Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: FpZPdb9lJFYy392EsN3dtr1uy8fHfMvKYjmBFsUqkvc=
Subject key identifier: 75:39:01:A0:6E:74:10:A0:73:DC:37:C1:34:F1:37:D7:64:18:53:06
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 019D27DF8FD351952B1C96CAC809466A1665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 082C
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: WkT4KgurkGkiK6buDbp8jQwN9_M.roa (hash: LR/+wKI0XgbxooBg1c5uhj6z6Vhw1IQPk19X/TJb42Y=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: w7zfPsarUB8PFYRMgdj0ssQ3mvt4Sbqy5yRkqgLDDPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8f:d3:51:95:2b:1c:96:ca:c8:09:46:6a:16:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=753901a06e7410a073dc37c134f137d764185306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:16:08:fe:15:1a:2e:06:21:e1:29:7e:41:
5d:a2:a5:40:a0:53:d8:dd:19:03:d8:d8:33:dc:35:
9d:c2:98:ea:bf:08:a5:4d:fe:59:3f:bf:90:96:66:
be:b4:1e:f4:f7:9a:8b:a2:4c:3e:7c:33:43:3e:6e:
16:c5:fb:d2:27:54:c2:bc:10:02:2a:07:8d:80:ee:
bd:ec:04:95:5c:82:5a:e0:28:06:a5:f3:73:c7:48:
3f:6d:60:38:ad:ed:4f:1e:7f:24:42:1d:88:c9:6e:
02:83:93:93:23:69:bc:7f:f5:f8:b3:66:f5:0b:33:
f0:00:18:68:b8:44:a1:4e:85:f8:33:38:87:f4:9e:
ef:f7:b0:95:f5:62:5c:d5:36:f0:b8:cd:87:f4:23:
e1:c4:79:fe:f0:d8:63:38:0a:8e:18:bd:d3:c3:43:
e7:15:f8:2c:27:a4:6a:49:96:10:e1:be:ce:bb:65:
a8:de:ad:5e:98:f0:61:c0:13:20:18:03:55:fb:28:
55:f1:96:e0:c1:c6:93:6d:12:91:55:dd:3e:87:d0:
12:97:48:c2:49:ff:56:de:47:b1:3a:8b:7d:08:61:
8f:a0:ed:2f:ac:1a:03:f6:5b:cc:13:1d:ec:f5:54:
5a:44:77:b0:e6:cc:f6:ee:5b:d4:50:d5:2e:8f:45:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:39:01:A0:6E:74:10:A0:73:DC:37:C1:34:F1:37:D7:64:18:53:06
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:39:a6:32:f8:6b:cc:ec:b1:56:40:61:d0:af:18:1d:27:71:
29:e9:6f:b9:fb:33:35:e6:22:bd:84:a1:6b:92:15:49:a4:c8:
f3:4d:eb:b7:ac:e3:03:16:74:42:94:07:25:7d:33:e2:1f:43:
0e:d8:97:7c:55:3b:4f:65:ac:bd:2b:4b:f3:96:31:92:ae:7a:
35:c8:15:6e:c2:ac:07:1b:e7:d7:a4:72:cc:3d:77:52:f8:5e:
be:43:c7:1d:73:fa:1c:01:a1:98:ae:d9:60:4a:8b:9a:d1:d9:
bc:46:ae:dc:21:68:66:7e:07:38:4a:ea:a0:bb:48:62:1c:93:
04:c3:7c:2e:53:c2:7a:d1:27:0d:50:3a:2c:95:ec:7c:a4:0b:
11:9c:08:95:6f:7c:36:87:fc:41:52:8a:99:d4:eb:bb:96:72:
5e:f4:bc:c7:cc:51:6f:8e:1c:d9:5a:73:fc:16:a1:d6:82:bb:
ff:7e:fe:b3:71:1e:f5:4f:32:44:3e:03:1d:c5:c2:ac:d1:54:
b5:d8:e8:58:80:ef:39:9d:1f:da:b5:8c:32:00:94:95:38:63:
20:a1:65:88:07:ac:fd:bd:58:50:d6:55:65:5a:27:39:cc:77:
86:98:b5:df:65:1e:7b:33:e5:2c:52:cf:8c:d6:39:e7:8a:af:
23:56:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:33 2026 by rpki-client