Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: 8CJQhtNXX69F4oR9sFBDjCdMrSV+CUrKnvULJqqVvyU=
Subject key identifier: 1B:22:2E:76:E5:70:7F:43:3D:08:07:77:E5:5C:DD:10:AA:FE:3E:E4
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 01A0E0CF5F007DAFB5C720D974758E2C43FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 1A85
Signing time: Sun 27 Sep 2026 03:01:21 +0000
Manifest this update: Sun 27 Sep 2026 03:01:21 +0000
Manifest next update: Mon 28 Sep 2026 03:01:21 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: 9X/i2c1IIdWcOKmi8U0SA1AdhWF9DGwpi/zl98IaUGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:5f:00:7d:af:b5:c7:20:d9:74:75:8e:2c:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Sep 27 03:01:21 2026 GMT
Not After : Sep 28 03:01:21 2026 GMT
Subject: CN=1b222e76e5707f433d080777e55cdd10aafe3ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:ca:c9:f3:5c:bd:f9:a4:3d:19:52:7a:62:
1a:54:b0:47:5e:e1:78:45:02:4d:6a:b5:f8:94:1e:
d7:9f:b9:95:e1:55:e0:38:65:0b:ad:32:49:59:07:
90:ea:bf:17:75:55:c7:5c:2a:f7:fc:44:db:32:97:
64:84:03:59:03:5a:b1:51:c8:ac:15:5e:d1:74:10:
35:e0:7e:b8:52:39:aa:e2:d0:66:05:03:c8:9a:3d:
4d:60:84:81:a9:5c:4a:ac:d5:09:df:7a:2a:57:8e:
3a:1e:a7:4b:31:38:27:ab:f8:9d:fa:3e:ec:59:db:
55:d3:01:49:80:79:16:25:59:2c:c7:30:d4:a6:1a:
38:e9:1a:ea:9b:67:90:c0:b0:de:58:49:a3:69:25:
3d:cd:88:98:6e:e4:54:b6:b9:22:df:9f:09:b9:66:
73:b5:f2:d9:b9:61:85:a7:e3:c1:33:e2:d1:36:0d:
17:b5:a5:99:40:70:5b:f9:da:19:dd:45:4b:f4:48:
f5:88:3a:a2:b3:b4:bb:4f:97:27:b9:24:89:67:80:
0a:1f:4c:94:19:13:37:df:73:cf:3e:86:f4:f0:25:
88:bf:b4:23:e9:b6:ee:be:1a:70:37:83:b6:44:a9:
83:80:ec:35:fe:44:ad:16:7c:f6:ff:e6:8b:d1:b5:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:2E:76:E5:70:7F:43:3D:08:07:77:E5:5C:DD:10:AA:FE:3E:E4
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e8:da:03:c0:70:91:2e:8b:4a:c9:8a:32:3e:df:23:5f:12:
d7:c5:bb:2c:2f:3b:98:97:7c:ba:7f:97:5f:3d:ae:26:f8:ae:
af:e6:dd:58:a9:94:6e:1d:8a:83:da:39:fb:cb:d0:7b:63:e9:
2a:8a:be:54:1b:03:94:6d:8d:58:ec:d7:80:1d:36:6f:22:dd:
7c:56:16:50:97:21:c2:a2:3f:88:93:0f:68:0a:10:5f:4d:bd:
aa:a6:c0:2f:05:c3:87:48:70:af:c1:04:12:1b:f2:f0:d1:90:
2b:3c:ff:69:26:f1:ad:ed:21:be:d0:10:c1:fc:0e:83:34:3b:
fe:b6:bc:49:a4:12:f4:29:37:1a:c2:2e:23:84:0b:09:63:1b:
3e:fa:79:91:12:94:a9:2d:66:91:90:32:90:d3:80:d5:f2:c2:
75:b2:98:11:be:cf:78:d9:62:c3:a7:03:17:62:b9:45:14:20:
85:e0:ca:71:12:db:63:17:6f:f0:e5:d4:58:f5:93:f1:e1:31:
99:c1:47:7c:09:6d:b6:59:ce:1f:c8:52:0c:59:e5:fa:c9:ab:
44:e5:93:75:bc:57:ad:79:79:5e:61:36:b7:e0:af:04:d3:c8:
17:e0:17:d9:49:36:8d:3e:3e:5c:ea:03:93:77:77:9a:e7:0f:
10:cb:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:09:57 2026 by rpki-client