Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
File: JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft (raw, json)
Hash identifier: PwK2wrTop/+Pzrlj1FHzQ1WjXpS4Pm2Ib6ViF1c22mk=
Subject key identifier: 4A:C1:96:5D:9A:C3:9C:7C:60:8E:09:87:32:67:47:41:20:D8:CA:B4
Authority key identifier: 27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA
Certificate issuer: /CN=2736cb723aedd55aec34f400b76cc4678ccba1ba
Certificate serial: 019D273A8E9258BB663B1758B71890A08DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
Manifest number: 01DA
Signing time: Wed 25 Mar 2026 23:00:41 +0000
Manifest this update: Wed 25 Mar 2026 23:00:41 +0000
Manifest next update: Thu 26 Mar 2026 23:00:41 +0000
Files and hashes: 1: JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl (hash: TVWbfmd6K92Zj+ntj4IWUVQZUCBWyHjKKJ4lRwKKXIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8e:92:58:bb:66:3b:17:58:b7:18:90:a0:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2736cb723aedd55aec34f400b76cc4678ccba1ba
Validity
Not Before: Mar 25 23:00:41 2026 GMT
Not After : Mar 26 23:00:41 2026 GMT
Subject: CN=4ac1965d9ac39c7c608e09873267474120d8cab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:43:ab:88:e6:ad:42:9a:55:a9:66:c7:ed:
dc:9d:da:85:2c:b5:74:34:a0:d8:34:9d:5d:47:ff:
38:c3:fe:11:96:07:ea:45:7d:90:50:9e:92:c9:11:
2b:77:91:cc:25:0b:7a:92:ce:11:29:c2:d2:17:87:
69:87:9c:ea:aa:2b:af:50:2f:43:e8:3e:d4:5b:64:
7d:55:79:ba:2f:88:94:44:94:ba:38:d6:db:2c:18:
e5:12:b2:0f:b6:56:02:d0:04:6e:70:1c:26:4a:0a:
62:4a:b6:9e:f3:1a:c5:c4:d0:4f:11:16:4a:e8:a6:
98:3e:30:5d:ed:7b:34:ec:81:f0:d8:56:50:df:cc:
f3:31:06:55:10:a9:66:99:db:fe:00:84:99:3b:2e:
17:d9:03:b1:35:c8:14:7e:03:67:30:c0:02:f9:0a:
2d:6b:7b:87:01:c9:5b:05:78:90:d6:0c:17:7d:8c:
3c:d4:ec:3f:03:4a:74:e4:56:23:a5:43:0d:ab:80:
56:c7:5a:8f:9b:b0:33:87:5f:a5:02:de:62:a3:e0:
eb:25:2d:fa:b4:f2:84:67:56:fb:9b:3a:b9:85:f0:
69:54:71:0b:db:f6:b5:f9:35:88:fe:f0:7e:c4:3f:
a3:18:8e:87:71:67:c8:9b:56:1e:76:4e:bb:f6:73:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:96:5D:9A:C3:9C:7C:60:8E:09:87:32:67:47:41:20:D8:CA:B4
X509v3 Authority Key Identifier:
keyid:27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:4e:4f:69:a6:95:7e:23:d7:24:fe:6f:f9:55:69:1a:99:
f4:78:66:a2:bc:3d:42:99:4f:e4:af:cc:1f:e9:5f:a9:9e:8d:
77:6c:78:83:7c:d6:f6:f5:bd:bb:14:89:93:a6:94:22:aa:4d:
be:07:47:4d:df:57:d8:3f:71:a4:29:f0:c3:aa:5a:75:e5:43:
ab:08:7e:01:cc:3c:9f:37:6e:02:e4:1e:15:0e:80:77:bc:d7:
f7:1d:7d:27:73:7a:81:d8:82:90:46:09:7d:45:23:0f:b8:d3:
6b:b0:b8:17:3e:a9:e5:a4:2c:05:3c:00:1c:a4:25:2b:5d:02:
43:2b:0f:f0:de:08:53:29:42:19:75:a7:fd:02:6f:82:16:7a:
86:e5:04:06:aa:1d:a3:d5:e1:72:76:c2:8f:9d:f3:b6:8f:01:
35:70:2d:1d:ad:20:52:6f:8f:4e:29:ce:ec:dd:83:e9:42:5f:
33:0b:c4:03:d6:6f:b6:5f:be:8a:a6:19:85:23:73:cd:50:39:
33:d8:56:24:14:92:36:25:f4:48:58:1a:78:a3:82:aa:74:ed:
4f:f9:99:29:c8:f1:19:74:5b:c9:f2:d2:34:7d:b4:f7:bb:e4:
00:fd:42:3b:fd:29:22:1d:7f:19:58:52:95:97:02:1a:27:82:
2d:89:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:45 2026 by rpki-client