Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: Mi6uJSxHJWu3C+EMzAOSBb+84d1oa/z6+Nl3L/GheEg=
Subject key identifier: 6F:09:01:6F:F5:71:5D:B3:B8:AE:23:85:7E:2D:A4:1D:ED:25:46:80
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 019D25F22233308FFD564E263E71B4A9EAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:58 +0000
Manifest this update: Wed 25 Mar 2026 17:01:58 +0000
Manifest next update: Thu 26 Mar 2026 17:01:58 +0000
Files and hashes: 1: AySsPboe2PxrB1Gyq1W06Px76LY.roa (hash: YaBT4lmGzSO4QjZLhswASZb2ScD2t8fau691sPdnGM4=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: 7FhceAsqdg0vr2tXW7SnIcprVXpSWFGzTUiwHvyGujA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:22:33:30:8f:fd:56:4e:26:3e:71:b4:a9:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Mar 25 17:01:58 2026 GMT
Not After : Mar 26 17:01:58 2026 GMT
Subject: CN=6f09016ff5715db3b8ae23857e2da41ded254680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:7e:c5:cf:66:e0:67:02:e3:db:36:f0:e0:
fb:30:69:12:8b:e2:ef:b9:c3:a5:48:90:47:e4:28:
6d:f3:e6:59:82:9f:3e:98:80:e0:a0:ce:07:b1:c4:
92:6c:95:bd:01:bf:77:94:c5:1d:54:b3:79:66:a3:
88:9a:c1:09:d9:03:db:71:be:23:29:ca:f0:c2:02:
9e:de:ff:c5:b7:3f:a5:e2:c1:6c:2b:ca:ec:86:7c:
86:86:53:ee:24:15:61:73:1c:1d:73:f4:e4:7a:44:
55:89:33:f3:b1:44:f4:ce:ce:6b:0d:e7:3c:8a:12:
58:44:8d:ea:56:31:eb:bd:4d:44:4e:66:d9:b4:e1:
51:b9:9f:ad:be:62:76:f6:46:9f:f0:ab:6b:91:34:
36:e7:07:b7:e9:50:38:48:df:b7:47:f2:9b:de:8f:
7e:1d:5a:1a:d1:a4:57:10:90:1a:43:6d:06:42:73:
9c:46:8d:fb:a8:b3:81:ad:f6:3b:69:c8:b3:96:1e:
45:0f:57:f9:62:da:1a:8e:6b:75:b5:51:27:4f:8f:
94:d2:f3:9c:cc:81:03:08:bc:cb:3d:8d:2d:63:a6:
a2:3d:74:79:62:3f:e4:fe:51:6b:cf:cb:b1:90:7a:
6a:1f:12:1c:39:92:0a:dd:74:12:96:94:0d:1c:b9:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:09:01:6F:F5:71:5D:B3:B8:AE:23:85:7E:2D:A4:1D:ED:25:46:80
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:81:03:a0:24:fa:50:7a:12:85:59:74:76:41:16:8f:c0:
13:73:42:aa:55:45:ce:e8:da:a0:da:13:41:8a:ad:10:c8:d7:
04:ba:44:3f:34:b7:15:0b:76:ac:06:26:66:3d:fa:d2:e6:6f:
3b:f2:f2:18:c6:ce:c6:50:68:f4:a4:d2:61:0a:f0:f1:26:0a:
ad:06:a8:48:c7:97:4e:b2:76:6f:35:b4:29:f8:f5:63:b9:89:
a1:06:ca:a9:af:4d:59:9a:38:34:d3:88:94:47:2b:bd:b9:99:
35:15:ac:0f:87:e3:1b:ff:e4:24:e6:bf:e4:f7:fd:d9:2a:3b:
fc:50:30:bb:20:80:44:38:38:1d:54:7d:ea:13:d0:6f:24:0e:
07:18:41:25:41:7c:10:cb:6b:e7:14:dd:8b:99:08:e2:96:72:
9a:ff:4d:f2:16:96:53:f8:7d:dd:df:a1:2c:d5:1a:64:be:dd:
b1:78:7c:65:4b:6e:85:33:a6:b4:89:bd:88:30:ef:83:9b:9b:
f2:84:7d:42:6c:8c:5e:5b:5f:59:ca:fd:fd:0a:96:e0:af:0b:
a4:55:e3:26:08:31:3d:ec:9a:99:23:ba:7f:ba:af:09:2d:6c:
82:6a:17:c2:3c:b5:a6:4e:f6:16:2d:52:cb:b7:d2:55:a6:2a:
48:8b:fb:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8iIzMI/9Vk4mPnG0qeqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzc1YmM2YzgxMTBmMWFkNzMzZGY3N2FjZmJiMWQ2ZWM0
NjVjYjgwHhcNMjYwMzI1MTcwMTU4WhcNMjYwMzI2MTcwMTU4WjAzMTEwLwYDVQQD
Eyg2ZjA5MDE2ZmY1NzE1ZGIzYjhhZTIzODU3ZTJkYTQxZGVkMjU0NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQV+xc9m4GcC49s28OD7MGkSi+Lv
ucOlSJBH5Cht8+ZZgp8+mIDgoM4HscSSbJW9Ab93lMUdVLN5ZqOImsEJ2QPbcb4j
KcrwwgKe3v/Ftz+l4sFsK8rshnyGhlPuJBVhcxwdc/TkekRViTPzsUT0zs5rDec8
ihJYRI3qVjHrvU1ETmbZtOFRuZ+tvmJ29kaf8KtrkTQ25we36VA4SN+3R/Kb3o9+
HVoa0aRXEJAaQ20GQnOcRo37qLOBrfY7acizlh5FD1f5Ytoajmt1tVEnT4+U0vOc
zIEDCLzLPY0tY6aiPXR5Yj/k/lFrz8uxkHpqHxIcOZIK3XQSlpQNHLnAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8JAW/1cV2zuK4jhX4tpB3tJUaAMB8GA1UdIwQY
MBaAFI83W8bIEQ8a1zPfd6z7sdbsRly4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjct
ODA5ODUxYTA2YjZhLzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjctODA5ODUxYTA2YjZh
LzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTqBA6Ak
+lB6EoVZdHZBFo/AE3NCqlVFzujaoNoTQYqtEMjXBLpEPzS3FQt2rAYmZj360uZv
O/LyGMbOxlBo9KTSYQrw8SYKrQaoSMeXTrJ2bzW0Kfj1Y7mJoQbKqa9NWZo4NNOI
lEcrvbmZNRWsD4fjG//kJOa/5Pf92So7/FAwuyCARDg4HVR96hPQbyQOBxhBJUF8
EMtr5xTdi5kI4pZymv9N8haWU/h93d+hLNUaZL7dsXh8ZUtuhTOmtIm9iDDvg5ub
8oR9QmyMXltfWcr9/QqW4K8LpFXjJggxPeyamSO6f7qvCS1sgmoXwjy1pk72Fi1S
y7fSVaYqSIv7eQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:39 2026 by rpki-client