Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
File: JZB_kNn52QL88EvQtGFSw4J6fVA.mft (raw, json)
Hash identifier: 3Efu7Li5WLTyo/GCFodAEpbiSmPX01huyFUDUOn4y+A=
Subject key identifier: D8:0D:4C:CF:43:39:CA:B9:E4:5B:9E:1F:F7:A9:4B:D7:83:EC:9F:94
Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Certificate serial: 019D2772191EF1AFC91BDBBAB3486C986EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
Manifest number: 0139
Signing time: Thu 26 Mar 2026 00:01:22 +0000
Manifest this update: Thu 26 Mar 2026 00:01:22 +0000
Manifest next update: Fri 27 Mar 2026 00:01:22 +0000
Files and hashes: 1: JZB_kNn52QL88EvQtGFSw4J6fVA.crl (hash: PYMX7ALM3nyC7eZjqMy9PtDbeW0y6jEbN85ZOPVXAaE=)
2: us20DoJCXsVZzbd3x5fHyF61Jik.roa (hash: 1tw/rfH56Z411UghhNhBV3Cnovjrc0BrKALUNfjqvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:19:1e:f1:af:c9:1b:db:ba:b3:48:6c:98:6e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Validity
Not Before: Mar 26 00:01:22 2026 GMT
Not After : Mar 27 00:01:22 2026 GMT
Subject: CN=d80d4ccf4339cab9e45b9e1ff7a94bd783ec9f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:c7:58:ac:8c:9e:3b:1f:7b:62:cb:12:b0:
9b:5a:3d:10:50:2d:3e:71:c0:f1:9e:21:30:26:fa:
55:8d:c7:7e:df:fc:3f:d0:e5:8a:6e:27:88:8d:6f:
14:cb:e2:c2:73:7d:74:d0:0e:a0:a1:be:cc:01:e9:
c3:56:d5:ce:15:0d:3c:5d:c6:f8:81:80:d0:6e:01:
04:b8:99:f2:60:6f:64:db:12:13:7c:c2:0d:1a:da:
cd:95:4a:40:54:d0:49:55:72:67:50:2b:40:97:b5:
27:91:54:27:b7:42:c5:bd:a3:0b:12:fc:6f:eb:90:
00:fd:bf:38:df:f8:e1:6b:49:29:26:38:b8:a2:23:
69:e6:94:21:88:4d:1d:e6:a7:b1:12:33:ef:b7:ee:
55:1c:d6:87:04:62:46:5b:dd:79:5a:2a:b8:b3:5d:
d9:bd:50:54:ca:fb:e1:cf:d9:23:44:e8:31:4f:88:
96:ce:79:60:10:78:bf:25:41:47:db:81:69:fb:79:
ba:15:49:a2:6d:ed:63:c1:01:3c:27:fa:8b:c6:2e:
e0:95:e0:90:ff:c1:39:13:81:e5:e6:f7:82:c7:5a:
72:c7:17:f5:4f:1c:b4:ab:78:dc:90:b4:a9:aa:df:
99:b2:46:5b:c2:38:e5:1f:af:9c:5a:78:57:40:a8:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:4C:CF:43:39:CA:B9:E4:5B:9E:1F:F7:A9:4B:D7:83:EC:9F:94
X509v3 Authority Key Identifier:
keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:25:94:47:9e:d4:43:10:75:7a:c0:3e:df:b2:69:f6:f4:2f:
85:ea:08:76:a7:71:29:db:13:bb:67:1d:61:bb:65:31:0f:45:
3c:d6:ea:e9:c7:4c:f5:37:db:70:19:0a:d0:21:e0:88:b5:a1:
88:61:12:fb:e2:51:d6:57:41:71:dc:35:14:03:7d:3d:9c:6f:
2e:20:ae:c0:cf:09:30:eb:3f:e0:6e:e7:45:69:2d:8e:e5:36:
bf:f6:11:59:24:f6:be:e0:74:4d:e3:77:50:9e:4b:a8:4a:35:
7c:d5:b1:64:e2:0f:1e:6a:bd:ca:28:65:76:ea:36:9d:12:c5:
66:90:47:c2:23:6a:0b:a1:79:6c:50:db:98:80:b4:d9:61:40:
8d:79:df:86:80:c5:57:fb:37:11:49:a0:16:77:26:51:ee:ae:
96:64:7a:8b:6c:28:ae:7e:af:12:60:e6:20:9c:7f:23:81:c2:
56:7d:4b:e9:78:6d:be:90:87:c5:73:96:f4:d6:0b:1e:5d:e9:
5c:15:91:35:0a:b9:4d:ec:14:15:c1:60:c9:a8:9f:5f:ff:f7:
1f:2b:e7:58:b3:df:d7:70:3d:e5:78:4b:b6:fa:27:c8:6f:86:
89:a3:21:e2:ea:6c:e5:b9:97:ff:fc:a0:5b:42:d1:0b:78:3b:
26:e5:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:36 2026 by rpki-client