Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier: i0AD88v+v9TXNRqf3mkkOPwY1I0Oft3+P5tGsOMhBgo=
Subject key identifier: FE:10:4C:41:CF:D4:19:59:FB:AC:5B:9B:D9:54:F3:00:C9:C5:46:07
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial: 019D2A72720D46717B769A31C028967287A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number: 033B
Signing time: Thu 26 Mar 2026 14:00:36 +0000
Manifest this update: Thu 26 Mar 2026 14:00:36 +0000
Manifest next update: Fri 27 Mar 2026 14:00:36 +0000
Files and hashes: 1: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: sV7gQdOBKeV5q06hisLARKl05sZY/0FYjkxo2UzkwTM=)
2: q2iMHMpPinukFM5Qhc4ZwsftRx0.roa (hash: +p+ImNbpg+AUu5Y3P8c/ugT7MQsuGHh+4k2E8cJ52tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:72:0d:46:71:7b:76:9a:31:c0:28:96:72:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Validity
Not Before: Mar 26 14:00:36 2026 GMT
Not After : Mar 27 14:00:36 2026 GMT
Subject: CN=fe104c41cfd41959fbac5b9bd954f300c9c54607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:17:98:75:c6:a0:d7:25:2e:29:59:ff:69:
c5:0c:51:03:53:77:24:3b:06:c7:e2:98:69:b4:0c:
41:a2:ae:4d:06:b9:de:07:d0:1c:77:0b:64:38:8a:
c5:eb:38:8e:01:dc:be:bf:32:77:a4:9e:e1:2c:12:
ad:2a:95:66:ea:1f:23:9b:90:60:18:d2:bc:0e:be:
82:70:a0:35:f7:2a:17:58:2b:cf:be:7d:75:43:66:
9a:f3:f9:d2:c9:87:4f:b2:2a:20:4d:82:58:90:24:
fc:68:37:3f:9f:b5:fb:64:bd:cd:c0:32:10:e2:09:
7e:7e:4f:d9:08:e5:37:c3:df:bb:ec:2d:5b:69:ee:
e2:a6:4b:06:76:a1:31:9c:a8:97:dc:b9:7d:07:8c:
19:4e:87:22:1a:e1:de:38:05:f1:57:f7:14:90:15:
c2:73:74:b8:b2:e2:1f:b6:01:ec:24:20:99:42:8c:
27:72:d2:aa:cc:5b:6c:89:9c:87:94:3e:46:f9:36:
01:bd:23:d4:14:97:35:35:be:c3:17:fd:8d:67:1d:
48:98:30:87:e9:30:5f:5a:b6:c3:8e:74:04:b6:2c:
9f:07:df:aa:00:d9:43:46:00:ec:17:2b:13:ad:7a:
65:8c:04:79:98:04:51:64:e2:97:00:df:19:b0:99:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:10:4C:41:CF:D4:19:59:FB:AC:5B:9B:D9:54:F3:00:C9:C5:46:07
X509v3 Authority Key Identifier:
keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:f7:14:22:bb:c6:d6:eb:31:47:19:e1:21:98:3f:c7:89:
40:0a:2b:e1:10:60:9a:6d:2e:4c:ec:54:14:35:e7:70:51:78:
ce:34:ac:29:cc:34:0e:59:83:ec:90:6a:b4:54:a2:ed:15:3b:
53:30:ef:7f:b9:02:0e:8a:b5:7e:3c:a3:16:31:80:2f:c5:8c:
12:58:b3:15:52:a4:62:c5:91:9d:44:f9:61:05:30:b8:2e:56:
71:64:9d:79:46:6f:a4:c3:62:af:70:17:d7:50:91:87:8c:38:
c0:8f:bb:35:f8:25:41:d8:1f:29:98:e5:ec:47:3a:ff:65:b9:
78:e0:44:cb:70:ce:49:e7:92:9f:90:25:20:e8:1b:99:d8:89:
40:cc:65:30:a1:52:e1:93:30:24:fe:f7:95:13:4b:20:3e:69:
78:e6:6c:41:15:c1:6d:f1:76:57:7d:1f:6d:d6:44:9c:67:63:
91:be:5f:e6:98:64:86:ec:0c:21:e4:a9:9c:4d:a2:12:8a:30:
5d:e6:b7:a7:eb:8f:32:d5:d1:e0:58:fb:e2:bb:50:29:c2:79:
59:d0:f2:c2:b2:59:0d:42:35:e0:fc:ab:df:bc:40:49:a0:6a:
35:19:4e:81:cf:bf:74:99:15:e4:9c:be:b2:7e:71:84:c1:e8:
94:db:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:12 2026 by rpki-client