Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File: jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier: fj1X3q7Aqy1QqP4k56H1w+xdT8ReBXqHQEw2kWWWgQg=
Subject key identifier: 6F:1A:A5:8A:7A:3B:43:63:4C:8E:5D:3A:87:91:4A:E1:EF:2C:D1:72
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer: /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial: 019D390A40E7FACD81BF476CAA5DBD09640E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number: 06C6
Signing time: Sun 29 Mar 2026 10:01:06 +0000
Manifest this update: Sun 29 Mar 2026 10:01:06 +0000
Manifest next update: Mon 30 Mar 2026 10:01:06 +0000
Files and hashes: 1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: pTml6wHFNTZmRq4xUJWouA7nDbWarwlWGT2B/DClrqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:40:e7:fa:cd:81:bf:47:6c:aa:5d:bd:09:64:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Validity
Not Before: Mar 29 10:01:06 2026 GMT
Not After : Mar 30 10:01:06 2026 GMT
Subject: CN=6f1aa58a7a3b43634c8e5d3a87914ae1ef2cd172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:b3:63:20:28:c1:9c:3b:b8:f6:b2:13:dc:
c4:ca:2a:f3:1d:90:49:c7:eb:45:9f:f3:76:4b:2b:
1f:b6:9f:26:65:dd:32:22:a4:db:e2:34:ca:57:61:
ec:62:28:24:a3:dc:e9:c0:dd:87:d8:93:b3:fe:4c:
c8:c8:a0:e7:91:c5:25:97:83:72:d7:d3:fb:e6:7f:
4c:db:ac:af:55:3a:01:c6:71:b0:06:8c:fb:b5:8d:
2c:03:dd:c8:c4:e8:70:a3:2a:00:37:85:e5:d2:90:
60:1e:4c:93:37:d0:1a:6c:50:8f:96:15:25:6e:7b:
db:33:46:cb:26:9d:48:ca:a4:06:f8:58:13:5c:e2:
6a:e1:7a:59:7a:63:92:97:f5:ad:b1:8e:b0:ac:4a:
1f:8b:e8:f5:34:32:f9:20:c2:f3:12:2e:64:63:99:
1b:52:12:1f:27:47:72:6e:fd:c4:ac:9f:92:07:58:
b7:d5:e8:4b:82:77:eb:f6:91:af:8d:7c:f3:51:d8:
c5:a1:13:0a:48:f7:68:17:c4:26:66:e7:c3:ed:03:
6d:00:62:08:f3:2e:fc:e1:14:cd:73:54:62:53:08:
50:2b:74:1e:5c:35:6f:f7:97:be:24:64:f8:10:10:
c4:d0:c3:02:1b:3b:ae:d8:ce:68:33:e0:78:4c:53:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1A:A5:8A:7A:3B:43:63:4C:8E:5D:3A:87:91:4A:E1:EF:2C:D1:72
X509v3 Authority Key Identifier:
keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b7:96:87:d6:25:0a:34:eb:85:96:a6:99:63:15:2e:8a:0c:
5c:8b:bd:0a:13:e2:6e:f0:49:ad:d0:48:b7:ff:17:b0:fa:36:
45:44:1f:f9:c5:0e:e6:da:91:20:d6:cf:72:d8:0e:05:1d:90:
cd:6f:ed:d7:7f:90:4a:08:1a:e0:3c:3c:12:08:be:83:5d:c7:
e5:f8:95:dc:48:77:bd:00:9a:5a:d5:12:61:43:cd:e3:15:55:
5b:1a:0e:79:59:62:5c:a0:14:fe:49:f9:e8:a9:84:6a:d3:ce:
37:43:2c:0c:60:07:b8:13:06:56:9d:36:55:a2:42:a2:f5:b8:
88:fd:93:60:d1:da:3d:65:c2:ea:00:24:0a:a7:ca:c7:9d:2c:
72:90:dd:52:7f:6c:20:f8:69:31:bf:0b:22:28:08:98:3c:dd:
d0:1b:a0:45:da:57:96:03:7b:8f:6a:4b:14:40:7c:00:4f:1e:
04:dc:97:1a:97:a4:fa:83:72:5c:fb:4d:cf:54:72:4b:5a:4d:
bd:6c:7e:d7:23:5f:c4:46:44:a7:db:38:b5:86:1e:f7:4c:9b:
d9:72:34:68:4d:38:a7:80:26:16:fe:07:45:bf:73:15:ba:73:
dd:b0:94:06:7e:6f:aa:6e:5c:99:a7:af:84:7b:fe:d4:fa:62:
ad:9a:84:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CkDn+s2Bv0dsql29CWQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWMwN2U3ZThkZTg1OGIyZTY4MTNkMDBmOWIzOTkyZGY1
MzgyN2YwHhcNMjYwMzI5MTAwMTA2WhcNMjYwMzMwMTAwMTA2WjAzMTEwLwYDVQQD
Eyg2ZjFhYTU4YTdhM2I0MzYzNGM4ZTVkM2E4NzkxNGFlMWVmMmNkMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w2zYyAowZw7uPayE9zEyirzHZBJ
x+tFn/N2Sysftp8mZd0yIqTb4jTKV2HsYigko9zpwN2H2JOz/kzIyKDnkcUll4Ny
19P75n9M26yvVToBxnGwBoz7tY0sA93IxOhwoyoAN4Xl0pBgHkyTN9AabFCPlhUl
bnvbM0bLJp1IyqQG+FgTXOJq4XpZemOSl/WtsY6wrEofi+j1NDL5IMLzEi5kY5kb
UhIfJ0dybv3ErJ+SB1i31ehLgnfr9pGvjXzzUdjFoRMKSPdoF8QmZufD7QNtAGII
8y784RTNc1RiUwhQK3QeXDVv95e+JGT4EBDE0MMCGzuu2M5oM+B4TFMTcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8apYp6O0NjTI5dOoeRSuHvLNFyMB8GA1UdIwQY
MBaAFI2cB+fo3oWLLmgT0A+bOZLfU4J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYt
ZjM2M2M1MTM4NzAyLzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYtZjM2M2M1MTM4NzAy
LzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADreWh9Yl
CjTrhZammWMVLooMXIu9ChPibvBJrdBIt/8XsPo2RUQf+cUO5tqRINbPctgOBR2Q
zW/t13+QSgga4Dw8Egi+g13H5fiV3Eh3vQCaWtUSYUPN4xVVWxoOeVliXKAU/kn5
6KmEatPON0MsDGAHuBMGVp02VaJCovW4iP2TYNHaPWXC6gAkCqfKx50scpDdUn9s
IPhpMb8LIigImDzd0BugRdpXlgN7j2pLFEB8AE8eBNyXGpek+oNyXPtNz1RyS1pN
vWx+1yNfxEZEp9s4tYYe90yb2XI0aE04p4AmFv4HRb9zFbpz3bCUBn5vqm5cmaev
hHv+1PpirZqEcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:28 2026 by rpki-client