Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: cuvw7JpkToXfXPQFroBGBFVy0DNhiqb+m/XgpZSNF4c=
Subject key identifier: BE:1C:7E:56:60:3F:08:35:5E:72:B3:E3:66:63:18:3F:E0:BA:86:A3
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019FA26020E8CFE810E7AD0D9193E131C169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0EB4
Signing time: Mon 27 Jul 2026 07:00:36 +0000
Manifest this update: Mon 27 Jul 2026 07:00:36 +0000
Manifest next update: Tue 28 Jul 2026 07:00:36 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: vXoJc4RGnXckBymxnlV5JklWoVn0c1LeebCEcWn1HwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:20:e8:cf:e8:10:e7:ad:0d:91:93:e1:31:c1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Jul 27 07:00:36 2026 GMT
Not After : Jul 28 07:00:36 2026 GMT
Subject: CN=be1c7e56603f08355e72b3e36663183fe0ba86a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:b7:8b:ab:c1:c4:32:e5:15:5d:ed:d1:35:
81:1a:8d:c4:85:0e:b8:58:c3:45:2a:ac:76:55:43:
d7:cb:71:33:31:bc:f5:ec:e3:57:c8:15:4f:37:3b:
84:2d:b1:88:8e:e6:49:7f:43:3b:62:07:01:9f:e7:
fa:76:fb:08:9a:41:1d:62:90:69:bf:85:a4:4a:c2:
fe:5e:ac:a8:31:31:a4:c1:a7:6d:00:a1:1c:d6:48:
31:5c:2c:01:0a:59:9b:bd:4c:be:30:22:db:09:dd:
68:d0:85:d6:6f:c0:75:c4:70:15:1f:1e:f5:ad:3d:
1e:cc:5f:1d:ce:ee:4b:47:ff:20:ac:8b:78:10:93:
49:db:05:d1:3d:f9:ce:9e:a6:e2:c4:0d:62:05:ac:
d6:59:b3:a9:a3:10:d3:16:68:20:72:2d:78:67:ae:
1a:7f:e1:7f:5b:a3:bf:5b:fe:07:70:94:ec:8f:f4:
8d:8b:db:3d:82:db:d0:1c:99:d2:1b:e8:0b:52:cc:
d5:3d:74:51:c3:a0:df:e3:17:02:05:fb:9d:d8:36:
80:90:de:8c:27:e8:34:25:78:cd:36:a0:ce:94:d3:
8b:4e:e5:4e:ff:16:72:16:c4:0b:4e:22:41:b1:01:
4d:b7:f8:df:08:cd:92:da:7c:7c:77:ff:e2:f8:22:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:7E:56:60:3F:08:35:5E:72:B3:E3:66:63:18:3F:E0:BA:86:A3
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:84:b7:b6:b4:b1:f5:18:07:34:ec:b9:e4:45:f1:3d:6f:07:
72:ed:56:c5:5c:8b:74:49:9a:01:49:cd:70:74:83:08:21:8a:
77:95:c9:e3:57:c0:d6:3c:22:44:bf:78:1c:32:6f:f4:30:7a:
ab:3d:cf:4d:b0:d6:a2:bd:f0:47:79:b8:2b:9e:80:66:25:a9:
22:42:1b:ca:94:96:81:c8:fa:18:28:76:5c:85:4c:37:54:c2:
3a:86:aa:12:65:74:9b:54:63:db:61:96:52:d6:d8:de:33:35:
48:95:0b:a7:83:f8:69:a9:82:60:5d:94:0d:21:6b:93:b5:20:
14:63:f4:0f:58:9e:e1:81:b2:a2:ce:7a:6a:ed:97:08:d4:0e:
34:1a:b6:68:24:9a:6c:cb:db:61:fb:38:f7:05:b1:5e:cf:a9:
e7:4e:67:ac:fa:15:39:16:58:12:d5:0d:41:1f:8f:cd:2f:fd:
82:1f:ca:f4:9d:3b:d3:b2:5f:31:a7:df:ae:ce:3d:d0:75:51:
b0:2f:60:62:55:92:fc:af:e2:21:26:db:38:25:34:69:92:fb:
9e:ad:c1:35:ca:9b:a3:8c:22:30:89:34:c2:c5:c1:4d:93:00:
dc:1d:98:ae:b5:be:2c:c6:67:c3:13:f5:72:c1:60:79:2a:92:
da:dd:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:20 2026 by rpki-client