Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: eDZ6cdS5lrx08R6yRD3Kr/+zLZo8VR7YulA0ticC1UE=
Subject key identifier: DB:D8:6A:7D:23:CE:76:CF:FB:04:61:27:E0:CD:39:5A:FD:78:D0:9E
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 01A004028D970D93AFA944ACF8481EE44312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0A65
Signing time: Sat 15 Aug 2026 06:01:11 +0000
Manifest this update: Sat 15 Aug 2026 06:01:11 +0000
Manifest next update: Sun 16 Aug 2026 06:01:11 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: A4P+qDOCinrsI9P2O2IRRX69UJEU/zEiUj6rUcZFgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:8d:97:0d:93:af:a9:44:ac:f8:48:1e:e4:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Aug 15 06:01:11 2026 GMT
Not After : Aug 16 06:01:11 2026 GMT
Subject: CN=dbd86a7d23ce76cffb046127e0cd395afd78d09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:f8:75:33:f0:cd:fc:64:f2:9f:5d:86:29:
88:0f:0f:23:7a:c3:36:e2:f7:ed:1f:32:ff:16:f7:
2d:2f:8f:ec:57:78:ef:1b:9a:8c:b7:23:e1:67:60:
5e:a2:9a:a3:e4:5f:ff:39:05:3a:ff:9f:51:ef:c0:
35:ee:67:98:e4:b2:86:87:fd:80:ca:89:d6:e2:3c:
db:92:75:a6:74:32:3e:9d:cd:a3:c7:e4:a0:10:74:
a9:6c:0c:55:64:68:3b:b5:21:93:52:11:ef:0f:3d:
31:76:05:1b:0c:20:f8:f9:da:d5:ea:c1:ca:87:a7:
f2:96:a0:55:83:03:c2:30:b7:0c:24:a5:99:57:7d:
f3:65:37:e7:ca:3a:87:0a:9c:bb:86:05:0e:4b:6f:
e9:22:c9:51:92:f5:d6:d8:85:47:05:1c:03:79:6a:
4f:36:9a:1d:81:76:c2:90:7b:a0:4a:2c:fb:6c:ea:
bc:ce:40:da:59:78:52:22:e3:2f:ad:bd:22:aa:89:
4c:38:3b:f4:e6:c9:1e:ec:b0:c9:30:f4:ae:d2:51:
9a:ca:da:d0:2c:8c:da:83:35:c2:fd:db:2c:8b:3b:
c8:d0:c0:53:57:a2:2d:36:ce:f1:3b:c0:03:04:20:
56:70:54:65:8a:df:c5:47:77:e1:62:7a:a6:28:1f:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:6A:7D:23:CE:76:CF:FB:04:61:27:E0:CD:39:5A:FD:78:D0:9E
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:81:d8:22:54:bc:ea:42:55:37:2b:34:c2:69:79:fa:a7:14:
10:87:01:16:eb:4e:f6:55:33:2c:43:45:41:a9:37:2c:be:bb:
0a:51:39:82:59:94:01:bb:f4:80:b4:59:ae:59:b1:cc:58:bc:
c5:51:b8:7f:ee:c2:5a:a6:6e:97:17:d3:02:19:8e:3b:73:c0:
9f:a5:07:19:f3:6f:32:ef:64:b1:60:08:c3:99:ae:b7:6a:71:
2d:d9:02:40:52:57:38:e4:c8:11:f8:02:5f:7a:27:ea:84:b0:
71:55:64:b5:63:ec:7d:88:fc:3e:4a:95:ae:cd:c6:cf:83:23:
3a:45:c0:1b:b5:43:cc:3b:d1:b0:29:25:5b:17:0c:ed:d3:36:
54:57:66:57:e9:db:31:3f:2c:1a:66:f6:ef:8d:fa:8a:c4:a4:
b7:1e:8c:fa:60:90:ef:89:51:8d:fe:99:8b:e5:a1:f0:e8:9d:
64:8d:2b:10:d0:9d:60:5a:95:30:85:bc:b5:2e:af:99:1d:c6:
fb:50:3a:4f:e3:22:e8:8c:23:de:2d:53:51:af:b6:08:e3:af:
a3:50:1f:a7:06:47:75:83:81:d6:ee:51:17:3f:41:92:c1:d5:
7f:e0:0a:6f:56:ff:5c:c3:2c:6a:43:1a:8d:74:5b:25:9a:a4:
64:5a:dd:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAEAo2XDZOvqUSs+Ege5EMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1
Mjk0NTMwHhcNMjYwODE1MDYwMTExWhcNMjYwODE2MDYwMTExWjAzMTEwLwYDVQQD
EyhkYmQ4NmE3ZDIzY2U3NmNmZmIwNDYxMjdlMGNkMzk1YWZkNzhkMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt074dTPwzfxk8p9dhimIDw8jesM2
4vftHzL/FvctL4/sV3jvG5qMtyPhZ2Beopqj5F//OQU6/59R78A17meY5LKGh/2A
yonW4jzbknWmdDI+nc2jx+SgEHSpbAxVZGg7tSGTUhHvDz0xdgUbDCD4+drV6sHK
h6fylqBVgwPCMLcMJKWZV33zZTfnyjqHCpy7hgUOS2/pIslRkvXW2IVHBRwDeWpP
NpodgXbCkHugSiz7bOq8zkDaWXhSIuMvrb0iqolMODv05ske7LDJMPSu0lGaytrQ
LIzagzXC/dssizvI0MBTV6ItNs7xO8ADBCBWcFRlit/FR3fhYnqmKB8e9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvYan0jznbP+wRhJ+DNOVr9eNCeMB8GA1UdIwQY
MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt
Nzk5NWJmNjA4MDNiLzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi
LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYHYIlS8
6kJVNys0wml5+qcUEIcBFutO9lUzLENFQak3LL67ClE5glmUAbv0gLRZrlmxzFi8
xVG4f+7CWqZulxfTAhmOO3PAn6UHGfNvMu9ksWAIw5mut2pxLdkCQFJXOOTIEfgC
X3on6oSwcVVktWPsfYj8PkqVrs3Gz4MjOkXAG7VDzDvRsCklWxcM7dM2VFdmV+nb
MT8sGmb27436isSktx6M+mCQ74lRjf6Zi+Wh8OidZI0rENCdYFqVMIW8tS6vmR3G
+1A6T+Mi6Iwj3i1TUa+2COOvo1AfpwZHdYOB1u5RFz9BksHVf+AKb1b/XMMsakMa
jXRbJZqkZFrdxg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:13 2026 by rpki-client