Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: J3v+kCA+IByOPA0S3Ms1QjDGM2L8XYePtzyQiHtNWqQ=
Subject key identifier: 1B:33:0D:61:71:FB:6E:44:A5:3D:7D:44:D3:AB:59:36:21:97:46:9D
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 019D2A0510807A127507429C524AEC890B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 08EB
Signing time: Thu 26 Mar 2026 12:01:07 +0000
Manifest this update: Thu 26 Mar 2026 12:01:07 +0000
Manifest next update: Fri 27 Mar 2026 12:01:07 +0000
Files and hashes: 1: cTuhdpevc1eybDKGr-5paq7rNBY.roa (hash: 0R89TelMBEcIxjJLa5l3VBfuRB8kZipMMgzEmnO6Cho=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: Vz9xw5L4h7ZIoPWYem/6h+JaLu99Eysb6bD5hTim4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:10:80:7a:12:75:07:42:9c:52:4a:ec:89:0b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Mar 26 12:01:07 2026 GMT
Not After : Mar 27 12:01:07 2026 GMT
Subject: CN=1b330d6171fb6e44a53d7d44d3ab59362197469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:9b:f5:1f:5c:f6:6b:d3:a6:55:66:5c:7d:
8d:0d:40:6c:db:75:0b:fa:5b:f7:47:96:e6:48:75:
b4:25:33:f6:6a:5b:96:c2:bc:f7:b6:7f:c2:3c:9e:
39:d4:c3:f4:6b:fb:76:aa:8e:f6:4e:df:21:5c:96:
b5:83:a8:07:44:68:08:1d:d7:cf:b4:f1:42:d8:42:
ea:ef:aa:ca:a3:aa:e1:24:18:ec:4e:b0:1a:a5:d2:
49:53:88:b4:de:68:d9:b9:2b:10:be:34:e6:89:ce:
00:2c:41:79:c6:cd:06:4a:a8:0f:c8:a6:2e:83:93:
c5:e8:f6:dd:ad:12:ad:b1:ed:d4:d5:6a:ca:86:21:
b9:70:29:ba:47:49:1d:b3:4d:e5:a2:3f:ce:22:27:
22:b2:29:ec:6e:c8:fd:40:26:f0:8c:2a:0f:c1:73:
44:8e:72:e9:bb:7b:8c:ef:09:f7:3b:e9:a0:d7:52:
56:8b:06:0f:8f:1d:cf:da:f3:84:16:aa:8d:e3:5a:
61:1d:1a:f5:79:0b:46:fb:40:cf:2e:67:2a:c6:ab:
e7:e7:44:cf:61:fb:35:2c:38:31:22:f6:58:93:04:
5a:02:20:71:15:4e:bc:38:d8:b8:28:04:86:ac:9d:
d4:29:60:6a:5b:57:cd:9e:66:44:1f:38:8c:b3:f9:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:0D:61:71:FB:6E:44:A5:3D:7D:44:D3:AB:59:36:21:97:46:9D
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:c2:9e:9c:2b:d9:2d:49:52:31:15:44:ff:5c:ad:dc:1e:
90:8f:78:8f:02:96:d1:ad:39:37:b2:ad:41:b5:6c:5e:48:67:
5c:92:eb:64:2c:44:53:08:7b:24:36:fc:69:c2:35:0f:e4:de:
82:60:65:16:4f:6f:42:e0:ac:3c:23:7d:c3:19:28:4d:56:a6:
92:27:7d:81:0f:a4:5f:05:c3:7d:39:a7:98:af:db:02:c6:ad:
e2:23:ca:10:4f:7b:e2:48:ba:cf:e2:4f:14:74:97:95:ee:bb:
34:1c:81:58:78:a6:43:ef:93:d8:31:bb:3f:2a:69:2f:b2:a5:
ec:b0:70:1d:58:fb:e7:0f:d5:4f:03:98:4a:31:18:4e:14:24:
34:80:20:0d:94:ab:08:9d:6c:58:ca:c6:3c:bd:ad:4f:71:19:
e1:a7:9f:5b:b4:d1:a5:1e:3b:d0:86:c8:1b:cd:c7:5a:2a:d4:
ef:ee:0a:e3:fc:ff:70:4e:c2:1d:c0:a4:7b:f5:d0:f5:16:65:
13:dc:94:19:96:b9:66:c0:94:3b:d8:c3:52:be:4b:31:b2:39:
10:1c:d4:65:45:ea:5c:d3:7d:55:96:77:78:16:54:36:bc:c2:
e4:ca:9f:01:47:b0:b9:2b:25:cf:1a:95:56:36:17:16:35:20:
21:9e:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:11 2026 by rpki-client