Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: QOM0LDng2vnGVP88WJvbmtg4J9DvGihO9Ki7t4inBxA=
Subject key identifier: 3F:19:97:1C:5E:60:CF:05:EA:EA:DE:6B:BD:B6:FE:4D:8E:07:6A:01
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019D26CD01A1A3B3D3547B7B2323C7C51DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 10B7
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: qwwSkHNx4eTbH6ZYCddzgVU06yfbZZz4GUT0mz6kNWk=)
3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:01:a1:a3:b3:d3:54:7b:7b:23:23:c7:c5:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=3f19971c5e60cf05eaeade6bbdb6fe4d8e076a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:3b:61:d6:5a:77:9b:70:7c:91:fc:f3:ec:
14:a8:ce:83:ba:de:86:14:61:77:45:46:db:12:eb:
76:75:07:ae:00:12:a4:56:50:b8:92:c7:b6:c1:ff:
5e:69:89:53:2b:b3:e7:c2:4b:f2:fe:b7:e9:f2:04:
a3:0f:55:4b:fa:ec:d1:52:5e:92:e8:6d:fa:f1:12:
d4:26:7b:74:0a:bf:ae:a3:ae:ba:93:0b:0d:8e:6e:
26:fb:cf:2c:df:6b:f5:91:15:ab:c3:ce:51:d8:ce:
a4:ee:36:5e:26:38:85:0b:5a:56:36:c5:e9:a3:09:
6f:ef:06:a2:e4:a5:cf:af:e1:e0:ce:65:2f:c8:9c:
13:d4:44:26:9f:13:ac:09:85:ff:81:10:7d:0c:72:
f1:27:c6:36:ed:3f:39:eb:2f:95:62:30:e0:96:0b:
8a:ff:03:64:fb:76:e3:2a:58:fc:9d:38:6e:4b:a2:
d0:93:d8:13:d9:17:17:12:73:c4:1a:e2:fb:08:e2:
d1:66:0a:51:b4:c5:c0:78:67:87:38:a0:36:dd:85:
96:dc:72:f2:7e:b9:6b:83:e9:89:dc:5a:9b:0d:17:
2e:2b:b7:82:13:86:1c:b4:52:2b:ac:9d:8e:c6:72:
f4:81:25:1f:01:47:fb:2a:6c:e5:69:59:26:e5:44:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:97:1C:5E:60:CF:05:EA:EA:DE:6B:BD:B6:FE:4D:8E:07:6A:01
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e1:bd:8f:02:1a:56:d3:cb:c8:9b:24:40:ef:e1:ab:08:56:
46:54:90:75:a6:a0:a0:a9:54:3d:b8:75:5a:49:89:8c:f4:bd:
ae:34:8a:a6:ff:ba:83:3d:e9:f4:fc:de:00:07:e9:fc:44:9e:
12:8c:b0:ee:c3:a6:c5:c5:f1:d6:13:39:2a:1c:59:8a:0f:44:
0e:ec:6d:51:35:63:da:65:9e:87:6b:86:8d:f4:aa:fa:5b:f1:
4d:9a:b1:d7:cc:ed:09:91:26:a0:c7:ea:1a:40:ea:7b:34:e5:
d4:83:bb:a0:8c:fd:85:b2:30:aa:61:f7:24:99:9f:c5:c1:02:
1f:61:12:a6:30:0d:6c:a4:8c:49:04:b8:a2:cf:26:ae:d9:b8:
b1:ba:9a:da:2c:1b:b4:f7:2e:94:1e:2d:a5:35:31:00:98:12:
a8:7f:ae:b3:79:52:06:ba:84:3d:45:00:63:19:a7:4a:32:fa:
12:a3:a6:5d:b9:d3:eb:be:a4:e9:62:ff:c9:63:3d:d7:e7:66:
ef:08:7e:06:b0:eb:63:45:e6:75:90:60:08:8f:10:7d:fc:a2:
aa:d1:76:16:75:c5:77:1a:be:2b:5d:c9:a5:29:77:90:90:9b:
18:82:c5:87:71:8d:fc:c8:e0:cf:24:72:6b:17:38:2b:f2:ae:
9b:7c:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:32 2026 by rpki-client