Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: 1/U28L8yL5sy/iFSJ04I0MShFy8RUbojdK5r5jRe+Dk=
Subject key identifier: 52:7B:86:42:F8:C6:A8:CE:26:5E:20:DE:BE:9C:CE:3E:1C:F5:69:87
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 019D3940B499E101A246B83FE7E1847BAAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 1658
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa (hash: S3HFZOHNhrK5JfLIS/zCxpsr98ctYvNI/SQplbg/Stw=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: ljWnZxwfmasNAcLEC3tWQxk/fO7QlzBsWtMe3U1kaNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b4:99:e1:01:a2:46:b8:3f:e7:e1:84:7b:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=527b8642f8c6a8ce265e20debe9cce3e1cf56987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:bb:90:2e:56:a8:0a:2b:d4:2d:41:be:8d:
b4:4f:c9:6b:cf:31:78:68:98:0d:1c:e1:ba:97:5d:
4c:aa:07:bb:21:d2:64:36:fe:7b:aa:3f:62:3c:4e:
d8:36:7f:bd:9a:cd:65:23:93:fe:e8:db:d8:8a:98:
ec:be:0d:be:6b:95:40:c7:50:67:0a:1d:61:10:61:
56:c2:ab:6c:6e:c5:06:8b:9b:89:3c:77:76:a1:fc:
51:33:ba:9a:2d:9b:3a:60:e2:c1:b6:8e:dc:47:65:
9e:0b:56:f0:b5:d6:2e:16:c0:f2:30:81:64:14:e7:
81:34:bd:ab:c8:2c:3d:df:f8:f9:ac:b3:d8:73:57:
87:f4:c3:29:11:4e:fb:c6:75:9b:51:bd:41:90:b0:
1b:13:d8:dc:e1:9c:c2:41:e9:1e:e5:db:cc:57:6b:
47:ec:90:8b:54:07:b4:75:b6:92:05:8f:37:25:0e:
83:4c:c3:56:17:f4:14:5c:e7:80:55:9f:72:a7:de:
ca:f6:2c:3c:5c:53:a8:b0:bd:3e:ac:95:55:20:c5:
77:32:30:37:a2:ed:36:d9:f9:86:51:1c:dd:0d:02:
8c:bb:a4:7c:f9:88:18:99:5a:e7:fb:f2:12:4e:9c:
ab:02:f1:1d:21:f3:80:7a:7e:ca:01:51:0e:3d:0e:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7B:86:42:F8:C6:A8:CE:26:5E:20:DE:BE:9C:CE:3E:1C:F5:69:87
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ad:55:d3:aa:71:36:da:09:89:0a:fc:d6:1e:91:6c:c5:03:
a4:e4:31:11:06:dd:db:d9:14:42:78:b1:4b:f6:35:b2:27:9e:
c3:27:f1:b0:29:74:c8:1f:15:05:65:f4:6b:80:dc:68:98:af:
79:c4:26:9a:96:ef:d8:6b:ad:54:ae:ee:89:51:9a:05:1d:c7:
98:27:ab:0c:ad:5f:ca:79:19:59:53:36:da:b5:a8:c2:95:01:
25:48:33:d1:f1:af:df:80:3c:55:38:1e:36:9f:fe:f7:57:08:
b8:8d:e1:5d:21:2e:86:a2:dc:ca:fb:52:52:92:59:8a:5c:de:
0d:09:0c:24:d2:be:4d:89:b8:0e:75:5f:37:be:d5:0a:9e:92:
54:bf:50:53:1d:39:a0:2f:7b:85:19:8b:65:5e:e2:ae:7d:e6:
57:aa:cb:cb:2e:a9:53:82:e8:f1:09:f9:91:d5:ea:5a:34:2e:
e5:0e:3e:41:ef:cf:46:17:f7:26:95:81:e2:21:25:4a:18:72:
28:09:69:6d:3f:8c:b4:eb:3d:4c:53:a4:8a:56:f5:f2:1d:25:
ee:f4:29:9b:02:f5:83:b4:5d:ec:95:4c:40:80:9a:5e:78:5b:
84:e4:2e:8d:14:1f:88:ac:b3:20:b1:67:fe:38:61:c6:db:f4:
b3:60:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:44 2026 by rpki-client