Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: Wwxk6RygpNTzh9Yfp0T0irtQ2yaiW8Qu+eo+oLB5dv4=
Subject key identifier: 23:88:6F:FB:27:07:95:67:25:E8:4F:66:50:81:A3:4B:49:9C:38:08
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 01A1DDCBD159536CE4BDCADD26A3696D478B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 1B08
Signing time: Sun 15 Nov 2026 06:01:24 +0000
Manifest this update: Sun 15 Nov 2026 06:01:24 +0000
Manifest next update: Mon 16 Nov 2026 06:01:24 +0000
Files and hashes: 1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: s80vudUBcA6rboFuP180pwzTVWFleEcvomw/YxORxCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:d1:59:53:6c:e4:bd:ca:dd:26:a3:69:6d:47:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Nov 15 06:01:24 2026 GMT
Not After : Nov 16 06:01:24 2026 GMT
Subject: CN=23886ffb2707956725e84f665081a34b499c3808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:61:a2:4d:25:fd:bd:25:25:f1:7d:0f:54:
bf:d9:ae:d8:4f:24:9e:09:e7:d4:fd:40:fc:e7:4e:
82:e3:c1:68:1a:ca:29:f2:5f:55:d9:e5:1a:fa:d4:
74:f7:80:82:cd:2b:31:c9:31:10:c3:c2:c1:eb:89:
ce:76:7e:4f:17:14:91:f4:b3:04:57:53:2d:99:f4:
10:06:72:53:ad:eb:8b:a7:52:c5:c9:1e:09:2e:ed:
9b:3a:df:de:61:8f:13:10:fc:62:67:6a:18:75:c9:
c6:db:ae:43:09:8f:1b:13:07:38:28:0f:43:cc:8e:
63:2e:5a:30:73:fb:7b:5d:de:ea:c3:92:ae:ac:ec:
1d:d7:7e:e3:9f:0b:83:27:36:92:d8:ca:d2:56:4f:
9f:51:4b:1c:22:93:05:dc:17:75:df:b4:62:d8:70:
76:d5:80:8f:9c:c0:39:41:8b:b5:92:61:22:63:92:
3d:10:cc:0c:44:6e:c1:b8:9e:1a:a1:bd:18:58:9d:
fa:cb:ff:3e:12:15:a3:53:0e:67:46:9e:89:8a:dc:
cd:e7:7f:43:91:e7:a9:4e:08:d5:16:8b:c7:7c:67:
a6:f6:63:7a:b9:8f:55:3f:26:16:df:e3:f8:2a:19:
64:28:a8:e5:98:76:cc:1d:06:c2:e1:05:90:ab:c3:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:6F:FB:27:07:95:67:25:E8:4F:66:50:81:A3:4B:49:9C:38:08
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:62:2e:4b:27:c7:09:ea:51:ef:d9:51:df:ed:47:81:91:
19:2e:bf:2e:09:81:54:ba:2f:96:d4:2a:7d:7a:12:ae:53:96:
5c:bf:61:62:97:a5:c2:99:9b:42:ea:87:a0:24:3e:db:84:70:
30:1d:be:19:13:26:ab:5a:d0:85:77:a7:44:fe:b9:ab:5b:9a:
8d:ab:18:11:f2:0a:51:29:03:a7:fd:d9:d1:5e:fe:b0:b1:b9:
c0:58:b3:4b:16:7d:80:04:1c:c0:26:78:83:d1:2e:19:f7:07:
30:40:03:e9:d4:e6:f3:aa:92:36:ec:72:31:1d:60:36:1a:b9:
01:84:ed:b4:5c:27:98:87:df:e4:10:d6:41:bd:5e:38:b8:16:
ed:9f:4c:5b:91:df:2c:4d:f0:a8:ae:95:6a:82:f1:32:f9:5e:
e3:87:0c:52:68:10:5d:0d:d3:cf:d0:c4:66:e4:3a:31:fa:91:
f0:43:5c:7d:83:9f:ed:24:6e:d3:5d:5e:12:a6:fb:b4:98:6a:
ff:9d:a7:95:c9:85:88:49:54:c2:fd:6a:18:e8:06:a0:d6:92:
b1:f6:9a:57:0a:00:cb:f6:00:39:14:a1:75:2e:37:83:f3:d6:
03:57:37:31:41:af:e7:fd:56:e3:5d:f0:2d:d8:59:9e:2d:80:
a5:e9:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:02 2026 by rpki-client