Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: 1qlBFCHP03qJPkodhOUirqgcZorbmX0A6KiKK2CFbW0=
Subject key identifier: 0B:C1:2D:ED:05:EF:EB:B9:0D:42:7B:AF:E9:5A:7E:18:0D:A4:57:7C
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 019D39AEE5172A20855AB7713A0E0FC6A420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0D98
Signing time: Sun 29 Mar 2026 13:00:56 +0000
Manifest this update: Sun 29 Mar 2026 13:00:56 +0000
Manifest next update: Mon 30 Mar 2026 13:00:56 +0000
Files and hashes: 1: dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa (hash: X1YBtggX7sXN/XI659Z7sShfySUKcJ9Z3YnMpVPGY7o=)
2: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: UI5NEz0qxUXyzHthYLCrBCs1ZV56JZRxrFSzko4okZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e5:17:2a:20:85:5a:b7:71:3a:0e:0f:c6:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Mar 29 13:00:56 2026 GMT
Not After : Mar 30 13:00:56 2026 GMT
Subject: CN=0bc12ded05efebb90d427bafe95a7e180da4577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:15:f9:8f:9a:26:e7:b0:1a:87:0b:b9:30:
0e:d4:f6:ae:cf:cb:c3:60:0c:1d:08:7e:35:f5:43:
90:35:ba:7f:f0:8a:02:1c:94:8e:0f:d2:e1:1b:6c:
e1:af:9f:a8:84:da:01:fb:32:a7:5f:60:7a:1f:ef:
c3:25:ed:a7:04:99:dc:dd:5b:da:ef:c1:b4:b9:98:
ec:d5:41:c8:cc:c6:bc:f0:ca:3e:0d:78:7a:17:6b:
98:07:8e:10:5a:85:58:40:10:b4:a0:1d:1f:34:d9:
df:92:b2:56:6f:82:c1:13:67:89:8c:88:f0:86:27:
3a:54:88:8e:6a:ad:82:66:12:ff:9f:2d:97:3c:ef:
45:6e:cb:69:f4:41:d4:0a:6b:a9:c3:bf:e3:1c:2b:
0f:ad:e7:6b:ab:b2:01:98:48:12:0a:35:ec:9d:a8:
c7:28:ab:15:99:6c:a7:97:df:a5:c5:79:eb:8d:be:
7a:12:9a:7d:2b:29:8d:35:54:c2:09:d4:1e:94:80:
ed:6b:7b:3d:b0:1c:c6:1d:41:cc:f6:3c:b2:2b:d3:
24:9d:83:fc:b6:c0:8a:dc:dc:9d:fa:31:59:7f:1c:
89:e7:5e:a6:5b:01:80:79:45:8c:7d:9c:a4:44:20:
e2:9b:a0:b0:b4:c6:08:b9:67:4c:2f:88:22:64:a7:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:2D:ED:05:EF:EB:B9:0D:42:7B:AF:E9:5A:7E:18:0D:A4:57:7C
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c5:03:0d:59:40:cf:f9:ec:f0:4b:01:73:6a:8f:8c:07:8c:
37:42:9c:20:6c:a2:4d:96:d6:6d:b9:13:cd:c0:96:8d:fc:5f:
b9:66:b4:2c:40:45:1d:bc:b5:13:86:a2:da:c2:ad:5f:e3:8d:
97:5c:2a:91:0a:1f:74:71:7c:31:15:b2:29:57:69:5f:76:56:
23:e8:98:ad:a0:c3:a6:3d:44:87:0c:e0:3f:8b:e0:97:16:a2:
7e:6b:6b:20:3b:6c:bb:8e:78:89:ec:e3:38:2b:06:dd:79:ce:
16:f2:80:9b:b3:de:83:2a:4f:8c:f8:09:a2:33:c7:56:a6:20:
a6:2c:6f:f3:de:ef:44:99:eb:8b:0a:e1:33:df:84:47:63:c6:
0f:58:e4:ff:15:90:7c:b6:d1:37:eb:d4:53:0d:4f:32:a4:ce:
6e:53:be:3d:07:75:34:61:6b:76:2c:3e:9f:3c:2c:eb:ce:6b:
b5:94:2c:a2:4f:ff:fd:92:ef:fe:06:dc:0b:25:27:ca:c3:0b:
6d:8a:16:78:c7:6c:66:39:72:f5:71:fb:4a:5b:82:a0:cc:99:
2c:36:ff:fa:c3:c3:90:4d:e2:ed:cc:c0:02:cf:41:cd:87:74:
56:cf:77:37:2c:7a:03:fd:61:da:d2:28:71:2c:a3:a4:b1:5e:
c1:c8:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:17 2026 by rpki-client