Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: bjj+Jn7Fn0RIn4FK7zf8rz+ihUaQHLXof4A9ZPOPJSQ=
Subject key identifier: 30:B8:18:5E:10:72:95:EE:C9:1B:9F:D3:42:03:A4:95:6B:32:50:69
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 01A03D4CF8A4567761DE9C1399DD2708415C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 031F
Signing time: Wed 26 Aug 2026 09:00:49 +0000
Manifest this update: Wed 26 Aug 2026 09:00:49 +0000
Manifest next update: Thu 27 Aug 2026 09:00:49 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: U/btuYrqYRGjz6wAU/qVqVAx9hDNjjrgmVmZUCVWAqM=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4c:f8:a4:56:77:61:de:9c:13:99:dd:27:08:41:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Aug 26 09:00:49 2026 GMT
Not After : Aug 27 09:00:49 2026 GMT
Subject: CN=30b8185e107295eec91b9fd34203a4956b325069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:46:50:86:c4:df:81:2a:5d:d4:8b:14:70:
51:1f:03:f3:bd:ce:60:8e:a8:c8:f2:e8:3a:b0:08:
9c:41:ae:c2:98:2b:34:76:42:cc:26:de:76:b3:9e:
ac:03:be:22:b9:f3:b2:35:28:44:49:fe:68:b7:24:
58:b0:90:42:33:a8:7c:c8:ce:72:ed:85:8a:39:9d:
d5:ef:aa:3e:56:aa:63:f7:f3:09:a4:f9:68:7c:56:
ad:4c:a4:00:3b:cf:f9:4c:22:3c:6c:c2:82:77:b6:
0f:80:68:4d:3c:8f:28:1b:83:cb:01:67:bc:b8:a0:
b9:15:23:bd:15:90:5f:3a:3f:e3:c0:66:a2:e7:b5:
f6:05:b3:fc:d4:80:40:53:bf:36:db:b6:83:47:cf:
14:fc:22:66:f1:50:db:ab:04:24:fe:f5:42:69:e0:
0b:7f:97:d4:f5:6f:a0:6b:9c:78:e2:5c:31:02:ad:
d7:ab:01:61:4a:99:e8:e7:20:b8:26:b2:9f:93:36:
2f:7f:d0:cd:f2:9b:26:71:ff:99:bb:36:96:ec:6e:
b1:5f:be:b9:f9:c6:7a:9b:5f:0d:9c:6f:55:a3:aa:
e1:4b:bb:7d:19:10:2a:24:ed:f9:7b:64:2e:09:50:
b6:b9:3f:15:eb:a3:df:f9:ae:7e:82:a8:96:54:75:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:18:5E:10:72:95:EE:C9:1B:9F:D3:42:03:A4:95:6B:32:50:69
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:12:21:06:98:da:bb:fc:7f:07:31:d8:94:f9:5e:84:8d:cb:
cf:fe:69:3e:b2:6b:d1:30:8e:0a:fb:2b:52:1e:a0:5b:df:14:
c3:06:9b:10:ae:9d:11:c3:ec:7d:53:83:a1:d1:e7:19:ae:26:
46:8b:5c:0c:8c:8e:a6:4d:fc:9e:c8:3c:7f:58:cf:40:c2:67:
b9:71:18:a0:50:73:7f:b8:6d:6a:af:5f:e0:3a:f5:5a:dd:16:
72:e9:18:57:d0:03:b6:98:c5:98:07:30:00:ab:46:76:16:8a:
62:fb:11:33:47:19:db:f7:a0:ea:ac:52:10:97:65:52:53:18:
60:ad:bc:54:b5:bf:b3:79:d1:e1:fe:c9:43:65:73:7e:d2:42:
a8:96:b7:2b:23:24:2a:c1:f9:3a:77:16:d1:ed:55:e9:d9:96:
a7:2a:3e:d6:59:5c:db:10:1a:20:b4:7d:fb:eb:85:92:4f:a8:
10:86:9b:d3:68:2b:d7:b2:20:20:60:86:a2:f8:25:cd:23:4f:
56:9e:01:50:fb:37:55:40:f6:96:db:bf:56:ac:6f:bd:73:03:
19:9f:44:d6:5a:51:ec:e6:e8:1b:53:d5:82:e8:8b:b5:b0:04:
d7:55:4a:46:24:e1:e4:cf:60:83:15:cd:80:74:49:84:32:67:
0e:80:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:03:42 2026 by rpki-client