Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: uAuvehblveA3KJNdyf6R/WFYnFmNgGJREVUorNelJaA=
Subject key identifier: 0B:BE:1D:3F:EE:B8:42:7E:B8:10:00:AF:D3:24:76:68:55:8F:2E:A4
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019D98F470896F5B096B160F18DAD701B66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0DA6
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: yeQlSi1FBxDBQRrdXB6kyRTyYBRlbOG3dWf+LWIFcyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:70:89:6f:5b:09:6b:16:0f:18:da:d7:01:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=0bbe1d3feeb8427eb81000afd3247668558f2ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:b3:b1:8e:84:79:bf:fd:ea:21:20:84:13:
77:b4:56:a5:3b:5f:07:83:f9:fb:d9:df:ec:c5:4f:
02:4d:7b:2c:7b:a9:62:2e:fd:fb:31:08:e6:b3:1c:
7d:7f:f8:33:a9:7d:1d:e6:21:1e:9b:38:f5:7a:a1:
c7:9a:3e:2d:cd:c7:eb:4a:8a:b9:eb:1c:99:b6:c4:
71:35:4a:05:5c:a2:d0:a9:fd:b0:86:41:76:09:cd:
56:d1:48:76:31:87:a4:96:0b:8f:8a:1b:11:12:b0:
0e:60:b6:f0:f6:c4:a0:80:dd:3b:9c:c4:cc:c3:82:
14:41:46:60:7e:72:74:32:5c:f0:b1:b4:6e:b6:24:
f0:74:fe:cc:a7:53:09:b0:37:4b:40:b3:dc:f7:7d:
8b:0f:65:a3:c5:e9:51:b6:00:86:97:19:d3:66:40:
b2:56:7d:97:b3:ed:66:05:51:b4:06:f6:0b:32:e1:
4d:7e:1c:13:1e:a3:62:f0:e8:ff:4d:f4:a1:77:fd:
50:e6:b2:a3:68:65:e7:f0:e5:25:3a:91:86:5c:5a:
2f:63:5f:c5:6d:52:64:45:32:a7:7a:7c:95:c4:44:
da:bf:a1:5a:2a:71:1e:e4:17:d5:a1:f8:19:0f:62:
a5:e1:82:2d:d1:28:68:54:ea:0e:47:33:39:42:5e:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:1D:3F:EE:B8:42:7E:B8:10:00:AF:D3:24:76:68:55:8F:2E:A4
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:da:fc:9f:15:f8:35:5a:13:d8:9b:73:e4:ea:4d:a2:9e:0f:
f9:a1:bc:0f:45:f5:a4:44:42:e9:9e:93:84:b9:24:5b:0e:d6:
1b:98:e0:ce:42:84:27:9a:0f:02:60:c0:49:5d:3e:d4:f1:5e:
a8:52:f9:9d:6b:cc:1f:2f:88:c8:c2:f0:e8:7c:47:7a:83:8d:
11:fc:52:f3:1c:e8:e2:e4:7b:eb:fb:4c:76:39:21:23:78:6f:
78:7d:d9:e3:db:d7:5b:31:cd:76:ad:bd:57:df:be:d9:d6:ee:
af:7a:27:51:89:35:f0:ae:91:72:70:ca:bc:4f:67:de:59:6c:
f5:7c:04:24:eb:1b:7a:25:8d:a1:40:81:71:0d:22:3a:b1:de:
df:3b:13:5f:d4:da:a9:02:76:bd:d8:2a:16:aa:8d:d6:46:b4:
a0:40:9f:6c:5e:4d:1f:ff:5b:2c:78:1d:33:e6:03:97:cb:30:
3f:c8:67:fc:ac:38:62:e0:e3:a5:08:e8:8a:cf:c0:f7:f0:2c:
84:b2:19:fe:b1:0a:24:c3:f0:56:d0:b7:1b:0c:83:07:03:2d:
74:8c:03:5e:4d:87:f8:68:e1:8e:b7:02:50:87:65:9e:a8:9b:
96:99:a9:5d:6e:4d:f1:00:ea:aa:18:d9:68:42:81:47:84:67:
dd:6f:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:09 2026 by rpki-client