Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: bMZYxLv2iI9D4aekfgS9p43cAsJrdI/rrDtuTVt5rbI=
Subject key identifier: 18:F1:B0:7C:01:9A:7B:09:D0:51:83:C4:4F:EF:01:26:31:28:E6:6F
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019EBAA1F8B30132B27BE90F523EEE3DFF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0E3C
Signing time: Fri 12 Jun 2026 07:00:37 +0000
Manifest this update: Fri 12 Jun 2026 07:00:37 +0000
Manifest next update: Sat 13 Jun 2026 07:00:37 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: HendZ9bSqXn3Tl8pYZSIDwVPqw3TwDKWQeaWPyOvR2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a1:f8:b3:01:32:b2:7b:e9:0f:52:3e:ee:3d:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Jun 12 07:00:37 2026 GMT
Not After : Jun 13 07:00:37 2026 GMT
Subject: CN=18f1b07c019a7b09d05183c44fef01263128e66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:5b:a8:a1:91:69:b9:f8:05:fb:89:ea:3f:
29:8e:5e:35:86:e8:d7:ab:44:d2:e4:d6:0f:c1:6b:
8f:8b:9b:a6:7f:a4:eb:8f:46:ef:76:e3:a2:e4:e4:
88:b3:f4:1a:f6:fa:a7:4b:0f:f7:a7:3e:51:69:34:
c8:95:37:70:0b:7e:0d:24:b6:5b:41:d8:d8:f5:90:
53:5b:4e:a0:72:4d:f3:f7:94:86:c8:78:a6:e8:a8:
36:30:3d:f6:f6:c8:72:2c:80:02:28:11:33:bd:cb:
93:a1:fd:35:29:4c:fb:eb:a1:e7:2d:bf:c0:ae:74:
fb:82:06:4c:23:23:40:5a:5d:99:12:90:47:70:42:
9a:44:bb:33:76:7a:48:16:8f:f5:d7:58:89:1a:1d:
c3:3c:ac:46:da:fb:bc:d4:6d:9f:91:d0:34:e0:6c:
27:82:8c:02:fc:89:dd:9e:81:42:f2:af:22:bc:72:
92:55:fc:54:90:70:c1:9e:97:13:c1:12:56:6e:44:
c9:93:f3:f7:3a:2b:dd:4f:04:7b:e4:a6:9d:e6:ad:
e2:6f:43:3c:2a:9b:c7:99:e5:cb:c1:77:25:c9:7f:
ab:58:7b:72:8e:93:05:7e:5a:86:69:64:0c:b2:1d:
8f:41:56:5f:ef:c3:35:c1:d1:94:76:48:6f:4a:02:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:B0:7C:01:9A:7B:09:D0:51:83:C4:4F:EF:01:26:31:28:E6:6F
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a8:ae:67:4f:2b:88:09:c0:87:9a:c4:a1:e6:da:6e:d8:84:
0a:73:1c:e3:21:1a:9f:73:f6:71:42:3b:cc:fe:3c:0c:a5:18:
92:ea:12:0c:50:2e:b6:af:3c:ff:73:e7:0c:e1:83:d2:2a:72:
4e:3f:9b:87:76:b6:be:df:73:dd:ec:e3:e5:40:2d:4c:1a:ed:
50:1c:15:85:9b:75:40:92:70:a7:3c:83:b0:58:5a:e2:d8:6c:
43:4b:d9:f0:07:a9:ef:c6:72:10:bb:71:55:7d:48:40:5c:b1:
ec:61:c4:a0:f1:4b:77:24:96:cd:39:a4:bf:87:25:f0:7e:0e:
7b:ba:10:c6:ee:2b:e8:91:65:d8:ab:07:d9:5e:ea:99:2d:b0:
3f:67:ec:3f:c0:2f:4d:d6:b7:fe:fb:e7:c2:95:a5:75:42:da:
03:74:90:7e:b0:16:93:5e:0f:8d:f8:15:45:aa:7e:f9:81:b5:
9e:3c:ac:21:c6:fc:76:47:ea:37:0f:1f:31:4f:ec:33:f6:fd:
00:8c:14:9d:9c:2c:6b:0e:a2:23:f2:b6:86:a0:70:37:40:96:
19:ed:6f:d6:f0:11:b9:d0:da:40:25:90:6f:37:78:f5:f9:2f:
8c:9a:00:cd:20:42:95:ca:dc:34:3e:49:bb:e6:7f:ae:e7:13:
4c:36:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:24 2026 by rpki-client