Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: YnwOZv4gA0KeOUFuDx3p8Kmh7wBl1cF9ZEjhirX8rGM=
Subject key identifier: 78:9F:0E:87:93:37:47:4F:D6:A0:60:41:6A:0D:05:B6:F5:A8:50:60
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 019D3941729DC1392BF52E0ABDEB57ED00C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:23 +0000
Manifest this update: Sun 29 Mar 2026 11:01:23 +0000
Manifest next update: Mon 30 Mar 2026 11:01:23 +0000
Files and hashes: 1: AySsPboe2PxrB1Gyq1W06Px76LY.roa (hash: YaBT4lmGzSO4QjZLhswASZb2ScD2t8fau691sPdnGM4=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: WbjhNgXjxl38BP5XN74Z9ucSvBlc1qytWDnmg4u7T2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:72:9d:c1:39:2b:f5:2e:0a:bd:eb:57:ed:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Mar 30 11:01:23 2026 GMT
Subject: CN=789f0e879337474fd6a060416a0d05b6f5a85060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:22:e4:9b:79:4d:d2:cb:9b:64:52:ce:e7:
3d:07:49:de:ec:40:98:c4:a5:6c:ec:47:aa:ce:10:
05:ad:9a:b5:ca:d2:21:3e:0a:24:4d:b5:93:53:39:
d1:99:b0:35:7b:35:d6:1b:41:3a:6a:58:90:33:db:
26:f8:cc:35:ce:63:8b:b9:a2:2d:1a:e9:67:e6:4f:
1c:76:91:34:6d:1f:ce:fd:70:d1:a8:8a:ac:89:b9:
b6:d8:18:6b:59:b7:a8:90:a8:fe:23:50:2c:56:2e:
4f:8d:2d:fe:88:34:d9:e5:f8:d0:85:56:ab:24:36:
bb:72:da:b4:8d:1a:31:8d:2f:15:c0:53:f2:42:89:
9b:c8:c0:56:e0:e5:88:29:43:85:34:36:ee:40:6f:
45:39:5a:7c:be:bb:ce:63:a3:ab:5e:94:d0:66:5f:
86:cd:69:72:18:42:9c:8d:52:54:95:95:c5:8a:9a:
63:56:9a:0e:ea:c0:b0:d3:aa:04:4d:ae:f6:bd:a3:
22:7e:5b:36:ce:a4:d5:96:83:b6:d4:39:f8:a5:22:
60:75:12:21:70:94:7a:79:f8:0d:89:6f:24:ba:ae:
71:6d:ca:94:8c:f6:53:16:d5:ae:26:b4:19:e1:eb:
56:e8:d8:31:b0:f8:66:37:ba:c3:ec:ac:7d:34:81:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:0E:87:93:37:47:4F:D6:A0:60:41:6A:0D:05:B6:F5:A8:50:60
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:7c:9a:07:c6:f3:c8:b7:39:cf:7d:c0:27:5c:04:56:29:
71:ef:34:e7:96:2e:23:cd:b6:ab:75:d7:6d:9f:f2:0c:45:72:
37:dc:0b:b3:68:d2:cc:e2:84:bf:d5:19:2d:23:08:c3:9d:9f:
3e:9a:9e:b3:57:39:78:61:5f:e4:ce:79:b9:0e:03:b4:39:bb:
c1:ef:1e:3f:41:a6:ef:72:2f:2d:ad:ce:ea:55:f7:5b:b6:9f:
b2:4b:c6:97:08:f1:a3:0d:4d:e2:b7:6f:9b:7b:63:dc:35:28:
b5:4a:27:01:d2:ca:c5:ed:bd:f1:71:2b:55:14:65:92:47:10:
9e:d7:b3:23:dc:1e:5c:db:8c:aa:aa:ed:54:7c:be:c7:db:c5:
fc:4f:0e:51:e7:a9:7e:17:5a:72:16:00:74:3a:5f:44:b6:e7:
d2:f8:0e:ef:72:2a:06:3d:96:bb:4a:30:db:7c:16:9c:0d:bd:
17:fe:62:e0:be:ed:d7:2c:7c:68:13:6e:38:89:bc:97:80:72:
47:ae:8c:e8:07:3f:ef:a5:c1:9b:dc:99:f7:05:20:42:09:d7:
9f:b5:9a:64:59:68:61:12:9a:f6:16:a1:7c:dd:71:4d:e6:ed:
78:23:ba:e4:b8:dc:7a:e0:3d:57:19:2e:5f:49:8c:ff:cd:c3:
4d:93:77:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QXKdwTkr9S4KvetX7QDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzc1YmM2YzgxMTBmMWFkNzMzZGY3N2FjZmJiMWQ2ZWM0
NjVjYjgwHhcNMjYwMzI5MTEwMTIzWhcNMjYwMzMwMTEwMTIzWjAzMTEwLwYDVQQD
Eyg3ODlmMGU4NzkzMzc0NzRmZDZhMDYwNDE2YTBkMDViNmY1YTg1MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmQi5Jt5TdLLm2RSzuc9B0ne7ECY
xKVs7EeqzhAFrZq1ytIhPgokTbWTUznRmbA1ezXWG0E6aliQM9sm+Mw1zmOLuaIt
Guln5k8cdpE0bR/O/XDRqIqsibm22BhrWbeokKj+I1AsVi5PjS3+iDTZ5fjQhVar
JDa7ctq0jRoxjS8VwFPyQombyMBW4OWIKUOFNDbuQG9FOVp8vrvOY6OrXpTQZl+G
zWlyGEKcjVJUlZXFippjVpoO6sCw06oETa72vaMifls2zqTVloO21Dn4pSJgdRIh
cJR6efgNiW8kuq5xbcqUjPZTFtWuJrQZ4etW6NgxsPhmN7rD7Kx9NIG7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHifDoeTN0dP1qBgQWoNBbb1qFBgMB8GA1UdIwQY
MBaAFI83W8bIEQ8a1zPfd6z7sdbsRly4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjct
ODA5ODUxYTA2YjZhLzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjctODA5ODUxYTA2YjZh
LzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJh8mgfG
88i3Oc99wCdcBFYpce8055YuI822q3XXbZ/yDEVyN9wLs2jSzOKEv9UZLSMIw52f
Ppqes1c5eGFf5M55uQ4DtDm7we8eP0Gm73IvLa3O6lX3W7afskvGlwjxow1N4rdv
m3tj3DUotUonAdLKxe298XErVRRlkkcQntezI9weXNuMqqrtVHy+x9vF/E8OUeep
fhdachYAdDpfRLbn0vgO73IqBj2Wu0ow23wWnA29F/5i4L7t1yx8aBNuOIm8l4By
R66M6Ac/76XBm9yZ9wUgQgnXn7WaZFloYRKa9hahfN1xTebteCO65LjceuA9Vxku
X0mM/83DTZN3+g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:36 2026 by rpki-client