Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: tfaVeM9xnQez+XQaSc7b0GbLGptCBWB7nmbxIyAAEVk=
Subject key identifier: 86:D7:A6:64:78:46:F4:7B:5E:6B:B7:FC:F8:F3:65:32:FC:C2:F7:A7
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 01A106CA95C14D4EE01578738A39E38C23C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0AEB
Signing time: Sun 04 Oct 2026 12:01:42 +0000
Manifest this update: Sun 04 Oct 2026 12:01:42 +0000
Manifest next update: Mon 05 Oct 2026 12:01:42 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: Lzq/j1C0kZreRUyUZpRD6yft4L3rPGh8As8VorCg2cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:95:c1:4d:4e:e0:15:78:73:8a:39:e3:8c:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Oct 4 12:01:42 2026 GMT
Not After : Oct 5 12:01:42 2026 GMT
Subject: CN=86d7a6647846f47b5e6bb7fcf8f36532fcc2f7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:18:6d:15:47:1c:ca:30:0c:ba:ea:e3:cf:
f3:6e:74:3c:d3:b9:15:28:7e:f5:11:3c:63:9a:57:
89:30:4e:4c:31:30:a6:30:24:c6:41:23:2e:b2:ca:
3a:6b:95:01:31:04:c0:87:ac:6b:ef:f3:fb:0c:62:
75:a4:75:c1:ba:5d:d1:4a:53:0f:cd:1a:d8:b2:b4:
ac:9b:04:30:56:16:6e:d4:9e:54:f4:e2:b6:7a:93:
de:60:18:55:90:5a:84:7b:1f:e8:dd:b8:b6:a7:3b:
2e:dd:eb:8a:c0:03:f4:f2:eb:4a:1d:90:60:ea:57:
62:e2:e9:24:84:b9:cb:4f:a8:3d:ed:db:19:7c:f3:
da:34:3e:c0:99:a3:bb:78:f5:77:40:33:88:09:02:
4f:20:a6:7a:ba:78:e9:9a:68:a5:dc:cb:a1:01:73:
e7:98:64:ab:9d:b1:21:ee:29:04:34:f1:b7:da:4f:
9a:ce:9d:09:39:76:bd:59:ba:a7:2d:d5:2a:f5:8f:
d7:e5:aa:bc:80:2d:ae:92:19:b3:5f:8e:42:80:9b:
01:66:44:13:84:5f:0f:6e:9a:3a:6c:78:0c:dd:f8:
6c:61:08:65:4d:91:0f:16:d6:48:55:43:00:4b:bc:
ba:8e:fb:37:57:97:9b:c2:08:0e:ab:1a:cf:fd:d5:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:A6:64:78:46:F4:7B:5E:6B:B7:FC:F8:F3:65:32:FC:C2:F7:A7
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5a:38:67:15:78:c9:22:3c:ad:38:5a:bc:31:8d:b3:e0:cc:
de:c5:a1:0e:75:9e:9e:e6:a9:e4:7e:73:35:94:d8:96:dc:b0:
ef:fb:4c:6a:87:84:38:e0:75:69:10:44:92:61:fa:db:8e:78:
ab:bf:43:9a:d0:79:e7:7c:ac:7a:c3:e0:5d:6e:99:ce:87:a3:
e5:a2:ce:f8:b4:ee:56:09:12:49:2a:01:c0:23:45:8e:24:69:
67:6c:49:eb:47:55:ab:6d:d1:8e:91:ff:26:62:26:5f:f8:f4:
41:f7:1b:d8:f4:32:c8:25:68:50:d3:f6:2c:2c:78:e5:a2:90:
ab:df:bf:15:6e:2b:6a:42:ba:72:45:e4:2d:3e:4e:a6:ee:b5:
d9:2b:51:17:ac:60:fe:6f:15:4f:a9:06:ab:dc:76:29:be:05:
42:3b:9f:0f:ef:fa:00:e8:84:d7:07:cb:1d:07:43:31:11:ea:
28:8b:3f:b4:79:dc:6b:39:11:76:1a:d5:f1:5d:ad:74:ba:be:
94:83:ad:1c:1b:ed:50:73:24:4a:f6:83:8b:32:df:4d:cf:61:
f1:95:46:63:a3:81:01:dc:e7:ef:a3:45:12:a1:55:31:fd:7e:
59:78:23:66:c0:e7:8d:a1:55:f9:fe:00:5e:f1:f8:8e:5d:e3:
73:a7:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:19:56 2026 by rpki-client