Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: M1lWYnenf8ToGJEJyfciuZNu0IfNGUAYScgndAYQ1jo=
Subject key identifier: EA:44:60:A5:DB:D0:B4:4E:F2:0C:91:83:18:5E:16:09:92:B0:60:4B
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 01A12F215C97D3564E9D1AE876D010298CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 1865
Signing time: Mon 12 Oct 2026 08:01:17 +0000
Manifest this update: Mon 12 Oct 2026 08:01:17 +0000
Manifest next update: Tue 13 Oct 2026 08:01:17 +0000
Files and hashes: 1: T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa (hash: S3HFZOHNhrK5JfLIS/zCxpsr98ctYvNI/SQplbg/Stw=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: 8v9ENMBZmqiT5QvGzkaUmpdfII+XUe4vUCcJ7eYVmZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:5c:97:d3:56:4e:9d:1a:e8:76:d0:10:29:8c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Oct 12 08:01:17 2026 GMT
Not After : Oct 13 08:01:17 2026 GMT
Subject: CN=ea4460a5dbd0b44ef20c9183185e160992b0604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:73:10:5f:5e:98:ea:32:05:37:75:4c:21:
ad:be:91:6b:96:cf:c3:9d:b8:24:a0:32:3b:95:22:
02:05:a0:8f:cf:ae:cd:fc:c4:e8:a9:55:74:a2:e9:
a3:10:24:2d:58:a9:5c:2b:89:a3:86:06:f8:76:68:
b9:89:d4:27:32:1e:53:35:aa:d7:b3:75:1f:a0:7e:
52:ad:8b:aa:d9:52:0a:ef:04:04:b4:72:cd:66:36:
e9:87:96:36:3f:5d:5a:8d:24:df:09:32:45:bf:a0:
31:60:2b:32:6e:9b:04:d6:d9:b1:0a:eb:51:65:d6:
b9:72:d5:e7:04:3f:47:be:c2:d2:8d:fc:42:a0:55:
6d:2c:e5:b8:c8:b0:e3:8f:2d:51:40:31:35:16:2c:
84:d2:9b:8c:7f:3c:96:ef:44:b2:e2:01:3a:04:bd:
b5:80:63:07:e0:72:c8:1a:f7:5e:77:45:ac:53:1f:
44:53:9a:87:d1:be:09:9f:a9:6a:cb:c9:5f:88:85:
64:b0:59:0f:13:69:b8:c9:19:ff:da:7d:97:74:e6:
70:0e:f2:fe:04:f8:26:fa:78:05:13:e6:40:24:16:
fc:63:c8:87:cc:2e:3e:3c:76:1e:27:8d:13:0a:2a:
0e:66:9d:a9:2f:c6:5b:1f:12:23:b4:bf:30:71:ca:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:60:A5:DB:D0:B4:4E:F2:0C:91:83:18:5E:16:09:92:B0:60:4B
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:24:2e:5c:34:9c:36:31:a4:22:67:19:d3:44:d2:ac:7f:
83:64:52:c1:c2:c8:3c:63:8e:0e:80:94:e7:57:09:f5:6e:f2:
e9:09:47:69:82:9c:bf:74:3e:0f:42:bb:20:71:8a:fd:7c:54:
60:da:08:6b:73:a0:bd:ab:c9:73:54:73:28:64:1a:4b:f2:a7:
cf:5a:8a:f0:1d:6e:b4:26:63:c4:4f:e7:22:27:1d:d3:9e:d6:
65:35:8d:c8:e8:7e:c6:5e:36:a2:05:0d:f7:97:23:6e:09:d9:
ad:5d:96:93:80:c7:3e:d1:9c:d0:7b:09:9a:b8:83:39:76:bb:
03:c2:28:88:7c:fe:33:a4:b7:8e:60:ae:be:cb:3e:34:dd:4a:
6b:15:4c:13:03:3b:10:12:95:0a:d4:a5:38:ee:25:92:ff:84:
20:95:00:6b:46:d0:39:16:3e:25:83:91:21:c6:27:f8:e3:44:
bb:9b:48:b0:5b:29:f2:a8:b5:63:54:f4:0b:5f:4a:af:a3:77:
3b:3e:76:68:10:bb:b0:3b:ed:db:73:df:b4:fc:e8:b5:0c:12:
44:7e:d8:c8:81:1a:19:fb:6a:6b:9b:86:95:9b:f0:f0:79:76:
63:a5:bd:74:a4:8b:92:f7:4b:93:29:68:e5:be:72:15:26:5a:
21:a7:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:14:44 2026 by rpki-client