Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: rJtXqPobgDMq8CChwQunJ5gNIYs6TTJWtqWRYKGyCrM=
Subject key identifier: F8:17:06:D9:DD:87:07:8A:50:5E:BA:44:C7:0A:78:43:EC:6B:98:61
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 019D28BBAD9FD6678197CB3D26D06B998068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 1898
Signing time: Thu 26 Mar 2026 06:01:21 +0000
Manifest this update: Thu 26 Mar 2026 06:01:21 +0000
Manifest next update: Fri 27 Mar 2026 06:01:21 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: TZfQGZqj6tquHE4yRLShXXyX5/4Z+dAfJO+q4xP8p6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ad:9f:d6:67:81:97:cb:3d:26:d0:6b:99:80:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Mar 26 06:01:21 2026 GMT
Not After : Mar 27 06:01:21 2026 GMT
Subject: CN=f81706d9dd87078a505eba44c70a7843ec6b9861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:9c:e9:ee:1d:85:8d:8f:30:6b:e9:1a:35:
fc:bc:be:f4:30:77:94:95:c3:69:bf:01:b5:b7:4e:
49:80:91:19:58:1e:89:3b:76:32:a0:e7:e5:78:83:
7f:40:e9:8f:cb:33:41:13:f3:c0:50:a5:96:31:c7:
d5:34:d8:83:48:64:e5:18:8d:5e:fc:8d:9e:3f:d8:
6c:8c:b5:7c:a4:d7:3d:11:e3:5f:6c:f2:e6:26:cd:
16:37:59:2d:d2:d6:66:c0:6c:76:56:60:c8:7c:c3:
c2:8c:e2:a3:9e:3f:f3:ad:8f:6a:b9:61:b6:76:98:
5f:19:41:3c:7b:42:c0:82:42:31:cb:f9:e4:24:c4:
9c:3e:2c:c0:2f:d3:b6:d8:f6:19:fe:3f:11:4d:9b:
7d:8c:c4:73:40:1a:25:03:ab:48:d8:08:f6:ca:0d:
95:88:95:f2:fa:d0:59:b1:74:b4:44:ae:23:00:d4:
e1:e3:74:65:3e:3a:fb:e1:0b:af:30:26:17:57:d5:
30:2d:4b:6f:7d:f9:f2:c2:d0:f6:b5:39:2e:d2:8a:
8e:d9:ac:30:63:23:c0:3f:a4:d4:bf:be:e8:67:89:
ed:c4:30:25:eb:5d:f9:fb:2f:c8:b5:54:c3:67:0e:
b3:e5:52:98:95:b8:95:d1:e5:52:f9:98:b2:72:59:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:06:D9:DD:87:07:8A:50:5E:BA:44:C7:0A:78:43:EC:6B:98:61
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:10:86:06:0b:3d:90:33:fc:3f:c0:bb:a9:26:89:6d:84:
7b:f6:38:83:ae:3d:7d:4c:3c:4b:e0:6e:e5:94:bf:3d:c4:9b:
9f:65:c9:6d:0f:3a:5a:24:f2:d4:89:d6:02:c6:ec:71:93:68:
b7:08:82:29:ee:4d:a1:67:72:62:be:e8:e3:16:f5:fd:77:4d:
0f:95:89:52:ca:84:60:c7:7f:f2:d1:bc:38:e5:22:80:e9:52:
fd:58:d3:3c:03:0b:bb:e1:51:89:96:13:a9:1d:b2:e5:43:59:
46:82:e8:c7:fa:6d:44:12:93:0d:94:c7:71:e4:cb:ab:02:72:
67:c3:75:21:8f:d3:09:14:e5:6c:db:c9:0b:0c:8a:0e:b1:a7:
4a:ec:e7:52:00:e7:a3:05:71:6a:b9:3c:b6:53:f2:1e:85:ff:
99:da:27:52:08:8a:06:f0:5b:ad:79:bf:66:82:37:ba:0d:d7:
2f:25:b0:b6:32:8a:42:65:91:54:d3:12:c2:d5:5a:1a:f5:39:
6d:d3:d5:2b:ee:9e:17:3b:c3:21:29:88:fb:47:be:95:8b:1e:
a9:9b:7b:5d:f6:a3:ab:82:d0:1f:82:f6:e7:dd:16:c0:a4:bd:
94:a7:c5:77:af:b1:c5:52:4d:fa:3c:9e:8e:c0:0a:bd:9a:ce:
3e:47:38:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou62f1meBl8s9JtBrmYBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjYwMzI2MDYwMTIxWhcNMjYwMzI3MDYwMTIxWjAzMTEwLwYDVQQD
EyhmODE3MDZkOWRkODcwNzhhNTA1ZWJhNDRjNzBhNzg0M2VjNmI5ODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yuc6e4dhY2PMGvpGjX8vL70MHeU
lcNpvwG1t05JgJEZWB6JO3YyoOfleIN/QOmPyzNBE/PAUKWWMcfVNNiDSGTlGI1e
/I2eP9hsjLV8pNc9EeNfbPLmJs0WN1kt0tZmwGx2VmDIfMPCjOKjnj/zrY9quWG2
dphfGUE8e0LAgkIxy/nkJMScPizAL9O22PYZ/j8RTZt9jMRzQBolA6tI2Aj2yg2V
iJXy+tBZsXS0RK4jANTh43RlPjr74QuvMCYXV9UwLUtvffnywtD2tTku0oqO2aww
YyPAP6TUv77oZ4ntxDAl6135+y/ItVTDZw6z5VKYlbiV0eVS+ZiycllTzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgXBtndhweKUF66RMcKeEPsa5hhMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeysQhgYL
PZAz/D/Au6kmiW2Ee/Y4g649fUw8S+Bu5ZS/PcSbn2XJbQ86WiTy1InWAsbscZNo
twiCKe5NoWdyYr7o4xb1/XdND5WJUsqEYMd/8tG8OOUigOlS/VjTPAMLu+FRiZYT
qR2y5UNZRoLox/ptRBKTDZTHceTLqwJyZ8N1IY/TCRTlbNvJCwyKDrGnSuznUgDn
owVxark8tlPyHoX/mdonUgiKBvBbrXm/ZoI3ug3XLyWwtjKKQmWRVNMSwtVaGvU5
bdPVK+6eFzvDISmI+0e+lYseqZt7Xfajq4LQH4L2590WwKS9lKfFd6+xxVJN+jye
jsAKvZrOPkc4Vw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:01 2026 by rpki-client