Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: 9iat2fnorXw/ES5UY5BBwwclMyVxZswMg/tfK0KunLs=
Subject key identifier: BE:6B:C9:EB:D0:8A:8F:D1:28:45:B5:91:8A:4C:C2:E7:3A:50:20:31
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 019D3A1C694F5AD09E28F9655CF65172B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 15:00:33 +0000
Manifest this update: Sun 29 Mar 2026 15:00:33 +0000
Manifest next update: Mon 30 Mar 2026 15:00:33 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: tpQ7cvQ2qn/jGR3R8Pomy/3/s+H+mYxAv6SvVdgz5Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:69:4f:5a:d0:9e:28:f9:65:5c:f6:51:72:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Mar 29 15:00:33 2026 GMT
Not After : Mar 30 15:00:33 2026 GMT
Subject: CN=be6bc9ebd08a8fd12845b5918a4cc2e73a502031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:8b:6a:63:4c:dd:90:2e:da:91:b5:4c:5d:
c1:ec:f3:a3:86:00:61:29:d2:20:fd:af:25:3d:89:
0a:9f:3b:7b:5e:f9:71:4f:5e:1f:9d:ae:02:a4:42:
ff:3f:56:52:fa:f3:98:3a:fd:90:35:dd:d2:2f:ca:
e1:62:e0:0a:43:4e:c8:99:84:26:bb:d4:26:ff:d9:
15:a0:55:d6:5f:ca:35:94:7b:b3:84:9e:93:38:0f:
f6:1f:f0:26:f1:79:d1:b3:84:b4:7e:e0:6d:91:eb:
81:a2:b0:49:c6:12:bc:63:94:ae:c1:a8:a3:9b:44:
53:03:72:e8:f6:54:9c:2d:2a:7e:dd:df:03:45:d1:
e5:21:7f:94:4e:a4:c9:43:95:49:f6:b8:c3:48:35:
c0:7c:53:94:04:58:a0:17:43:8a:ad:45:5f:30:d6:
23:a5:4f:58:e8:15:e1:d9:55:e3:af:2d:42:9f:40:
c2:cb:74:83:4b:18:77:c5:96:b7:61:0c:0b:bf:c7:
bb:61:66:f7:76:bc:1f:fa:c6:68:b9:91:bb:00:b3:
7e:ce:62:13:d5:6b:d7:4d:bb:40:b9:45:7a:b6:7b:
cf:9e:8b:d5:50:3d:b6:8d:49:69:e2:6a:f5:d6:a7:
6d:72:21:5a:40:0e:9f:ae:dc:bd:76:6c:26:6e:9d:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:C9:EB:D0:8A:8F:D1:28:45:B5:91:8A:4C:C2:E7:3A:50:20:31
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:50:3b:a6:ee:27:e2:94:16:3d:ec:fd:9c:26:35:59:33:2c:
5a:91:33:e7:50:55:3e:ff:db:9e:0a:88:a9:fe:a6:d9:89:2a:
b5:e4:4e:b0:b2:b1:b2:0d:77:88:8a:2f:db:ac:1f:df:b4:dd:
db:64:c9:fa:80:0c:e8:89:05:5b:ab:75:c6:59:6a:b4:b6:0f:
5e:8c:ad:22:33:bd:36:c8:38:ea:8b:24:13:31:ad:bd:0b:c0:
4a:0f:33:20:4a:01:38:6c:20:cf:48:08:61:09:7e:76:13:85:
74:16:7b:f2:fe:3a:9e:28:07:71:bb:eb:81:40:41:64:24:50:
30:f4:a7:25:1b:5d:53:a9:59:9e:7a:bd:fb:1f:e1:fa:b2:36:
83:ce:20:0b:85:f4:d6:83:00:a1:0a:a2:9a:48:92:e3:1c:09:
b0:50:1d:c0:0b:a9:e9:61:f1:32:e0:d4:86:7b:d3:9f:e6:c2:
3c:07:21:69:87:93:2b:de:e6:ab:3b:ce:c4:92:10:e4:a2:db:
36:be:4e:fc:d2:0f:1b:be:84:86:49:21:24:3b:4e:cd:8f:f6:
de:87:59:9b:c8:ef:d8:89:63:d4:bc:e9:a3:96:f3:db:84:f7:
b9:b5:00:b7:6d:c6:4b:49:3f:25:71:24:a1:72:3f:48:68:fd:
60:e1:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:33 2026 by rpki-client