Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier: fGdRopYvgrfVc1bLEaNHQz6uv48DrAJNgkqC7sAeH54=
Subject key identifier: F3:95:88:30:1F:6E:1D:FE:10:85:3B:E0:55:7A:90:06:2E:8F:ED:9E
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial: 019D37F78F3919A35AC7C623E2BB082548D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number: 0342
Signing time: Sun 29 Mar 2026 05:01:03 +0000
Manifest this update: Sun 29 Mar 2026 05:01:03 +0000
Manifest next update: Mon 30 Mar 2026 05:01:03 +0000
Files and hashes: 1: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: KckkBlT8I8MzPx4X50eVaaLYhLhbwevYvh7Eizu0nvs=)
2: q2iMHMpPinukFM5Qhc4ZwsftRx0.roa (hash: +p+ImNbpg+AUu5Y3P8c/ugT7MQsuGHh+4k2E8cJ52tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8f:39:19:a3:5a:c7:c6:23:e2:bb:08:25:48:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Validity
Not Before: Mar 29 05:01:03 2026 GMT
Not After : Mar 30 05:01:03 2026 GMT
Subject: CN=f39588301f6e1dfe10853be0557a90062e8fed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:34:46:fe:90:b1:09:15:66:94:4f:af:12:
58:a7:a4:af:c4:3c:7b:67:2d:10:15:97:11:fe:3c:
ca:3c:27:6c:06:31:ed:c8:55:b0:68:18:4e:db:d4:
06:dc:39:32:01:0a:bc:57:52:cd:01:f0:2b:0f:92:
9a:aa:a2:e8:60:59:dc:12:a2:22:4a:4a:bd:dc:b4:
a7:41:47:ed:98:95:ee:1c:84:e8:b6:ac:63:d8:99:
4d:79:52:26:30:6c:d4:f8:e2:cf:ad:fc:71:6c:fb:
98:a3:e7:8b:ce:cd:66:0d:bd:6c:27:13:69:9e:e9:
74:f3:c4:55:85:55:40:b7:12:71:02:d0:37:4d:84:
b4:a9:dc:05:74:71:a3:38:4a:c5:f9:49:d1:c7:06:
20:8f:7f:a8:4c:f9:42:8a:8b:40:cf:ae:b7:10:b5:
33:59:8d:81:4a:fb:cb:f4:5b:8f:57:b7:90:c4:e7:
f9:81:1c:64:29:2c:05:a9:57:18:24:29:1f:0f:6d:
37:e1:f3:21:1d:1a:ac:32:76:f5:be:fa:08:6d:5f:
bc:6f:87:a7:5a:42:57:df:ba:24:a9:06:c9:3c:dd:
aa:b5:58:29:ba:f0:32:ce:04:a6:e4:2b:0d:db:ad:
07:c7:3d:f8:62:dc:2a:66:41:2c:cb:6a:10:2e:b8:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:95:88:30:1F:6E:1D:FE:10:85:3B:E0:55:7A:90:06:2E:8F:ED:9E
X509v3 Authority Key Identifier:
keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:60:77:6a:56:cc:3e:d7:25:25:03:09:1e:54:a9:5b:ac:ad:
59:0b:39:cb:60:c8:22:6c:ba:f6:1e:8d:03:96:0c:a9:6d:fc:
f2:22:96:17:a5:76:a6:f1:80:2e:da:1b:0d:db:d7:97:d7:75:
8b:f9:5e:42:37:5a:23:d7:48:79:6a:1b:64:ba:34:5d:3a:ab:
ca:f1:87:06:2d:05:ab:44:e2:94:95:cd:23:18:12:6b:55:3a:
b0:7b:35:1e:a7:79:b1:48:7c:ab:84:b5:46:05:9b:50:0a:84:
ae:50:d7:50:b2:45:37:b7:af:83:0a:33:c2:e1:2d:18:95:e7:
40:3a:e8:5b:79:24:2b:80:93:f9:d9:59:a6:30:5c:f5:b1:84:
63:e4:ea:58:03:ed:21:c3:b1:d7:63:42:ff:16:1d:93:ef:b2:
cc:20:f1:a7:a2:54:78:3a:31:27:93:ff:e1:af:2b:9b:aa:62:
78:ae:e2:b8:92:96:84:fd:88:d1:ad:03:9f:23:4e:04:98:a5:
c8:07:72:e4:10:74:7f:13:65:39:a4:e6:73:b7:e6:6a:2c:8e:
a4:4d:d8:14:81:4f:6f:ab:fa:5a:df:e2:c5:99:e9:f9:85:1f:
68:cd:2a:49:31:a6:4b:49:14:1b:cd:f9:7c:1e:b9:b0:4b:25:
e4:75:ff:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039485GaNax8Yj4rsIJUjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMGNmNjViYWRkOWE4OGFjY2MzMjc1MDBiNWZmMjlkMWZm
MDkxOTYwHhcNMjYwMzI5MDUwMTAzWhcNMjYwMzMwMDUwMTAzWjAzMTEwLwYDVQQD
EyhmMzk1ODgzMDFmNmUxZGZlMTA4NTNiZTA1NTdhOTAwNjJlOGZlZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3s0Rv6QsQkVZpRPrxJYp6SvxDx7
Zy0QFZcR/jzKPCdsBjHtyFWwaBhO29QG3DkyAQq8V1LNAfArD5KaqqLoYFncEqIi
Skq93LSnQUftmJXuHITotqxj2JlNeVImMGzU+OLPrfxxbPuYo+eLzs1mDb1sJxNp
nul088RVhVVAtxJxAtA3TYS0qdwFdHGjOErF+UnRxwYgj3+oTPlCiotAz663ELUz
WY2BSvvL9FuPV7eQxOf5gRxkKSwFqVcYJCkfD2034fMhHRqsMnb1vvoIbV+8b4en
WkJX37okqQbJPN2qtVgpuvAyzgSm5CsN260Hxz34YtwqZkEsy2oQLriWnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOViDAfbh3+EIU74FV6kAYuj+2eMB8GA1UdIwQY
MBaAFIwM9lut2aiKzMMnUAtf8p0f8JGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQt
OTc1YTgwZDBkOTNmLzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQtOTc1YTgwZDBkOTNm
LzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGB3albM
PtclJQMJHlSpW6ytWQs5y2DIImy69h6NA5YMqW388iKWF6V2pvGALtobDdvXl9d1
i/leQjdaI9dIeWobZLo0XTqryvGHBi0Fq0TilJXNIxgSa1U6sHs1Hqd5sUh8q4S1
RgWbUAqErlDXULJFN7evgwozwuEtGJXnQDroW3kkK4CT+dlZpjBc9bGEY+TqWAPt
IcOx12NC/xYdk++yzCDxp6JUeDoxJ5P/4a8rm6pieK7iuJKWhP2I0a0DnyNOBJil
yAdy5BB0fxNlOaTmc7fmaiyOpE3YFIFPb6v6Wt/ixZnp+YUfaM0qSTGmS0kUG835
fB65sEsl5HX/Gg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:39 2026 by rpki-client