Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: JPL75e4KpEFgWhLRw9l0DL2gME1fckk7nqGARcyf86Q=
Subject key identifier: 79:EF:70:B4:E4:58:45:8F:42:CF:0D:A0:93:92:15:36:3D:D5:E5:64
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019F11F832A0827D0AE6BD8F1C10BB183ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 0284
Signing time: Mon 29 Jun 2026 06:01:46 +0000
Manifest this update: Mon 29 Jun 2026 06:01:46 +0000
Manifest next update: Tue 30 Jun 2026 06:01:46 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: 52FfHkivKvgBmge8Lqkiz5WVC/d/12oG1fLqOOrQjzM=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:32:a0:82:7d:0a:e6:bd:8f:1c:10:bb:18:3a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Jun 29 06:01:46 2026 GMT
Not After : Jun 30 06:01:46 2026 GMT
Subject: CN=79ef70b4e458458f42cf0da0939215363dd5e564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:37:83:2f:9b:37:57:a4:86:25:1d:06:2a:
1e:cc:be:5f:8a:67:06:69:37:55:3c:c8:57:62:c0:
a5:ad:df:cc:8d:d3:80:72:4f:27:d1:81:cc:66:0e:
a8:96:7c:85:26:b8:bf:e7:e9:00:92:71:65:0d:ac:
9a:43:db:49:78:20:af:df:43:e9:27:4b:0e:ff:34:
58:7d:a3:de:91:34:1b:d0:b6:76:57:81:fe:9b:da:
b6:dd:e7:41:bd:64:35:6d:7a:4b:c9:f4:67:bc:f7:
8a:60:86:7c:48:8c:13:91:ff:6b:02:75:6c:8d:1d:
ef:72:19:ed:39:89:ae:ac:3e:5f:0d:a3:6e:46:a1:
7d:9b:d4:b5:87:a0:14:e8:3b:39:de:46:b0:b4:0e:
02:bf:62:34:ad:ae:37:f9:31:37:e1:a5:f1:03:0d:
15:ff:5e:44:82:92:6a:02:5c:14:d5:26:a5:87:4d:
87:52:bb:f0:ea:2e:ed:b8:eb:2e:07:44:c6:7a:ea:
dc:50:a6:70:8e:00:ee:a0:15:30:c6:5f:06:67:6c:
5b:39:19:59:73:8d:cc:f4:e5:7c:ca:e3:58:69:76:
62:e2:e7:af:a6:06:6f:4f:72:cd:70:44:3c:cd:61:
57:51:3d:5c:40:e0:51:fc:fe:c5:12:10:12:49:e3:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:70:B4:E4:58:45:8F:42:CF:0D:A0:93:92:15:36:3D:D5:E5:64
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cd:37:74:63:82:c0:1c:9f:14:56:c7:d0:b7:3a:65:dc:4d:
6c:d3:93:ef:57:60:09:ec:3e:e7:db:6a:b6:c9:d2:98:7b:2c:
fe:fc:15:b8:d3:fe:46:95:05:20:2b:2f:83:e3:dd:d6:d6:a9:
1b:3f:3b:91:e7:01:d5:a0:c8:c6:c6:fd:72:ef:80:77:a1:65:
64:fe:06:87:3e:7f:2a:3e:65:cc:3f:7e:26:92:b0:f4:f8:d9:
af:89:03:6c:39:b5:41:19:69:9e:6d:43:69:7f:67:bd:e5:92:
45:bb:75:28:11:d7:38:f2:f2:5d:44:55:5c:d8:ba:21:6d:0c:
f2:43:24:7b:81:0a:0a:35:a7:aa:4a:23:12:24:8b:1f:07:69:
1d:30:56:49:08:a8:4a:b4:73:95:5a:df:cc:6e:ac:89:3e:10:
c6:b3:3c:f9:66:17:67:26:1d:9a:a9:7e:f9:54:d0:fe:ec:bb:
62:c9:b0:18:04:b6:7f:b8:f2:8b:8a:26:68:6d:18:ea:5c:30:
a5:04:d6:dc:9f:b9:e8:68:56:33:4e:2e:ee:a6:33:9a:d6:42:
21:05:50:d1:47:d4:91:03:3f:44:d8:c7:63:9f:1f:08:ac:45:
d0:e7:ee:1e:4f:ac:c7:0c:fc:3b:fa:b4:d3:32:96:29:d4:55:
73:24:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:30 2026 by rpki-client