Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: nnnwJtyX8oEYXdBXSU7WyU9hGGvh7wtCAFO7hKlvgzM=
Subject key identifier: FF:92:8F:DE:DB:9E:20:C2:FE:60:B5:C7:AA:6F:79:35:4B:6C:64:5D
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019D1F1388B1D8552FF4B51DF0830B3E6A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 10B3
Signing time: Tue 24 Mar 2026 09:01:06 +0000
Manifest this update: Tue 24 Mar 2026 09:01:06 +0000
Manifest next update: Wed 25 Mar 2026 09:01:06 +0000
Files and hashes: 1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: b1ZcdkUFENL/kaTFCiaDO1RIXxFmYmeeSjgfGH+wNgg=)
3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:13:88:b1:d8:55:2f:f4:b5:1d:f0:83:0b:3e:6a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Mar 24 09:01:06 2026 GMT
Not After : Mar 25 09:01:06 2026 GMT
Subject: CN=ff928fdedb9e20c2fe60b5c7aa6f79354b6c645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:93:c0:b7:c2:94:c7:e7:57:d4:ed:76:bc:
c6:ca:ea:01:ba:7c:c6:85:86:db:f3:fb:86:92:e5:
54:8e:3f:39:a7:54:79:11:84:0d:20:60:6c:b6:34:
58:bd:88:33:57:ec:8e:0b:e4:81:e6:63:09:8e:3c:
6b:80:f6:e3:d1:f9:32:6e:1d:4b:fd:62:6c:fc:5b:
e8:c7:54:78:40:24:8d:9b:3b:69:cb:80:57:13:35:
a8:38:63:dc:f1:3f:a2:1f:90:a9:00:ee:e0:c5:f2:
38:95:03:67:56:55:7a:c7:d0:4d:d9:b4:ff:f8:64:
7d:f6:31:90:7e:48:68:14:6a:ff:29:67:1d:a7:d4:
14:df:78:95:56:5d:ae:a2:4a:73:75:2e:1a:2f:0e:
c3:cd:d8:8e:ec:d0:d6:aa:cb:fa:86:d1:86:97:60:
c5:a0:52:de:f9:bd:dc:e2:07:48:bd:f6:55:bc:7f:
6e:c9:dc:b2:2e:a6:84:4c:bd:5b:22:69:f3:80:7c:
99:ee:8e:cb:f1:31:14:10:49:f7:d0:b5:b8:70:30:
c5:39:5d:53:25:3d:b2:0f:da:ff:ef:9f:ab:8a:08:
3f:56:1d:9a:26:77:90:de:dd:e3:11:32:92:ec:40:
02:2d:9a:1e:ea:0d:87:1e:21:9a:4d:64:69:ed:0c:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:8F:DE:DB:9E:20:C2:FE:60:B5:C7:AA:6F:79:35:4B:6C:64:5D
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ba:b1:cb:83:6a:98:9c:6b:01:e9:30:db:80:eb:3d:4e:25:
84:96:9d:76:d1:1f:42:68:c1:d4:a3:64:4f:5e:3e:5d:6a:92:
ad:c1:45:4b:9e:07:65:0f:85:45:e4:94:f8:ad:e5:fe:cd:a7:
28:06:6d:f9:c0:09:88:3b:21:2d:b2:fd:77:c8:98:8b:f8:48:
ad:3a:1a:67:66:7f:b5:39:41:a8:84:bf:96:21:c1:09:ff:0e:
c5:10:51:21:17:7c:3c:dd:3e:5f:2b:c8:39:ac:1a:6a:8d:e0:
44:9b:ce:fb:f1:f6:cc:35:4f:e3:b1:0d:d2:d9:f5:aa:d9:1e:
e6:33:7d:13:f5:0b:2f:bd:c8:7c:2e:db:49:f5:41:3d:61:63:
aa:cd:2a:3e:ea:f6:6c:28:27:c4:6d:34:32:de:d3:22:33:4e:
6f:39:56:b0:6a:8d:57:a3:9f:72:35:12:4a:68:76:b5:e1:7b:
30:23:54:75:4f:3b:44:ee:4b:22:19:20:60:2b:61:ef:9f:a3:
ca:8f:6d:8b:55:64:b1:f6:7a:71:52:5a:0c:c6:b7:3e:08:ee:
ee:a4:7d:68:87:37:46:79:4e:b5:d8:b2:d6:bc:a7:31:09:6b:
44:ca:19:38:cf:c0:21:b0:30:07:4e:41:d8:7e:79:c4:e4:27:
e3:53:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 15:53:54 2026 by rpki-client