Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: 7NPIu1a0gp1yXAvFYjOnacgWaoY2wDrZYOIneMnkqDE=
Subject key identifier: DC:85:5E:62:39:AF:C3:04:4A:09:46:FB:AE:8C:FC:E4:A2:4F:08:45
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019D3865E8E43848060CA21B50CFBDFD5CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: 9oKxHBqsmOA1Yj/m4SnYOHxhdBozD+fy+hA08A6Skkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:e4:38:48:06:0c:a2:1b:50:cf:bd:fd:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=dc855e6239afc3044a0946fbae8cfce4a24f0845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:dc:5f:d3:ba:e4:21:9e:48:bc:00:c6:9b:
45:38:d9:ba:e4:74:12:1b:29:ac:35:ae:8c:7b:6f:
8f:4e:f9:58:71:37:5d:23:d6:4e:51:81:d2:1e:7e:
e7:68:d4:32:42:68:15:86:fb:33:c0:4e:cd:4c:35:
19:8b:2f:60:99:84:50:df:90:f8:a9:2a:4f:c1:f3:
ae:4e:19:26:fc:39:dc:01:c0:eb:4b:aa:80:31:5e:
f8:ee:2f:16:95:da:61:6d:33:34:01:8d:ff:6d:9e:
a7:df:82:3d:82:ed:8a:ea:dc:47:58:73:67:c4:49:
a2:55:89:e8:d9:01:8e:4f:ef:7c:f4:61:b8:24:7a:
d1:77:de:28:98:4b:6b:8b:74:09:e7:7b:bc:89:0c:
a5:8f:45:da:5e:5f:42:21:a7:2f:73:fc:dc:44:3e:
0b:64:6d:24:a5:f1:34:99:7b:cd:e2:30:09:e4:4d:
c3:66:80:50:80:3c:4d:79:b4:b2:cf:f5:c8:1c:c0:
0d:6b:12:7b:89:97:39:dd:40:f2:b4:e8:5c:cb:19:
13:fb:7c:fc:7f:01:52:73:93:98:ba:f5:4c:50:81:
02:20:ce:f3:b6:b9:80:33:98:b3:1f:01:35:f4:04:
3a:21:cd:dd:a6:32:b6:29:a5:d8:1c:03:4f:b3:b3:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:5E:62:39:AF:C3:04:4A:09:46:FB:AE:8C:FC:E4:A2:4F:08:45
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bd:76:fe:60:27:21:c8:67:af:e6:b9:83:ed:b8:a0:d0:11:
0d:72:1c:b5:e2:be:8c:d1:d3:a9:e9:22:da:61:14:4a:13:f8:
8b:21:39:92:fb:f4:4f:4a:c3:23:d2:0a:be:45:27:91:60:48:
73:2b:cd:bd:6a:78:da:bb:1b:a4:ce:65:bf:1b:41:54:f7:8e:
1d:3f:32:2e:da:bc:7c:05:5d:23:fc:ed:e1:44:e8:d7:cf:f5:
70:f0:3d:24:37:9a:04:7d:f4:d2:c7:2f:dc:4e:10:18:14:ba:
4d:7a:dc:e2:5d:96:dc:14:ef:b8:da:d2:16:67:15:be:1e:49:
55:10:3b:8c:8c:8d:63:8a:a3:0c:f2:8f:cb:48:f6:99:a5:67:
2b:c2:4c:90:3c:aa:1b:79:5b:97:6c:0b:71:a6:b1:0c:6f:88:
58:16:48:7b:78:4a:7b:f0:3e:a6:b2:9c:0d:04:7f:29:78:95:
d9:87:8e:10:a6:f8:48:ce:17:0d:14:2d:08:9b:18:63:20:3a:
71:91:73:10:ec:0f:2e:b9:ce:11:ca:39:72:b3:f2:c5:49:6c:
31:e9:3a:6c:6d:e6:da:90:59:1b:42:b3:50:88:c0:f6:cf:f1:
75:c4:f6:bb:a3:b8:1a:91:1e:42:6e:46:15:61:b7:3a:f7:d0:
b2:b8:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:08 2026 by rpki-client