Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: m9KXhPLUG6M/ANndcBCFJEbD2egt3TCZLCtiAMCE71U=
Subject key identifier: 6D:24:AB:0C:15:48:26:FD:22:DD:5B:36:05:B4:DF:5A:B4:6E:57:4C
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 01A17B84DBFEC3CE9938B166BA5CC759CABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0FA9
Signing time: Tue 27 Oct 2026 04:01:06 +0000
Manifest this update: Tue 27 Oct 2026 04:01:06 +0000
Manifest next update: Wed 28 Oct 2026 04:01:06 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: uPkS38/J3EfwIvixdIjMrWqVpXL+pVrNaZsGb2PmKF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:db:fe:c3:ce:99:38:b1:66:ba:5c:c7:59:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Oct 27 04:01:06 2026 GMT
Not After : Oct 28 04:01:06 2026 GMT
Subject: CN=6d24ab0c154826fd22dd5b3605b4df5ab46e574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:1b:e0:d5:af:18:16:08:5b:af:c9:29:2e:
d1:f8:3f:7a:d3:a8:60:8f:93:18:5a:8d:55:c5:87:
55:c4:58:29:b8:88:1c:8e:74:50:2f:83:cb:0e:a2:
f1:9c:b6:9b:86:7f:49:da:45:33:63:3c:c6:c0:b1:
37:6b:aa:08:81:67:21:6b:5e:e9:fd:57:21:cc:23:
28:50:94:68:d2:9a:fc:bc:b7:e3:71:b0:73:98:eb:
64:2b:55:e4:45:2c:ec:87:b6:36:d7:e3:77:6e:cb:
3e:95:89:7c:0c:52:68:53:77:76:bb:a6:27:9a:87:
b0:b5:70:5d:04:b8:44:2b:c5:83:0e:e5:11:97:2c:
0a:be:08:46:7b:70:f8:a5:95:10:60:57:2b:29:4b:
46:f4:59:d4:26:01:41:64:79:9c:03:2f:82:2d:d6:
b7:44:ec:d4:41:74:e6:29:b8:7f:a1:18:2e:f8:b3:
52:0c:c4:34:01:4b:7d:df:35:78:ee:e7:19:0b:19:
f2:f5:8f:d0:93:d0:d1:3b:d3:ba:17:a3:f6:2a:d7:
06:4f:b8:e9:cd:42:30:ab:07:3b:88:ca:7a:81:a3:
87:12:7b:96:d5:13:93:17:39:19:3f:b8:05:c3:44:
24:27:f5:23:ea:e5:49:b3:ad:34:8a:84:ed:c4:4b:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:24:AB:0C:15:48:26:FD:22:DD:5B:36:05:B4:DF:5A:B4:6E:57:4C
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:87:18:60:1f:ee:54:6f:99:81:a7:0d:a8:7e:1a:f3:1e:0e:
83:62:c5:b3:55:4a:7a:2a:45:d7:1d:56:07:f1:6b:23:4b:2e:
af:2f:06:23:97:f5:4f:11:e9:80:60:53:4f:dc:bb:38:0e:de:
b3:34:32:75:9a:cf:3d:57:39:46:a0:fc:c9:d2:e5:39:9a:d0:
0a:35:d1:61:af:83:f7:09:5f:de:3f:19:5a:63:9e:6a:fc:62:
b2:15:44:30:f1:96:b6:ee:2b:cc:91:92:57:b5:f8:3a:4e:d7:
85:b7:40:99:b5:3f:6b:3e:0e:a6:61:b0:4a:d7:da:86:d5:74:
fa:74:16:23:9b:55:c3:60:af:83:7b:4d:c4:af:66:c0:ac:d5:
a3:7b:a9:5e:c5:c8:5d:62:11:eb:9b:5a:55:ce:d6:a5:3f:0a:
ae:81:08:df:cb:f4:bd:d6:1b:df:a4:fb:dd:18:c3:7e:58:04:
44:29:75:af:67:fb:29:7b:e9:8c:d6:a3:14:98:7e:90:ea:3f:
12:88:c3:0f:b0:63:bb:1c:03:15:6f:b9:fc:4e:4c:3a:1d:5d:
c7:eb:77:c2:8b:b3:c0:35:06:04:62:5b:fb:d3:b3:a9:8c:85:
8c:e5:1f:3d:30:81:95:a7:2b:b4:2c:f6:a8:d8:59:f0:84:6d:
7e:b7:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:42 2026 by rpki-client