Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
File: JZB_kNn52QL88EvQtGFSw4J6fVA.mft (raw, json)
Hash identifier: Xq1HF9rleHuRXdGOiGop8PB4Fj5yz9PrpQlUQcj+U0Y=
Subject key identifier: 7F:7C:C7:B0:37:9C:E8:CB:0C:A4:AC:8E:69:53:54:F7:27:B3:C7:B7
Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Certificate serial: 019CC306738E3322A53DCD3BFC03DC26258C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
Manifest number: 0105
Signing time: Fri 06 Mar 2026 12:01:45 +0000
Manifest this update: Fri 06 Mar 2026 12:01:45 +0000
Manifest next update: Sat 07 Mar 2026 12:01:45 +0000
Files and hashes: 1: JZB_kNn52QL88EvQtGFSw4J6fVA.crl (hash: Jo8554h71863X28NO9G+/9hYI3uFcSJmhrGjrdRe6c0=)
2: us20DoJCXsVZzbd3x5fHyF61Jik.roa (hash: 1tw/rfH56Z411UghhNhBV3Cnovjrc0BrKALUNfjqvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:06:73:8e:33:22:a5:3d:cd:3b:fc:03:dc:26:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Validity
Not Before: Mar 6 12:01:45 2026 GMT
Not After : Mar 7 12:01:45 2026 GMT
Subject: CN=7f7cc7b0379ce8cb0ca4ac8e695354f727b3c7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:c4:6d:c0:5f:34:85:79:f9:23:24:40:8d:
b3:b3:d8:f0:14:37:7b:5e:90:b2:e8:30:68:62:dd:
01:b8:bb:52:79:9a:a2:5e:5c:25:59:76:0c:51:70:
b6:b1:3c:92:ea:69:27:5c:ad:c9:19:4c:d6:75:43:
1f:1f:38:57:ca:2c:3b:52:7f:9e:1a:5c:b7:36:6a:
21:64:8c:8a:85:c4:05:71:1f:7a:bd:e9:ff:b1:dc:
d7:c4:35:23:49:b6:c7:da:b9:eb:f3:ce:00:d6:11:
e1:cb:60:6a:b6:e2:43:64:45:1a:02:ab:6c:00:a4:
1d:27:2e:05:44:c7:66:43:b8:fe:7a:3c:fd:3c:19:
a0:46:69:fc:5f:69:13:b3:39:aa:ea:0e:ea:e2:4a:
e7:e1:5a:6d:c8:14:02:11:17:a2:8b:f3:c5:09:22:
cf:d7:fc:1d:58:a2:ea:91:c3:b1:c5:d4:6e:40:74:
5e:66:ee:4b:da:c0:96:d4:34:0f:ab:d2:de:ac:32:
60:01:79:60:8e:1f:1f:d9:d6:7d:88:5c:81:6e:36:
08:01:08:a1:fc:39:fc:47:8d:b3:d7:21:84:af:b4:
1c:f9:d0:ce:10:01:fc:46:ea:c0:13:20:e2:80:f0:
3a:50:41:1a:60:b4:64:9f:29:e3:26:b3:65:06:d4:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7C:C7:B0:37:9C:E8:CB:0C:A4:AC:8E:69:53:54:F7:27:B3:C7:B7
X509v3 Authority Key Identifier:
keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c0:d5:19:38:25:ae:c3:d6:69:65:7e:4d:86:9e:02:75:cb:
b6:28:18:a9:16:db:25:1a:68:03:c4:bc:13:d7:80:98:a3:47:
c1:a7:c9:dd:1e:2a:cd:a2:cf:c2:59:51:f5:f7:25:f1:76:8c:
04:3b:e3:15:e0:2d:28:85:88:48:20:3d:47:7a:49:b7:09:3b:
bd:ec:9f:71:7d:c1:07:aa:81:66:4f:f5:75:74:ec:49:a0:ae:
7f:41:6d:13:33:70:43:c2:9f:2d:59:de:7e:62:6d:9e:15:8e:
fd:f2:84:25:25:9c:78:d1:7a:f4:23:40:a2:21:a9:16:bd:4e:
4e:34:6e:4e:42:14:65:93:59:13:1e:55:fa:21:2f:5f:4c:ff:
dc:72:77:ae:b8:d2:e9:29:c4:76:40:21:0f:46:5d:fa:01:64:
ae:f7:57:f1:03:d2:8f:73:64:3d:bb:95:b0:1a:da:19:5e:8b:
f7:c2:cf:59:5f:f4:a1:8f:5a:b6:28:62:cd:95:67:2e:3b:9d:
ec:e4:ef:39:a6:5a:73:ce:81:68:37:9e:11:aa:1b:b0:dd:62:
3b:54:5d:dc:d2:4b:4a:78:1a:18:a8:6e:50:83:df:62:52:ec:
39:62:a2:d2:a0:a4:b7:d7:1e:6d:e6:58:a7:96:51:82:ae:b4:
2a:81:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:24:10 2026 by rpki-client