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:22 2026 by rpki-client