Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
File: JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft (raw, json)
Hash identifier: OXj5MXEFhkox+iJFgG1vTjcSouL4RLDDJKK7+v5fyn4=
Subject key identifier: 48:BA:64:3D:A4:A5:1F:96:B6:61:16:27:26:E6:D7:F7:8A:DA:E4:6F
Authority key identifier: 27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA
Certificate issuer: /CN=2736cb723aedd55aec34f400b76cc4678ccba1ba
Certificate serial: 019D389BBC598AC77159F9F77C2DE90A4506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
Manifest number: 01E3
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl (hash: VvghUawuU9NAG/Pf0ush34MoyIOMAS6ZhxqYWvgJAXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bc:59:8a:c7:71:59:f9:f7:7c:2d:e9:0a:45:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2736cb723aedd55aec34f400b76cc4678ccba1ba
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=48ba643da4a51f96b661162726e6d7f78adae46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:9f:77:a0:96:ff:34:c8:0c:4d:b9:a4:f5:
fc:bb:12:33:5a:5d:08:79:39:92:70:5b:c3:11:0f:
05:60:b3:c9:7a:3d:e3:ee:9e:ca:cc:5a:8a:94:21:
77:11:bd:a8:5f:96:b6:45:0c:89:17:3a:98:73:b0:
d5:6b:8c:ce:ef:22:9d:7f:ac:ea:23:39:76:22:89:
93:19:70:ab:b0:60:0a:af:44:20:89:8b:eb:84:15:
d5:83:4e:d9:37:2a:b4:b4:83:92:81:cd:26:c3:6c:
5b:22:20:da:39:2a:7c:af:b9:f0:22:b6:e2:0a:a3:
c1:29:b2:d6:ac:c3:10:25:3a:12:46:01:1e:30:39:
0c:60:74:2c:3f:d6:d7:da:47:4e:36:5c:9c:67:56:
e1:5b:09:59:32:d7:ef:af:67:26:32:bb:af:54:d6:
e3:0e:11:85:00:68:f8:d1:40:60:66:09:d2:62:29:
96:c2:66:92:89:c2:bc:61:19:53:20:62:ae:57:7e:
1e:3e:80:34:07:9b:17:3c:9f:56:62:48:5b:9e:45:
3d:a9:ec:93:20:2a:9b:05:80:59:54:40:ef:0d:a0:
80:92:a9:a4:61:9d:b1:17:b2:d3:02:99:36:78:f2:
fa:78:6e:ff:57:7d:de:79:e6:b2:0a:60:0a:58:a3:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BA:64:3D:A4:A5:1F:96:B6:61:16:27:26:E6:D7:F7:8A:DA:E4:6F
X509v3 Authority Key Identifier:
keyid:27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:64:ee:ed:a7:b8:d7:69:9d:3b:b5:d0:6e:69:b3:ed:99:38:
b6:03:11:ec:53:84:d9:25:68:d0:68:43:30:11:89:26:1b:f8:
1d:60:bf:76:5b:5a:3e:4d:62:8d:83:0c:3a:95:61:8f:4d:29:
e7:ca:4b:a3:42:fe:30:11:aa:30:6f:9b:ca:86:c6:e2:f9:5c:
cf:ab:15:ee:26:a8:ef:cf:d8:dd:2e:5d:b6:36:f9:c4:4b:d9:
3c:93:17:33:9d:d5:fe:18:32:24:75:0b:f8:70:33:2d:96:a3:
63:c0:66:53:fd:3e:7e:dd:b2:25:65:5f:ac:87:c7:9c:c9:1c:
6c:6a:89:09:fe:d1:35:67:ec:39:47:11:40:eb:c0:b0:73:76:
2b:5a:42:7a:cb:97:54:77:51:8d:bf:09:79:c7:c9:ad:e5:63:
45:35:49:87:db:d0:58:49:ca:32:38:e5:6d:24:19:f4:42:fa:
95:7e:4f:73:e3:05:ce:6f:92:0f:c9:0f:03:b3:33:c7:a5:6c:
cc:10:69:ef:99:02:84:fe:80:ad:53:bb:ea:23:5e:a4:5b:af:
4a:52:14:fc:68:7a:38:41:5c:3c:a1:ec:a3:76:62:00:b6:9e:
af:d5:8f:e1:0c:32:2b:45:90:68:b7:3d:a7:5e:0d:8b:1b:7c:
a5:a7:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:34 2026 by rpki-client