Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier: QM2uEZLGT2uDcyzPyWTJkgvEP0P/uUBtt+Dm3WMySGs=
Subject key identifier: DC:E4:48:3E:B2:CC:0F:7F:97:AE:EA:71:CF:4F:26:BE:55:76:69:18
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 019D39778564F18FA608071C0F1F83BADEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:27 +0000
Manifest this update: Sun 29 Mar 2026 12:00:27 +0000
Manifest next update: Mon 30 Mar 2026 12:00:27 +0000
Files and hashes: 1: AanVvurhzUc2_YlhTUVI0EdSJQM.roa (hash: D8Ey7qoWHGx1lJPT+RSbE0DodoNoh42qXfRsH7R0814=)
2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: W6HOeH8tT5sRCh90VLYo3o1u1YRx5EMIdGcxvJ8bIbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:85:64:f1:8f:a6:08:07:1c:0f:1f:83:ba:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Mar 29 12:00:27 2026 GMT
Not After : Mar 30 12:00:27 2026 GMT
Subject: CN=dce4483eb2cc0f7f97aeea71cf4f26be55766918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1c:f3:c3:d9:96:6b:53:89:b9:e2:75:9d:a2:
b9:79:a1:08:bd:ec:f6:49:7a:31:9e:17:da:7f:4f:
81:0e:a7:05:b3:5d:70:bb:0c:36:f5:f7:15:25:d0:
e6:da:6e:38:66:61:5c:f0:4a:d1:73:7b:e7:58:7b:
69:6a:e9:a8:4f:ea:2d:a8:52:5f:bd:59:24:2f:12:
5e:2f:e4:5d:2a:15:c8:bc:33:5f:0f:4f:60:a6:48:
2c:25:6c:f7:c5:1b:a3:73:47:18:27:84:d4:5f:fb:
52:a8:e9:f0:0f:ac:6b:ea:8d:db:32:88:9c:97:e5:
81:da:0e:28:58:fb:99:3c:5e:e1:e5:0d:a8:31:a5:
b7:d2:8d:5f:81:d7:ee:89:06:de:39:da:7b:a9:33:
ea:17:85:7f:9b:c3:12:e6:3a:32:41:d0:3e:c3:97:
28:af:d3:35:08:b1:a6:b3:50:a5:25:86:6c:9a:b6:
05:bd:73:07:b0:fd:06:53:98:d2:d9:02:11:e0:5b:
76:2f:64:7f:39:c9:43:b4:93:12:00:79:e8:39:a1:
ef:90:d5:ad:8a:62:f4:93:3a:82:9f:37:62:de:75:
38:6e:38:6f:10:c2:52:45:6d:73:87:9b:f4:ed:16:
2b:32:1c:1e:33:ff:31:4d:9b:d0:18:d3:ec:a9:b9:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E4:48:3E:B2:CC:0F:7F:97:AE:EA:71:CF:4F:26:BE:55:76:69:18
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5d:c1:88:f8:c5:8a:2b:1b:24:87:d8:db:46:49:bf:fb:39:
9d:d9:0d:1f:09:66:9e:cc:95:77:cd:d9:74:e7:aa:48:7b:1f:
f1:0d:57:2e:a9:c3:30:39:5c:50:e6:9f:5e:17:26:0b:1c:09:
71:8f:47:d4:bc:41:ab:86:a5:4d:0d:b5:bc:0a:61:d7:f7:f9:
83:6e:0b:c1:0e:2b:d8:72:86:66:a5:2a:ae:cf:01:24:cc:0a:
88:e7:a7:ee:61:db:35:7c:a7:88:fb:fa:51:7b:83:12:b7:31:
6e:ba:fd:21:02:68:52:6f:6c:2d:62:56:f8:fe:79:b8:a0:de:
c0:bf:89:9c:be:3c:90:a4:40:91:57:40:a3:28:f8:31:29:92:
d4:ea:a0:5b:8d:6c:b3:a8:a0:a0:f3:2e:02:65:28:d4:a9:6a:
c2:52:23:76:25:7f:d2:aa:b0:82:fe:0c:ee:92:c7:f7:90:65:
7f:90:6b:e0:56:bd:a0:f9:cc:91:c0:84:0d:6f:1a:ba:49:50:
ae:c5:01:78:6e:fd:95:67:f1:62:86:26:32:8c:e2:f3:a6:b3:
70:ae:b9:32:28:5e:08:18:a3:ee:d2:3c:4d:e3:10:de:77:0a:
a7:33:a9:33:75:e3:d8:51:5a:d1:7e:14:56:35:83:1d:78:6a:
40:b0:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:42 2026 by rpki-client