Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: vCSyzsiGc5c0OLlLM/mIfJfaeYUFFnxITNXT7Q6D+bc=
Subject key identifier: 2E:6E:20:CF:C5:44:F6:86:CF:F7:76:5E:3A:E2:C9:9A:29:E7:ED:39
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 019D3940B36A99019D057D43DA9E7BB32A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 0835
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: WkT4KgurkGkiK6buDbp8jQwN9_M.roa (hash: LR/+wKI0XgbxooBg1c5uhj6z6Vhw1IQPk19X/TJb42Y=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: 0+xgShTR54YWs9Y6RbmFN4mCk93T3bx49VP0TXck8kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b3:6a:99:01:9d:05:7d:43:da:9e:7b:b3:2a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=2e6e20cfc544f686cff7765e3ae2c99a29e7ed39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:bf:41:6a:1d:9e:5d:30:50:2b:8b:cb:6a:
c2:e8:d4:6a:cf:6b:41:f3:ff:64:71:10:de:73:91:
bc:c4:aa:a3:ba:d3:18:5b:66:90:c8:8b:fb:10:45:
af:1f:b0:eb:81:aa:55:b8:98:d6:09:e8:6c:b2:19:
08:c6:16:80:91:a4:07:f1:27:af:aa:a2:c8:a0:48:
86:91:b6:36:24:eb:55:d8:3e:cb:16:15:ee:94:30:
94:42:78:98:75:ad:aa:e1:c7:2c:df:07:06:eb:06:
e3:ff:dd:03:e9:65:5d:8d:d1:da:40:4b:73:16:6f:
a7:71:b3:8b:ba:81:92:93:0e:14:eb:09:49:9f:6d:
2c:76:e8:92:b6:6c:21:f1:1c:17:5b:36:d3:16:59:
b6:4c:c5:d4:8a:27:13:fe:1c:fb:26:a4:8a:bd:66:
13:be:67:f8:d1:30:3a:18:92:d1:a0:d7:73:13:19:
07:10:89:d9:36:86:9a:12:04:75:dd:43:00:e4:33:
d5:6f:27:32:a9:96:66:82:ae:6e:84:4a:74:74:b2:
c3:c4:87:0a:af:1b:61:bf:6a:fe:e6:05:c0:fd:2d:
83:90:0b:ca:92:01:09:43:56:e4:b6:f0:4b:2b:7d:
50:3c:43:29:b1:f5:14:eb:15:ec:8f:37:58:54:28:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:20:CF:C5:44:F6:86:CF:F7:76:5E:3A:E2:C9:9A:29:E7:ED:39
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a0:ee:ac:b2:ad:94:ca:ad:e7:57:2d:53:f5:8f:e4:8b:cf:
7c:d7:64:3d:66:65:5f:8c:c5:b2:66:c8:98:37:96:54:42:b5:
95:73:dc:a5:34:63:cf:13:74:87:f5:99:ea:a9:e7:28:43:07:
21:ba:2f:26:59:f8:ab:90:ca:79:eb:ad:06:6c:46:5a:64:14:
f3:14:f9:7c:50:f7:8a:d4:a0:39:a7:5f:ab:6f:cc:d7:d3:37:
02:02:02:e6:ef:1b:25:f8:df:bd:e8:13:d1:4b:37:37:bd:2b:
c4:5d:1a:31:04:f0:d1:eb:7b:bf:46:7d:fe:9c:14:92:41:dd:
02:bb:3f:46:d9:be:83:09:df:99:ff:9a:11:e6:21:ef:8f:cb:
d6:ea:7e:ba:6f:50:1c:94:fa:be:50:ad:01:b7:0c:d5:81:b3:
9b:a3:9f:f1:1f:74:82:8c:c1:e8:5c:5f:68:0d:dc:12:2d:af:
cb:50:76:49:9b:26:f9:2f:25:15:bd:0a:ef:25:b1:42:74:9c:
c1:db:95:4a:30:9a:e5:dc:dd:e5:ab:de:8c:52:0b:6e:30:52:
2b:b9:9b:31:5e:86:a0:6a:d3:13:b7:1a:93:1b:d6:4f:99:71:
a2:b3:77:f5:02:8d:46:9b:d4:9f:ef:c1:07:51:b3:ac:e6:ee:
39:a7:bb:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QLNqmQGdBX1D2p57syqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy
NzEwYWIwHhcNMjYwMzI5MTEwMDM0WhcNMjYwMzMwMTEwMDM0WjAzMTEwLwYDVQQD
EygyZTZlMjBjZmM1NDRmNjg2Y2ZmNzc2NWUzYWUyYzk5YTI5ZTdlZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW6/QWodnl0wUCuLy2rC6NRqz2tB
8/9kcRDec5G8xKqjutMYW2aQyIv7EEWvH7DrgapVuJjWCehsshkIxhaAkaQH8Sev
qqLIoEiGkbY2JOtV2D7LFhXulDCUQniYda2q4ccs3wcG6wbj/90D6WVdjdHaQEtz
Fm+ncbOLuoGSkw4U6wlJn20sduiStmwh8RwXWzbTFlm2TMXUiicT/hz7JqSKvWYT
vmf40TA6GJLRoNdzExkHEInZNoaaEgR13UMA5DPVbycyqZZmgq5uhEp0dLLDxIcK
rxthv2r+5gXA/S2DkAvKkgEJQ1bktvBLK31QPEMpsfUU6xXsjzdYVCgpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5uIM/FRPaGz/d2XjriyZop5+05MB8GA1UdIwQY
MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt
YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz
LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaDurLKt
lMqt51ctU/WP5IvPfNdkPWZlX4zFsmbImDeWVEK1lXPcpTRjzxN0h/WZ6qnnKEMH
IbovJln4q5DKeeutBmxGWmQU8xT5fFD3itSgOadfq2/M19M3AgIC5u8bJfjfvegT
0Us3N70rxF0aMQTw0et7v0Z9/pwUkkHdArs/Rtm+gwnfmf+aEeYh74/L1up+um9Q
HJT6vlCtAbcM1YGzm6Of8R90gozB6FxfaA3cEi2vy1B2SZsm+S8lFb0K7yWxQnSc
wduVSjCa5dzd5avejFILbjBSK7mbMV6GoGrTE7cakxvWT5lxorN39QKNRpvUn+/B
B1GzrObuOae7QQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:43 2026 by rpki-client