Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: 1RhIAloxklWjLrVLyJ1VaoXFtRt3o1T4OwS4uKDuoiw=
Subject key identifier: 37:A8:31:C2:D0:58:39:38:76:44:CA:27:E5:85:DE:D7:0E:7C:63:55
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019E318524CDB0C2287744F0A8E325850BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 16:01:09 +0000
Manifest this update: Sat 16 May 2026 16:01:09 +0000
Manifest next update: Sun 17 May 2026 16:01:09 +0000
Files and hashes: 1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: Qm4tPQjzJPxt0PKnCMDN1bTr43jRyeg/0M8B8fHRBKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:24:cd:b0:c2:28:77:44:f0:a8:e3:25:85:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: May 16 16:01:09 2026 GMT
Not After : May 17 16:01:09 2026 GMT
Subject: CN=37a831c2d05839387644ca27e585ded70e7c6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:93:4a:11:a1:90:d4:bc:7f:8e:a6:f2:3b:
d4:7b:cd:d3:88:c1:1a:6c:bc:e6:fe:31:40:66:9c:
9b:6d:63:c3:9c:a5:90:13:83:d5:7f:b5:4c:29:52:
d2:59:85:39:16:b3:66:a9:f3:90:24:2d:65:8f:e4:
2a:e1:da:05:2b:fb:cb:be:be:87:6f:2a:04:90:76:
d7:b7:20:d8:7f:2d:13:0c:b5:cd:de:20:2c:71:2a:
a4:e1:57:d3:ce:1b:05:ad:41:f7:70:99:35:49:60:
e8:ec:ff:01:62:04:20:53:27:a9:c0:57:1b:26:b2:
af:32:94:7b:a3:3e:f5:c5:aa:34:c7:fd:63:e9:08:
b3:c7:8c:42:54:8f:f4:2f:84:0f:2c:6c:24:4b:78:
55:9b:f8:d2:7f:db:5c:43:b8:3b:b3:78:86:1d:9e:
7a:67:76:72:0f:13:a8:06:04:d6:8a:b7:13:c0:b1:
e3:8d:20:36:76:f3:eb:5b:e2:e8:01:ef:35:3a:ab:
47:ed:72:85:c4:bc:1e:c8:56:78:85:1c:96:b8:3b:
0d:1c:4a:df:36:3d:d0:07:3e:17:22:60:91:18:60:
9e:17:7b:d8:7f:30:4a:e2:40:b3:49:11:50:5d:d7:
c6:53:83:5b:4d:75:c7:cd:6d:b9:66:81:a0:45:2f:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A8:31:C2:D0:58:39:38:76:44:CA:27:E5:85:DE:D7:0E:7C:63:55
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:83:67:39:51:c2:8c:64:3d:88:09:0a:34:03:97:f6:4f:ed:
90:6e:0b:d3:1d:51:d0:50:99:c9:63:41:3c:d2:4b:31:44:ea:
f7:76:c8:90:af:70:a2:79:aa:22:71:be:13:da:63:9f:2f:8a:
b7:7d:e8:e5:ec:dd:c6:90:80:9a:95:6e:60:f9:e1:72:9d:d9:
ed:65:80:49:e6:9c:92:1f:a6:51:e8:17:41:d2:15:10:63:cd:
0e:cf:76:80:1b:8e:1c:89:8b:83:f8:f3:a7:76:b0:d4:ee:ec:
57:c0:fb:e1:22:08:32:37:e1:7b:9b:58:0b:37:cf:f1:1d:24:
f5:d1:30:b1:20:d1:50:cb:af:a4:1e:c1:1e:2f:d5:7a:50:d6:
6a:f1:f4:56:0e:91:21:1f:58:35:5b:17:69:37:69:86:06:85:
47:ec:a3:85:d9:19:24:d2:b2:d7:8c:68:28:e4:59:1f:96:c0:
b6:d6:b3:59:97:8c:3f:b4:fc:43:ea:1c:ef:58:c2:dc:78:59:
cc:98:31:c6:91:34:c3:e5:ea:84:7f:af:0b:6a:71:ac:2e:42:
7b:a4:09:df:88:60:e2:0d:38:81:10:07:d0:aa:22:5f:ee:e0:
8a:1a:d2:36:bf:48:61:d3:32:a3:8b:f8:2b:d6:80:9d:a3:bd:
ae:c5:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:11 2026 by rpki-client