Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: SrQmVEzhzX5+d0qiaiYvecKEVa+A1L6S9oj/GJ9CTys=
Subject key identifier: D1:8B:EA:B2:78:13:36:78:30:73:E3:FC:B1:F5:4F:10:09:EB:76:96
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019D38D300F58E3EB7570BCD1D4723401335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 018F
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: HSxAdJDN2Se2qehgBtmalEcO1/DMjthEdK0ABiuHQ2g=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:00:f5:8e:3e:b7:57:0b:cd:1d:47:23:40:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=d18beab2781336783073e3fcb1f54f1009eb7696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:8a:c0:f2:d2:97:79:13:ef:02:e0:9c:1c:
7e:e9:3a:5d:fc:18:be:dd:02:30:3a:8e:70:09:2b:
f4:68:0a:88:0a:69:5c:34:6a:6d:74:10:77:13:7b:
90:ee:ad:5f:94:a8:ed:d2:b0:6d:fe:ba:53:52:91:
f6:3b:48:bb:86:bb:9f:7b:f2:54:6f:e0:e1:06:b5:
db:0c:52:0b:45:69:1d:ae:ad:eb:df:35:48:0c:5b:
c3:b3:02:b2:f4:d7:d6:22:39:6d:fd:3c:84:15:01:
4b:25:eb:fb:05:65:5c:d3:39:b2:2f:83:48:e8:34:
95:fd:e8:b5:68:0d:08:28:9b:7b:88:fd:1a:60:ef:
dd:cb:c5:45:e4:f3:0c:f6:76:1a:85:9a:96:69:7c:
1c:65:fa:b9:13:c1:69:6c:c9:23:16:ef:a7:d5:72:
a7:4f:06:19:5c:65:c1:e2:ca:d8:e1:d2:9c:e0:dd:
ab:c8:05:2f:2d:e3:a2:54:92:24:24:d8:7b:63:ad:
61:e8:77:2a:eb:60:f2:52:44:a9:a0:a8:e6:dc:b3:
36:54:17:02:77:63:56:fb:00:7e:c9:39:91:70:95:
3f:8b:f9:88:b3:2e:9e:20:2e:9f:cb:89:1c:8c:55:
bd:0d:d7:a7:51:21:6d:78:1f:6a:bc:80:6b:57:b1:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:EA:B2:78:13:36:78:30:73:E3:FC:B1:F5:4F:10:09:EB:76:96
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:78:d7:12:c2:84:2c:3d:22:94:11:12:1c:4f:60:9f:b5:8d:
a3:59:29:4f:7e:3f:c7:b5:67:d5:b5:c9:bf:eb:3d:54:36:12:
c4:d5:ed:e8:21:a0:7e:3a:ae:5c:b6:87:d2:07:01:8f:1e:2f:
2a:07:52:9f:e2:10:f0:55:9d:f7:25:fd:2e:0a:7a:d4:2f:ab:
e9:7e:45:61:8f:23:a2:58:55:ea:45:0c:d7:9e:84:a4:ce:cb:
b5:b2:61:f5:49:91:13:a2:4d:7b:6f:10:49:55:c9:d3:3d:f2:
e1:d7:af:90:6d:2f:f4:26:8e:95:10:72:e8:1a:42:f3:aa:4a:
ea:b0:05:22:24:02:4b:8d:5c:dd:4f:bd:30:7e:08:7f:41:a2:
71:d2:54:f2:54:59:ee:70:a1:25:19:1e:59:e9:bb:48:b7:96:
76:d6:6a:77:39:9c:fb:71:23:18:c8:c8:d1:95:66:e8:55:a2:
e9:b0:e8:62:8b:7f:2e:35:3e:6e:30:da:de:ec:bb:30:4c:83:
c4:46:c3:14:66:cc:08:99:ff:e7:b0:4e:2c:3d:a6:4f:03:ca:
b3:e1:9c:1b:11:b3:13:24:91:42:aa:57:4c:0b:1a:28:ad:a7:
69:5e:30:25:83:5c:b3:88:b6:6a:c0:a6:6d:52:69:ff:da:6e:
13:48:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:07 2026 by rpki-client