Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: 71RHK0by3FPOLah851Q1tKmHND7e5uQQ0TrEXEl0VQE=
Subject key identifier: 80:8D:CA:28:61:46:25:EB:A5:5A:98:00:E6:5B:2D:5D:8C:9E:2F:B3
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 019F9211928D08DA6D30A2A50431C6DDDF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0A2A
Signing time: Fri 24 Jul 2026 03:00:52 +0000
Manifest this update: Fri 24 Jul 2026 03:00:52 +0000
Manifest next update: Sat 25 Jul 2026 03:00:52 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: 3LOjWVhYOkKlbVYsR//eQBFgLIRe1Z/Ay6vHnziZ5Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:92:8d:08:da:6d:30:a2:a5:04:31:c6:dd:df:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Jul 24 03:00:52 2026 GMT
Not After : Jul 25 03:00:52 2026 GMT
Subject: CN=808dca28614625eba55a9800e65b2d5d8c9e2fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:66:2e:3a:2e:f7:05:ac:ca:04:7f:33:07:
d3:97:2a:36:7d:4f:7f:25:58:33:09:c4:7c:04:75:
b3:c7:ab:43:c3:c8:a5:5a:db:0e:0b:bc:ad:80:78:
20:d1:69:34:48:49:38:77:df:ff:88:12:a9:43:a7:
3d:be:c4:76:3d:26:07:bc:31:38:b9:24:5f:e1:29:
18:76:18:ce:ff:71:52:e8:67:43:e6:48:7a:43:02:
fd:0e:68:b1:83:72:1a:ee:d1:fc:e4:0b:28:aa:c1:
7f:42:6d:50:6c:09:18:a6:d7:16:89:80:15:e8:67:
ef:10:a6:b7:23:70:e8:cc:79:e9:e2:1f:01:06:eb:
e3:57:42:3f:54:c1:aa:cf:3c:0f:b1:3e:e9:3c:7c:
b3:ee:e7:eb:fb:77:a8:f9:dc:e3:fe:36:93:6e:81:
8c:82:cc:cd:09:ad:f6:e5:62:a2:9a:77:f0:fb:f4:
42:d7:2b:60:99:1a:d6:00:66:a6:7c:eb:7d:e7:26:
23:cc:91:c5:de:80:b3:44:48:05:86:e5:79:82:be:
9c:65:a3:38:ff:6d:0d:bc:de:a5:b9:72:65:45:7f:
6e:72:64:e7:75:af:3d:b6:db:8d:9b:c0:44:09:c3:
01:24:6e:de:dd:30:bb:00:25:64:02:a2:11:3e:49:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:CA:28:61:46:25:EB:A5:5A:98:00:E6:5B:2D:5D:8C:9E:2F:B3
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e6:72:9d:7f:ce:51:70:a9:7c:6c:4e:b8:22:46:de:86:61:
0c:83:64:50:50:a1:c5:48:cc:38:99:ff:6e:93:4e:51:6b:b0:
be:73:ce:40:24:52:8e:20:aa:ea:bd:69:e0:71:48:a4:36:22:
b4:54:66:fb:7d:6e:f2:22:a7:60:f8:3f:e5:cf:73:6b:13:53:
ff:cc:3e:7a:49:90:49:3a:60:07:1a:af:9d:71:64:0c:28:bb:
cc:d9:b6:96:06:f1:cb:db:bd:e9:43:56:b4:eb:0d:a8:af:13:
bc:53:3a:08:9d:90:53:29:f9:8f:81:d9:59:ae:fc:97:b0:a0:
75:67:ec:92:64:c2:c3:38:bd:c7:df:c4:ea:55:04:d7:8d:3d:
36:46:63:88:e9:7a:19:c8:f3:c5:5c:03:32:17:0c:be:93:7e:
06:c4:9c:db:b6:50:4d:e6:d7:18:49:74:d6:d3:2f:e8:fb:dc:
a9:bf:62:ff:94:79:b8:51:43:e4:52:ba:1e:32:d5:8e:22:c4:
4f:81:ba:89:23:9f:2e:93:14:a8:bc:c6:1d:4b:07:2d:11:b2:
e9:d8:4b:c9:60:b0:11:a9:6e:d9:b4:e4:ff:fb:ec:a3:ee:bb:
12:c3:0f:5f:fc:4c:35:44:74:04:0a:e2:d7:00:43:e0:00:5c:
51:45:be:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEZKNCNptMKKlBDHG3d+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1
Mjk0NTMwHhcNMjYwNzI0MDMwMDUyWhcNMjYwNzI1MDMwMDUyWjAzMTEwLwYDVQQD
Eyg4MDhkY2EyODYxNDYyNWViYTU1YTk4MDBlNjViMmQ1ZDhjOWUyZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWRmLjou9wWsygR/MwfTlyo2fU9/
JVgzCcR8BHWzx6tDw8ilWtsOC7ytgHgg0Wk0SEk4d9//iBKpQ6c9vsR2PSYHvDE4
uSRf4SkYdhjO/3FS6GdD5kh6QwL9Dmixg3Ia7tH85AsoqsF/Qm1QbAkYptcWiYAV
6GfvEKa3I3DozHnp4h8BBuvjV0I/VMGqzzwPsT7pPHyz7ufr+3eo+dzj/jaTboGM
gszNCa325WKimnfw+/RC1ytgmRrWAGamfOt95yYjzJHF3oCzREgFhuV5gr6cZaM4
/20NvN6luXJlRX9ucmTnda89ttuNm8BECcMBJG7e3TC7ACVkAqIRPklTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICNyihhRiXrpVqYAOZbLV2Mni+zMB8GA1UdIwQY
MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt
Nzk5NWJmNjA4MDNiLzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi
LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruZynX/O
UXCpfGxOuCJG3oZhDINkUFChxUjMOJn/bpNOUWuwvnPOQCRSjiCq6r1p4HFIpDYi
tFRm+31u8iKnYPg/5c9zaxNT/8w+ekmQSTpgBxqvnXFkDCi7zNm2lgbxy9u96UNW
tOsNqK8TvFM6CJ2QUyn5j4HZWa78l7CgdWfskmTCwzi9x9/E6lUE1409NkZjiOl6
GcjzxVwDMhcMvpN+BsSc27ZQTebXGEl01tMv6Pvcqb9i/5R5uFFD5FK6HjLVjiLE
T4G6iSOfLpMUqLzGHUsHLRGy6dhLyWCwEalu2bTk//vso+67EsMPX/xMNUR0BAri
1wBD4ABcUUW+RQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:56 2026 by rpki-client