Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File: jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier: ftYmesp0Dy+/wWC2b/1BqcerVWFeOaodpAj9I5bb8dQ=
Subject key identifier: BE:65:7D:FC:2E:98:6C:38:55:76:5F:CD:47:2F:27:23:1E:6F:7D:DE
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial: 019D38D293BE51AE38A1F10FCF7B0A9A19C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number: 157A
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: Dule4tvJ3qFl2Zo7PutVO0GwX38.roa (hash: syF4br28pc65nkl9HefLa2vI5/Y6Wcc0BagaK/INN5U=)
2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: M8XhKdPKi1ntj+s4H9D+fLA56+L3g2o8RzBD+aH7KH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:93:be:51:ae:38:a1:f1:0f:cf:7b:0a:9a:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=be657dfc2e986c3855765fcd472f27231e6f7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:1f:29:15:d0:28:cc:94:24:60:25:c3:d3:
aa:cc:d9:64:7e:83:f9:30:6c:e0:98:84:36:a6:6d:
dc:9a:7c:a8:9d:2f:52:bc:e8:eb:0b:c8:d1:83:c0:
38:d6:58:61:01:4f:91:d5:d4:75:a9:3e:56:68:9a:
48:31:ac:66:a6:43:88:2b:10:a3:69:0f:1c:7c:94:
f6:30:ad:76:30:85:e0:c3:a1:c8:05:cf:5a:e9:29:
cb:69:3e:dd:8b:07:7c:76:74:96:f2:56:5e:d9:5c:
26:4e:16:a4:a2:a8:2f:ee:04:cf:2d:59:6b:f5:7f:
4b:44:80:bc:89:c6:3c:64:9c:ba:26:99:0c:b5:8b:
a5:ce:02:af:df:4f:6d:9d:bd:6f:d1:c4:f0:47:ee:
6b:1e:07:02:76:2d:c1:db:26:34:72:40:93:59:91:
cc:6f:8c:f3:f8:fd:35:6d:0a:84:7c:c5:02:b4:c1:
00:09:9a:eb:9e:2d:73:35:d7:7f:82:fc:02:4c:73:
23:6b:13:32:9b:88:cb:ea:9a:ec:d8:57:3d:2d:4f:
a0:92:41:63:66:ef:f5:b5:cb:6f:5d:dd:ee:7d:25:
0f:69:f4:13:4c:ce:ac:24:0c:16:77:23:2c:ec:63:
8f:a0:1c:93:70:36:66:2c:6b:97:89:66:68:d7:d1:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:65:7D:FC:2E:98:6C:38:55:76:5F:CD:47:2F:27:23:1E:6F:7D:DE
X509v3 Authority Key Identifier:
keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3f:5a:20:c1:dd:5e:b4:34:b5:aa:6b:c9:48:f6:47:93:a6:
d6:db:e9:27:ec:e3:c7:6f:a1:cf:00:a9:63:e9:0b:4c:c2:84:
17:33:b4:51:b0:59:68:42:51:3a:00:ae:59:b9:3d:03:d0:df:
4c:d2:67:83:cc:29:32:ff:78:12:1b:91:20:95:d0:2f:05:aa:
5b:2f:f3:7a:8a:53:ba:dc:fe:58:e5:53:99:80:62:b3:86:34:
36:74:cd:e2:3c:b1:0e:7d:72:bb:c6:68:c3:ea:c9:d0:a9:a0:
11:2d:1f:a8:e4:d1:52:bb:d6:6e:b4:36:70:cb:b4:fc:8e:21:
4b:4d:3f:29:2a:9d:b8:a7:88:6a:6d:b0:9b:e0:95:d6:3e:c5:
69:ed:09:a7:bc:82:ce:80:9f:60:44:41:d1:80:7f:d6:f7:b9:
99:e5:80:73:69:ac:ba:e9:77:d6:ad:18:8e:a3:fa:9e:52:0c:
26:2d:c4:97:76:c0:49:66:ca:9b:07:90:a6:44:6c:71:e6:15:
55:42:4f:09:bc:c4:36:1c:9d:c2:a3:00:1c:be:10:3f:8a:6b:
90:cb:57:43:0d:e0:90:14:fd:ca:cc:20:f6:f3:54:02:72:9e:
fc:bd:56:88:68:9f:74:1a:85:ed:ee:0a:ed:68:76:2b:a0:6f:
59:52:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:35 2026 by rpki-client