Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: a6Y7W4+soGHWaVO2IZLDjMJcPdt+15XMh7xFYNQA1FU=
Subject key identifier: 87:A3:E8:0B:FC:BD:0C:A4:59:03:8B:8F:2B:3F:41:1E:CD:92:5A:F9
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 01A0C5FBDA88C11906C55A3DA11C6E6FE2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0F4B
Signing time: Mon 21 Sep 2026 22:00:11 +0000
Manifest this update: Mon 21 Sep 2026 22:00:11 +0000
Manifest next update: Tue 22 Sep 2026 22:00:11 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: ofMXhAtrgsRfsxlA7LRTE6FOcXRJ8ot/wYpKKrXTZIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:da:88:c1:19:06:c5:5a:3d:a1:1c:6e:6f:e2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Sep 21 22:00:11 2026 GMT
Not After : Sep 22 22:00:11 2026 GMT
Subject: CN=87a3e80bfcbd0ca459038b8f2b3f411ecd925af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:31:e2:a8:89:19:d6:82:b7:35:ae:fa:66:
d8:94:d4:db:69:f8:e9:9a:0a:91:57:b7:94:e6:29:
86:56:fa:91:a5:05:32:f5:fc:80:03:83:3c:08:f1:
b0:3a:00:2f:96:b9:e1:8f:11:c4:44:61:86:5a:5d:
d4:1b:cb:24:78:25:83:f2:22:46:8f:f7:e9:ca:99:
a1:5a:7d:3d:e2:f6:e5:37:4a:9a:f6:b4:d0:58:f6:
8b:04:6d:3c:6e:de:3f:9f:ce:b3:cd:a0:cc:77:18:
f1:51:31:65:cc:5c:8d:42:0e:75:a4:48:78:ac:08:
cd:ab:b4:c7:86:b9:71:64:30:24:7e:26:ee:ff:2a:
9d:3e:6d:58:0a:25:27:21:be:e2:68:3c:ef:0f:c8:
10:24:cb:43:40:4e:b9:de:7f:16:fc:74:52:8c:79:
70:24:69:40:9e:85:06:b8:f4:95:1b:91:21:de:60:
48:25:00:0e:92:90:a2:2a:ed:01:59:5c:40:4a:f7:
ad:38:2c:e6:99:71:c0:2d:e9:86:6d:31:17:94:0c:
28:2c:c5:fd:f0:70:06:8c:93:1a:65:de:2b:d5:7f:
6b:c6:87:a1:ac:a7:64:d9:f2:d4:f6:40:d1:76:ef:
f2:44:f5:a5:3b:12:36:b0:da:2c:a7:19:e9:cc:73:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A3:E8:0B:FC:BD:0C:A4:59:03:8B:8F:2B:3F:41:1E:CD:92:5A:F9
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d3:a2:ff:04:e7:8b:98:52:b4:60:46:eb:e3:4d:3e:79:c8:
11:b1:a6:fc:cc:46:5e:8b:b7:3c:b0:e2:51:d7:97:09:65:9b:
6f:e9:65:3e:40:b5:1b:07:9b:9a:93:6c:fe:96:33:22:82:32:
ac:22:d3:b9:7a:cb:7e:db:a7:53:32:a9:96:f6:32:49:39:46:
72:51:78:26:67:2c:a2:9c:21:eb:79:44:c4:43:46:67:e5:5f:
57:c1:35:b7:ea:09:55:38:de:00:06:2e:19:fc:2c:4a:de:c8:
0f:97:f4:aa:62:7c:ad:fb:51:eb:22:8d:27:87:e7:45:33:d4:
47:d5:56:e1:84:91:40:91:4f:e2:97:2c:dd:56:6f:4b:9a:73:
d5:c0:87:ed:90:dd:fd:eb:e0:d2:94:01:c8:13:22:09:8e:8e:
93:29:7e:37:3a:6a:ba:91:2c:58:bc:c0:53:c4:76:42:df:dc:
e7:a0:00:91:1f:82:31:8f:4c:f7:7d:fc:fb:ed:ab:60:8f:be:
ed:b4:80:de:28:69:54:2f:52:7c:66:c2:1e:26:fa:2a:3a:56:
da:2a:2b:4a:4f:c1:0d:37:c0:d4:72:63:0e:f2:50:e8:5c:2f:
61:29:eb:91:0c:e3:fd:f7:76:c8:ce:c7:78:78:86:38:1a:a8:
b3:21:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:09:23 2026 by rpki-client