Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: NxYvjPVUdTGa5SRaMljVPApM0dRHEC92TbtGcd+IuiE=
Subject key identifier: B1:2E:60:E8:32:39:46:75:D1:13:50:A0:26:0F:AF:EF:63:89:E7:79
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 019D375328D139D3CFEB885488C40106F260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 14D3
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: X7EGq3ULp4qMjdusm-fC_K2E7p4.roa (hash: DCGD9YxklsauNoagw/am2/7dOGgzTpV9Ou4m28+2cEg=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: BAZv0I/HNWYAimLroXRn+FP+F54pibxht4cDptUNLH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:28:d1:39:d3:cf:eb:88:54:88:c4:01:06:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=b12e60e832394675d11350a0260fafef6389e779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:65:f1:e9:df:9e:35:1c:07:00:30:e3:5b:
39:ba:ec:17:d3:d9:99:79:76:41:88:7d:d9:6d:b5:
07:ab:9d:be:e2:ef:6a:ed:46:3d:4a:06:4b:34:e7:
9e:58:e1:6f:18:e8:6d:16:06:33:ad:37:f9:e8:92:
4f:1b:8f:37:40:63:9d:6f:d3:4c:0b:50:01:76:33:
2a:ec:c1:08:f2:54:29:82:78:5a:22:c0:4f:c2:cf:
9f:2a:43:14:23:cd:20:a9:fe:e8:c6:21:37:3d:e5:
58:ac:57:c1:ee:72:69:03:d2:f7:19:30:3c:ae:2f:
3c:31:cb:6f:62:db:82:0c:5c:36:65:59:f9:fd:5a:
bc:fe:59:d7:4c:cd:93:f1:1f:38:3d:18:d7:ba:ed:
37:3e:d3:77:87:57:27:41:3a:80:f3:66:30:94:6d:
4c:c9:07:3f:b1:91:2f:54:49:4f:69:b7:c4:86:3f:
37:d1:15:5b:8d:e7:6c:09:9b:e1:9c:5c:04:e9:42:
08:c8:dd:01:46:03:12:1b:2f:63:01:82:1a:fa:25:
80:65:3a:5a:fc:99:27:f7:ff:46:39:6f:6c:fd:3a:
4e:91:0d:6b:3f:83:e7:f2:b5:b3:97:e4:48:d8:f6:
5e:0e:a5:9f:12:85:e7:03:64:49:46:6a:d3:72:9c:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:60:E8:32:39:46:75:D1:13:50:A0:26:0F:AF:EF:63:89:E7:79
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:46:9c:ea:4d:4f:b6:36:3d:11:d3:09:7a:5a:c4:1c:ad:44:
4a:00:55:e1:97:14:61:71:f4:38:a9:fe:91:e1:7f:88:13:e9:
d4:2b:66:62:f9:aa:aa:56:22:6f:a3:ef:d7:c6:c6:48:d7:e2:
7f:02:56:61:83:90:a3:d9:f6:55:ef:c2:f8:22:ad:18:cd:9a:
e4:29:fe:fb:d3:9c:1b:3c:94:7b:49:09:31:df:5c:ef:7f:0e:
4e:9d:69:eb:95:ea:37:cf:89:30:69:57:84:37:ba:bf:aa:13:
05:6f:cb:92:c4:7c:71:17:64:3b:76:b4:f6:75:71:18:3c:1a:
0f:93:e6:c4:87:a9:62:0f:25:0f:09:bf:69:ab:77:8e:c6:69:
4d:66:98:93:3d:b5:83:b0:1a:67:0a:0a:f6:44:af:e0:e7:7a:
50:51:d2:5f:d1:40:50:42:0e:57:9a:55:6b:6a:0e:60:d7:ee:
03:38:cf:59:4e:74:d8:54:29:9f:57:7e:a0:dc:fe:67:dc:d3:
93:f3:7c:60:23:d6:ff:72:2e:41:c2:6d:ee:fe:64:dd:64:99:
34:ce:06:00:ce:66:46:ff:f3:fc:49:f2:ed:98:47:fa:a0:43:
97:39:fe:c3:9c:b6:6b:af:27:08:54:a8:ef:51:85:5d:89:d1:
10:c1:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:24 2026 by rpki-client