Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: v3MtkKdGvc974quh8IJke/I7SQ18LikA+3GNs/VMCMk=
Subject key identifier: 16:DA:48:5D:52:3A:48:BA:C3:B6:50:83:4F:42:D3:A3:93:5D:AD:82
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 019D3752A3F182D571FAF1023CC56908D473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:55 +0000
Manifest this update: Sun 29 Mar 2026 02:00:55 +0000
Manifest next update: Mon 30 Mar 2026 02:00:55 +0000
Files and hashes: 1: jkhYRK4apXHLHJ4HFanP0SfT4FA.roa (hash: Q8Lk/xTao2v2+r34JtDDrlWHGb5NTl6AAYXGaL/XHn8=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: W1jw8vj/eo9LmTF1u5l8a/U/7KQiJ/afQdkUEMFF82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a3:f1:82:d5:71:fa:f1:02:3c:c5:69:08:d4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Mar 29 02:00:55 2026 GMT
Not After : Mar 30 02:00:55 2026 GMT
Subject: CN=16da485d523a48bac3b650834f42d3a3935dad82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:a7:37:f9:55:1d:a0:16:4e:8e:b7:73:76:
05:4d:f0:fc:51:46:5b:3c:5e:9d:19:77:14:a7:d2:
47:7b:58:3e:7d:78:1a:40:c2:8e:12:90:3c:ad:62:
1d:ce:5a:28:37:74:5f:f2:b5:b8:9c:ce:c8:65:9c:
a4:f9:33:1d:a4:b8:38:73:f7:a1:0c:79:74:1e:e0:
df:b7:bb:ea:7e:ce:04:55:04:e7:5f:8c:07:ab:3d:
5a:a2:94:e0:7a:50:2a:4e:5c:1b:48:02:fd:12:b7:
86:22:5f:42:7c:ea:5c:33:4b:c9:d4:8b:48:d3:58:
e6:12:fd:a2:30:fb:9f:4c:36:85:8a:64:e2:d6:dd:
c1:62:7e:30:d4:21:34:d8:02:62:60:11:7b:12:37:
08:a2:6c:7e:fd:20:79:34:2d:2e:9e:d3:41:05:cb:
49:89:e3:ab:90:af:99:d2:67:e9:28:e1:81:46:32:
68:48:85:8a:af:18:31:bf:ec:44:fa:92:7c:88:6f:
ed:cd:bb:45:fc:65:29:4d:37:da:24:0d:b4:6b:4a:
c3:82:9e:70:c0:e8:69:34:17:d0:f3:e4:de:51:41:
34:2b:c1:4d:b8:ec:5b:79:cc:3b:e1:f3:c2:00:36:
e0:45:e1:47:b0:ce:7e:0e:66:c6:bb:5f:88:ee:d0:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DA:48:5D:52:3A:48:BA:C3:B6:50:83:4F:42:D3:A3:93:5D:AD:82
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:06:e8:3b:6b:a6:5b:ab:1c:88:7f:95:c7:38:1b:6b:0f:d4:
9f:31:9f:d9:49:bc:25:fa:85:af:9c:93:06:2a:dc:a4:65:a9:
ef:e4:5e:6f:aa:f6:46:df:5e:4b:f5:91:11:a6:89:a1:88:94:
d9:b6:b6:0e:4c:f0:14:3f:06:9d:32:3c:a0:61:cf:bd:21:d7:
bd:d2:0e:f8:22:37:46:0d:3a:29:be:41:06:95:b0:17:24:f1:
d0:3f:8b:1f:ac:0d:ed:d2:77:34:bf:6f:d3:71:1d:17:ad:1f:
39:13:78:54:14:21:ca:c4:19:c9:3f:ab:a8:49:f9:c3:f3:17:
a0:53:56:49:65:65:9d:83:e3:78:cf:ed:d1:e6:c4:74:9a:9b:
b3:d5:0e:b4:d1:3a:9a:92:ef:e1:7f:ee:2a:95:ce:ec:b4:3e:
12:c8:76:91:d8:4d:e5:7c:47:6f:fa:3f:6f:5b:d0:05:d0:5c:
ba:4b:e8:62:cd:2e:ab:7f:8d:d1:24:8a:65:c7:15:65:99:93:
f5:25:d5:5f:d5:3b:3b:04:98:4f:d6:71:5b:ff:fa:1d:54:77:
b8:78:63:cb:c9:25:4f:7a:70:33:6a:ff:ed:af:2b:0d:2a:c7:
51:8f:4d:f8:b3:ce:cd:29:35:31:43:f2:77:e9:cc:85:f3:84:
26:ed:13:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UqPxgtVx+vECPMVpCNRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlM2NjNTY3ZmViZmUzNDg3OGFlYjkxMzg2MWNmMDYwMGEy
ODM5MDMwHhcNMjYwMzI5MDIwMDU1WhcNMjYwMzMwMDIwMDU1WjAzMTEwLwYDVQQD
EygxNmRhNDg1ZDUyM2E0OGJhYzNiNjUwODM0ZjQyZDNhMzkzNWRhZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZKnN/lVHaAWTo63c3YFTfD8UUZb
PF6dGXcUp9JHe1g+fXgaQMKOEpA8rWIdzlooN3Rf8rW4nM7IZZyk+TMdpLg4c/eh
DHl0HuDft7vqfs4EVQTnX4wHqz1aopTgelAqTlwbSAL9EreGIl9CfOpcM0vJ1ItI
01jmEv2iMPufTDaFimTi1t3BYn4w1CE02AJiYBF7EjcIomx+/SB5NC0untNBBctJ
ieOrkK+Z0mfpKOGBRjJoSIWKrxgxv+xE+pJ8iG/tzbtF/GUpTTfaJA20a0rDgp5w
wOhpNBfQ8+TeUUE0K8FNuOxbecw74fPCADbgReFHsM5+DmbGu1+I7tDeZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbaSF1SOki6w7ZQg09C06OTXa2CMB8GA1UdIwQY
MBaAFK48xWf+v+NIeK65E4Yc8GAKKDkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yOTkyNzgtYzU3Yy00MzU0LWI5NjYt
OWZiMjI0YmU4YjA4LzEvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yOTkyNzgtYzU3Yy00MzU0LWI5NjYtOWZiMjI0YmU4YjA4
LzEvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgboO2um
W6sciH+Vxzgbaw/UnzGf2Um8JfqFr5yTBircpGWp7+Reb6r2Rt9eS/WREaaJoYiU
2ba2DkzwFD8GnTI8oGHPvSHXvdIO+CI3Rg06Kb5BBpWwFyTx0D+LH6wN7dJ3NL9v
03EdF60fORN4VBQhysQZyT+rqEn5w/MXoFNWSWVlnYPjeM/t0ebEdJqbs9UOtNE6
mpLv4X/uKpXO7LQ+Esh2kdhN5XxHb/o/b1vQBdBcukvoYs0uq3+N0SSKZccVZZmT
9SXVX9U7OwSYT9ZxW//6HVR3uHhjy8klT3pwM2r/7a8rDSrHUY9N+LPOzSk1MUPy
d+nMhfOEJu0TiQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:12 2026 by rpki-client