Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: I4it1SqB32ogBr+nNleMT0UIYY6/GRc+0Erd2I6n+NY=
Subject key identifier: 5D:FA:1A:07:DF:AE:C0:C3:99:7B:11:0A:E7:C5:19:28:31:FA:47:BB
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 019D25F0EDF4A2BB5E00A5ACBCAE967F8C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 164E
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa (hash: S3HFZOHNhrK5JfLIS/zCxpsr98ctYvNI/SQplbg/Stw=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: jXbUepKvLeWpCyc3SOblZLqXb5Qhr+vaHjtG8rXobFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ed:f4:a2:bb:5e:00:a5:ac:bc:ae:96:7f:8c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=5dfa1a07dfaec0c3997b110ae7c5192831fa47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:70:13:0d:95:5d:46:ee:da:b9:9f:f3:0c:
2e:8e:51:9b:6a:e3:70:3d:06:a4:61:38:18:58:eb:
99:6b:93:62:d7:71:4e:2e:44:92:87:79:16:c7:fe:
fe:6b:ff:ce:e6:b3:30:eb:70:c2:4f:64:71:db:96:
59:76:dd:09:cc:25:1f:c6:53:ee:6a:bf:4d:48:03:
69:fd:57:0e:a2:f9:e8:1d:58:5b:b6:49:63:2f:4b:
80:df:37:23:f5:fd:d9:cc:1d:db:2f:b6:ac:f6:48:
7c:4e:0a:9a:d8:2a:75:8e:85:84:fa:57:46:da:ba:
24:17:e5:b1:6e:bc:1c:04:9a:18:8a:e5:a0:44:11:
ec:bf:fd:d6:5e:d5:1f:1c:4e:c5:93:1d:02:15:67:
1a:a9:7a:57:2b:68:c6:de:b3:9a:5d:63:76:cc:f1:
7c:ca:5f:c9:2f:32:51:0c:5d:23:5b:85:55:06:9f:
ac:fb:4d:a3:87:69:d5:aa:4f:42:4f:5c:ac:4e:be:
93:5f:e0:a8:fd:95:40:29:70:58:38:13:1c:c7:ca:
16:cc:5a:82:f2:9d:d8:a3:4f:1d:16:96:ec:7d:1b:
57:15:3f:39:1c:2e:3e:aa:38:8b:01:a2:18:01:dd:
78:8f:e2:0a:25:bf:49:02:84:d2:11:2c:28:5c:91:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:1A:07:DF:AE:C0:C3:99:7B:11:0A:E7:C5:19:28:31:FA:47:BB
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:a8:9e:ef:21:1e:52:0e:28:ec:4a:3e:5d:0b:85:a1:2c:
e1:f3:c7:b8:4c:e8:b9:fe:67:e4:bf:01:66:1a:6b:92:93:8b:
c2:2b:9e:24:ee:71:08:79:c4:8f:69:63:41:eb:44:c9:7c:ee:
41:fd:3b:8f:96:60:8b:7e:22:23:a9:b2:c7:cf:86:61:00:1e:
11:12:68:b2:ba:59:46:98:fc:b6:81:2e:be:be:9f:e3:4b:6c:
47:aa:e1:04:b6:5f:29:d8:7b:19:33:b6:c7:fd:3d:c2:a3:eb:
22:0f:0a:a9:27:03:e9:3d:c1:b8:67:de:2b:82:c4:6c:e3:2d:
1a:ab:e0:b9:55:e5:1a:3a:80:95:c9:08:54:4b:9a:39:ac:dd:
8d:cf:a7:ad:0e:bf:fe:7f:b5:17:a7:a7:d1:f5:e3:37:7c:53:
30:b3:01:3d:a4:fe:db:6f:ef:0e:36:ed:b3:e6:a7:22:60:35:
7e:fe:bf:f4:cf:79:4b:d2:4e:29:83:20:64:ae:0d:3f:17:47:
87:b0:13:3f:c5:6a:47:c1:22:11:d1:0d:4b:85:fa:f1:38:0e:
e3:ef:4b:67:16:ea:83:e5:14:5b:99:9c:11:cc:2d:57:b6:ba:
04:0c:6a:75:a3:28:e8:28:c0:f3:3b:2f:54:7a:1c:b1:2c:5f:
91:2a:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:28 2026 by rpki-client