Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: +oqZM0ZHP1IXdFRLejBRFZwpqZQOBkEZdiw2zmvBFyU=
Subject key identifier: D6:34:C1:AD:5C:71:0B:20:49:33:B3:BD:61:98:2C:AC:59:AF:08:C0
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019DD0F6198600D607086AD1BE0C06A4B40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0DC3
Signing time: Mon 27 Apr 2026 22:01:22 +0000
Manifest this update: Mon 27 Apr 2026 22:01:22 +0000
Manifest next update: Tue 28 Apr 2026 22:01:22 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: i/vEDhrUkzINsRs7kUW5rUJ+rmRNkajjbBgmfrEyG7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f6:19:86:00:d6:07:08:6a:d1:be:0c:06:a4:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Apr 27 22:01:22 2026 GMT
Not After : Apr 28 22:01:22 2026 GMT
Subject: CN=d634c1ad5c710b204933b3bd61982cac59af08c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:61:47:a9:d0:b0:64:78:24:bd:2e:70:79:
0e:3f:b1:f8:38:22:3f:f5:42:0b:3f:92:d7:c0:8f:
4e:fd:17:97:7f:61:ba:46:d2:41:e5:fe:eb:73:b1:
ff:78:2e:70:4f:1b:09:81:09:db:bb:15:0b:0b:fc:
6b:0c:71:c8:b7:4e:84:2e:6f:70:7c:cb:50:71:7a:
5b:41:fa:57:15:b9:85:2a:c4:31:12:d9:9a:08:ab:
3a:d7:ba:4b:2d:ec:d4:b6:78:91:ea:b5:42:85:58:
97:ff:a2:fd:12:c5:12:f1:7d:32:20:ed:d6:5a:b2:
a9:fe:97:f7:ac:08:10:3a:c8:a3:4a:96:05:96:1b:
49:4c:7c:16:d2:5b:cd:f9:c8:32:a8:11:3d:ca:32:
eb:14:72:6a:4d:f9:1a:59:e1:a1:17:b5:bb:98:7c:
25:cc:88:b3:71:36:0e:12:9c:c4:6a:da:88:0a:d4:
5d:6e:6d:e8:45:27:fd:e7:6d:35:8e:d2:4b:b8:14:
9c:05:2a:6f:d6:1a:10:48:de:0f:f2:8b:87:da:66:
c7:75:e8:14:0c:b2:10:dc:81:01:f4:a2:39:9b:54:
c4:17:3f:11:cb:57:b8:a2:b5:1a:97:af:58:e1:0d:
de:c6:1a:cc:f9:f2:94:53:0c:ba:97:65:9f:29:c2:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:34:C1:AD:5C:71:0B:20:49:33:B3:BD:61:98:2C:AC:59:AF:08:C0
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:49:36:53:6b:1d:4e:97:bf:ab:d9:12:64:2f:9f:1b:2b:a1:
1e:e9:e4:97:f2:d5:50:cb:bc:bc:91:1c:68:bc:fc:14:e1:e5:
dd:b7:27:fe:73:7c:80:9b:e2:ef:5c:d0:b5:6a:b9:7c:b2:f6:
93:7d:f6:19:cc:b6:06:ac:a0:5b:4e:cb:98:40:f4:9f:02:85:
be:c1:50:cf:07:16:11:fb:2d:6a:12:e8:36:1c:59:ec:be:f1:
d2:ad:87:f7:86:69:13:3d:73:43:19:70:95:5d:8a:a3:7b:8f:
59:af:76:c9:1a:72:0d:8d:37:ab:2e:ad:63:25:e3:49:fd:71:
eb:a6:fc:d6:1e:5f:d9:00:61:be:0d:29:49:9d:f4:af:b3:eb:
aa:dc:0d:2c:56:31:63:10:6b:98:ce:1a:ca:b1:f9:52:90:4a:
11:45:ac:a0:65:ab:5b:1b:c6:c6:a2:7e:c4:07:d4:8f:1d:c9:
5f:d7:44:3d:2c:a9:14:bf:73:e0:af:31:b0:98:cf:d0:fe:df:
78:4c:2d:57:3f:50:d7:cf:f9:35:2d:fc:69:c0:90:2d:ff:2a:
aa:7b:41:1b:03:57:da:c0:17:0b:1d:8d:81:cd:56:ad:14:2d:
a6:b1:23:66:07:ad:cd:78:6e:f7:e6:50:9a:c7:45:17:fd:34:
3c:dc:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:22:05 2026 by rpki-client