Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: bBiNgP2R/9nBmOQGzj0jBvTOUR+/1+OUCO65CdyQt3o=
Subject key identifier: DE:D9:2D:02:F6:F1:B5:78:40:AD:D8:D4:B8:44:98:04:13:4C:AA:F7
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019E1CB5687D8EBEDE1124617AC7C4551DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 0205
Signing time: Tue 12 May 2026 15:01:51 +0000
Manifest this update: Tue 12 May 2026 15:01:51 +0000
Manifest next update: Wed 13 May 2026 15:01:51 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: WFmGYj5i0utBp08/sNneNKPdYqBcpFxMrTepPfJj9cM=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:68:7d:8e:be:de:11:24:61:7a:c7:c4:55:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: May 12 15:01:51 2026 GMT
Not After : May 13 15:01:51 2026 GMT
Subject: CN=ded92d02f6f1b57840add8d4b8449804134caaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:c6:f9:fd:4b:ff:c4:a1:04:27:c0:bb:68:
04:53:35:af:9d:2a:2e:db:8f:81:f4:56:e4:dc:d4:
18:71:b1:e0:8f:ee:d2:ae:a4:50:a1:09:d1:65:19:
77:b0:7a:9d:e5:06:62:56:c7:bd:0d:53:d2:17:ed:
ec:a1:04:b6:99:90:0e:46:4c:ed:88:69:b9:0f:1b:
49:af:14:00:f5:13:92:9d:30:97:28:d3:d2:e2:92:
ec:8a:7b:79:eb:aa:40:68:53:7b:70:e4:f8:58:8c:
ef:39:04:25:6e:ae:62:fe:9f:83:9b:67:9e:a1:f4:
a8:9a:a3:9d:82:71:33:4b:65:5e:b2:de:3a:ac:38:
e9:c9:da:9f:cc:c4:d5:5d:48:8f:90:48:ba:c0:01:
10:0c:e0:01:0c:3f:cc:5b:ef:5c:98:15:0a:6f:38:
3a:2e:14:42:2b:fb:c2:fe:34:ec:c7:7d:53:f0:84:
55:66:f3:b8:e2:6b:bb:69:26:a8:8b:74:6b:ac:83:
ea:73:66:c8:f9:39:51:fb:88:0a:f4:a8:98:7e:ef:
e1:69:c7:44:b5:7d:31:49:75:0a:8e:37:ab:d0:02:
95:96:95:85:9e:41:1c:9f:8e:84:b5:69:fe:33:d4:
02:d7:ac:db:6f:40:79:32:fe:fa:07:95:2b:f0:71:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:2D:02:F6:F1:B5:78:40:AD:D8:D4:B8:44:98:04:13:4C:AA:F7
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3d:44:40:ca:5f:6f:60:ca:2d:90:9b:e6:6a:7e:cd:93:df:
ab:48:e0:fb:0c:8b:fa:59:37:ff:6c:75:bb:2c:66:a7:83:4f:
22:5a:19:3b:18:06:f8:74:ac:f3:dc:8f:08:47:d2:77:52:f2:
6e:ca:c9:93:e1:4c:a4:0b:57:b5:a6:35:2a:6c:c0:9a:4a:6f:
37:dd:4b:1b:f5:e2:e9:bb:f8:b7:32:9d:2d:e1:77:e1:39:72:
32:a1:1a:c0:44:bb:f7:7a:01:ae:ee:9b:89:c0:42:09:ab:e1:
49:19:59:96:d9:f1:cf:93:eb:52:85:6d:65:a9:a3:da:9e:f7:
c8:3e:07:a5:c1:40:9a:b8:2a:de:f6:ff:be:8c:84:f2:3e:86:
cb:28:7e:e8:ac:80:e1:90:26:80:e5:52:a1:fb:59:f8:9e:53:
bd:a8:b8:b5:3f:0a:2c:e6:8d:13:74:ed:28:8f:2b:8e:b9:20:
02:20:03:f5:87:db:3b:fe:44:45:6a:25:dc:f2:ab:ed:06:a7:
89:0b:31:b3:d0:a5:d9:78:af:a5:6b:e3:95:ee:4a:00:3a:e0:
e9:57:c1:b5:f9:17:9b:a3:2b:00:49:27:bc:99:46:d2:ac:6a:
63:1c:10:3e:58:d2:88:1c:bf:2f:c5:7d:81:5c:c7:08:6b:45:
3f:2d:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:09:43 2026 by rpki-client