Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: io1m+7Unwa6850w0BgYNMNHyYzbONbagWgKeiMbuO1g=
Subject key identifier: DE:71:37:91:3C:B9:8B:01:38:34:C8:14:11:81:54:55:9C:85:3F:9C
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019E284B4F7957D4AFBBBC355398812BD1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 020B
Signing time: Thu 14 May 2026 21:01:24 +0000
Manifest this update: Thu 14 May 2026 21:01:24 +0000
Manifest next update: Fri 15 May 2026 21:01:24 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: meONlcc0LTMr94Xj9ULEji+RIR0xA74lTOAFN1Y5hcs=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:4f:79:57:d4:af:bb:bc:35:53:98:81:2b:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: May 14 21:01:24 2026 GMT
Not After : May 15 21:01:24 2026 GMT
Subject: CN=de7137913cb98b013834c814118154559c853f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:b3:fd:f5:e5:24:0d:71:8b:9a:4d:e6:95:
da:4a:31:fd:66:77:31:e1:eb:1f:15:99:73:a8:d8:
24:7e:0e:21:12:ee:9b:ea:c2:7b:57:75:8b:79:a0:
8f:58:25:45:51:c3:c8:db:6a:16:87:9a:ad:c0:4d:
a4:f0:32:2a:88:f8:8e:13:c0:b8:3b:38:0b:00:c4:
ce:bf:e6:ed:69:66:3d:a2:85:1f:cf:24:fc:dc:28:
d7:61:9a:52:0f:c4:a1:6e:5b:ce:46:f4:32:92:05:
e0:fc:0d:8b:e8:6e:00:d1:14:a1:79:3d:76:65:7e:
83:ad:c6:59:c2:30:43:20:24:f7:3e:18:90:05:d7:
85:f3:65:2a:dd:03:ba:8f:6e:ae:1c:5c:fc:18:af:
ec:fb:46:4b:ce:ca:8e:84:f0:d4:3f:3b:ee:30:70:
98:a3:d3:00:27:6c:e6:fa:70:8f:d0:3b:63:49:be:
b5:d3:ea:fe:c1:72:d0:1d:e9:35:17:2f:80:54:be:
6f:3a:de:86:f3:ec:3b:b7:21:e4:cb:d8:9a:6f:3e:
c6:31:3b:65:36:1f:f5:fb:54:3d:23:f9:99:f3:84:
7d:58:60:6d:6c:5a:fc:30:5f:70:bb:2d:09:09:6c:
21:96:29:8e:9d:57:41:72:96:f2:31:f2:a7:86:de:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:37:91:3C:B9:8B:01:38:34:C8:14:11:81:54:55:9C:85:3F:9C
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:d8:29:8e:4b:49:9d:b5:65:25:94:7e:20:d6:9c:2e:41:
de:9f:44:bb:50:34:53:3d:f1:58:e1:40:60:d8:7b:2a:1d:da:
ee:f2:d7:e2:80:5e:ab:0c:9c:79:d9:02:2a:e2:ae:9d:6d:70:
22:16:41:93:84:b9:85:ee:1d:f6:c4:8d:e2:96:c0:3c:e5:8c:
3d:de:0f:a7:fc:78:8a:b3:18:a5:35:ed:ae:e9:61:9f:c2:68:
74:52:f7:16:b7:ff:e2:6d:66:bd:97:5f:25:20:63:76:90:89:
af:8f:52:da:19:b7:53:bb:a6:e6:d2:63:b9:b0:d6:42:8f:e4:
74:46:fc:50:d5:cd:29:24:e4:1f:8e:1c:3e:77:eb:b3:f2:3b:
f3:28:51:66:2c:5b:a9:ae:2b:1b:47:d1:6d:62:00:11:95:dd:
d9:5d:22:ff:e7:97:41:93:6b:d3:49:5b:a1:b0:e8:30:c6:16:
3f:df:49:88:88:34:18:41:03:2d:bc:d7:12:1d:6b:d1:77:cb:
0c:ac:60:ac:28:3e:b7:5f:d5:7d:1d:35:39:3f:77:f4:8e:92:
e9:be:d0:4c:c8:6e:04:c0:4a:4d:1e:c4:0f:29:c6:fc:0d:19:
22:f3:0d:c5:50:e1:af:0f:95:94:43:bd:bf:42:d1:a9:4e:fb:
d2:d7:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:17 2026 by rpki-client