Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: uMMgYrRNqdHf1B61RYqcCLaUWwskNYZTx+aWwqHk3QU=
Subject key identifier: 2E:0D:01:49:C9:28:D9:C4:BA:7E:53:9E:65:8A:81:97:EF:03:CF:2B
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 019F18676EC685E56D9BB12724C308499207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 09EB
Signing time: Tue 30 Jun 2026 12:00:59 +0000
Manifest this update: Tue 30 Jun 2026 12:00:59 +0000
Manifest next update: Wed 01 Jul 2026 12:00:59 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: YhhUuYTs/gjIDSgDmGInSREy0vQbXqUFdPOr2QwATlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:6e:c6:85:e5:6d:9b:b1:27:24:c3:08:49:92:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Jun 30 12:00:59 2026 GMT
Not After : Jul 1 12:00:59 2026 GMT
Subject: CN=2e0d0149c928d9c4ba7e539e658a8197ef03cf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:e0:dd:73:da:52:07:d2:5d:55:37:c4:f6:
99:aa:89:b9:14:0d:7d:6f:ed:13:f6:3d:71:39:a7:
15:4f:00:9b:25:0a:ef:ae:5b:8c:ab:44:bb:a6:9c:
bb:8e:6a:50:12:ac:42:da:d0:34:6a:d1:c3:64:8e:
5c:f8:02:87:af:e3:2f:03:6f:4f:4e:ab:20:29:d2:
0b:ed:8e:e0:c0:cf:24:9c:43:64:7c:ec:8c:c7:ee:
45:cf:e3:c9:4d:81:92:e0:ea:78:d7:96:e3:44:42:
29:49:20:0f:3d:12:f7:78:6d:4a:f1:18:fa:64:52:
a7:f7:1b:53:5c:44:3f:ec:72:59:d1:59:a7:f3:4f:
0b:34:fe:2f:a1:80:dd:db:45:48:5e:44:4e:6d:65:
c3:c8:98:77:9f:a9:33:c4:c4:1a:6b:09:c1:4f:73:
50:ce:91:24:34:93:f9:62:9e:94:93:71:d2:c4:39:
fa:da:1c:7d:e0:4a:48:cb:ec:52:07:b7:61:7d:d5:
5b:4e:db:fe:7e:8e:d7:f1:21:43:0b:83:06:9c:9a:
a5:8c:e6:54:67:fa:79:eb:3d:ea:f6:29:57:90:c2:
c9:f1:c3:7e:28:23:d0:7a:07:b4:b9:9f:d2:f1:dd:
b5:69:20:43:80:d9:28:92:b9:1f:33:cf:a5:71:ab:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0D:01:49:C9:28:D9:C4:BA:7E:53:9E:65:8A:81:97:EF:03:CF:2B
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e0:22:87:7b:f3:14:23:a7:54:fb:12:13:cb:24:5d:b8:76:
c5:53:6a:81:6a:ed:0b:36:38:21:0f:a5:97:2a:66:f4:a5:2e:
9b:28:99:26:ea:5e:3e:b1:40:4f:34:ed:be:5a:62:c9:eb:51:
25:9e:d4:64:99:d4:f8:32:b4:95:70:a0:4f:03:e2:98:5a:15:
ab:75:3e:30:8b:88:b0:44:fc:c6:42:21:7a:85:39:a4:24:c2:
d9:0e:c8:4d:23:a3:22:5c:7f:fc:38:b2:70:2e:8f:93:17:54:
2f:06:1a:a3:44:f0:f2:63:74:fc:94:ac:fb:b7:17:67:7f:b6:
95:1a:4f:70:ca:bc:ca:10:2e:ea:4c:89:2e:ff:62:00:31:c0:
0e:6e:63:9a:be:7f:f6:fe:f5:8d:7b:65:e7:db:46:ad:ae:66:
97:ce:0d:3a:9b:8b:6a:90:4c:d0:98:84:59:e4:59:b7:90:6a:
6f:ba:77:6b:6f:e1:36:a0:74:51:bb:12:2f:7b:79:19:59:9f:
19:54:dd:71:08:c2:c9:98:8d:41:02:d2:48:b4:70:f2:a6:bd:
ec:9f:e6:8a:fb:ba:13:a6:54:53:0a:77:d1:69:51:0a:2c:c2:
0c:65:a6:f4:80:68:d1:d5:03:6a:55:95:b1:b5:52:1d:03:ad:
0b:d5:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:19:51 2026 by rpki-client