Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: UqrnWu+/jl63+DF9OcRx++fqWB6SFnZok1MSDZgF6VI=
Subject key identifier: 94:AF:53:EB:F3:D4:88:C3:14:99:B6:BB:BB:BF:41:7F:09:82:2D:D2
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019E1DFE79DE65C0FDEC31D9ED3DA1CF722E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 1137
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: cHYajwBvNvo70GTHfgLIKPS952ZjRBf4BMzqzeSkWDI=)
3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:79:de:65:c0:fd:ec:31:d9:ed:3d:a1:cf:72:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=94af53ebf3d488c31499b6bbbbbf417f09822dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:b1:d8:08:75:c4:7f:bd:86:fd:df:97:c1:
ac:62:16:6b:47:64:00:34:1d:7f:47:16:11:72:be:
5b:74:84:cb:2c:d7:34:94:c7:15:2a:f9:ca:ed:93:
83:d5:83:90:77:46:30:68:66:4e:eb:2e:4a:df:3e:
bf:54:af:02:7c:4b:5f:25:75:7b:c7:8a:a6:4b:ac:
25:75:3d:7c:b0:37:6b:55:aa:bb:27:68:bb:75:a2:
2e:c4:61:89:ef:cd:0e:bb:1b:89:9d:be:5f:5e:a2:
0d:86:93:e8:e5:86:fa:57:35:14:06:0f:78:9f:fc:
30:69:88:db:4d:d3:8f:9b:d3:82:16:ee:b6:b3:dd:
f6:cf:59:fd:a3:be:51:7d:d7:09:d7:ba:6e:1b:7a:
9d:72:c3:cc:0f:f2:b4:ca:99:47:8f:67:d6:08:c1:
4d:ab:39:fe:05:bb:f0:19:b1:17:ec:26:14:d6:53:
51:4c:3d:75:bd:30:e6:99:42:4a:34:39:51:ac:5c:
c9:e1:78:2a:08:9d:a6:b6:9f:6f:41:76:81:a9:07:
16:b2:ed:aa:a3:9b:59:2c:00:ec:dd:70:5d:81:a9:
24:8e:fd:16:d1:f4:b7:06:12:c2:37:eb:20:7e:8b:
6a:d6:e6:ad:4e:21:27:1e:ad:14:cd:28:54:fc:53:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:53:EB:F3:D4:88:C3:14:99:B6:BB:BB:BF:41:7F:09:82:2D:D2
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ad:6e:a3:9a:d6:1d:1a:b9:b6:fc:94:ec:ef:4a:f3:d9:5a:
e8:62:fe:ac:24:b6:90:b9:32:3d:8c:ec:8f:4c:9a:8b:b3:4f:
57:c2:8e:f8:aa:44:d3:d3:2e:3d:bb:a9:2a:69:19:cc:f9:0a:
dd:ca:aa:53:ed:de:03:bf:a8:5f:ac:e0:36:bc:10:74:d1:7d:
1d:74:25:69:ad:c3:cf:8e:75:a5:41:4b:b7:24:7d:72:85:50:
78:04:de:2f:1b:ce:7d:74:e1:30:96:4f:a3:6c:e5:d6:e8:69:
13:42:72:1c:52:6c:3e:19:d6:b5:1a:4a:f4:9b:f3:46:12:30:
a2:56:65:ac:63:eb:b7:d3:87:77:35:ab:76:bf:75:35:76:08:
4f:5c:af:a3:cf:6c:8e:4d:99:0e:d6:6c:7a:40:d1:55:c7:fb:
98:ae:52:05:32:85:9e:79:14:d7:a5:ae:86:e4:ac:1f:52:7d:
9c:1b:e4:28:e0:ba:18:c4:57:52:ad:48:62:b9:09:a3:4b:a4:
ae:b7:16:f2:c5:1f:8b:0c:d6:83:61:2c:13:02:b3:c6:db:82:
7a:80:d8:b3:a0:d0:5f:c4:83:86:8b:a6:01:b0:eb:7f:b0:c2:
fb:43:ef:e5:ae:d2:cf:40:66:77:9d:b6:a7:15:29:b8:1e:b5:
d4:4b:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:09 2026 by rpki-client