Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: nA3UpRgrmaCb7j0783s1w/x+E8ryGh7q3Ufd7LocSiU=
Subject key identifier: 3D:F4:A7:1B:1A:08:3E:BF:20:41:7D:AF:60:87:18:1D:03:BA:6F:9D
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019D2772AA21EF318ED3C2E6545DECFC023F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 0186
Signing time: Thu 26 Mar 2026 00:01:59 +0000
Manifest this update: Thu 26 Mar 2026 00:01:59 +0000
Manifest next update: Fri 27 Mar 2026 00:01:59 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: NEFPZlTQr8vuF9RhzQ9J3Kqd4s7yVIyXft64f9GxIIo=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:aa:21:ef:31:8e:d3:c2:e6:54:5d:ec:fc:02:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Mar 26 00:01:59 2026 GMT
Not After : Mar 27 00:01:59 2026 GMT
Subject: CN=3df4a71b1a083ebf20417daf6087181d03ba6f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:e2:ae:52:da:1a:98:cf:f9:97:6e:74:2a:
18:2c:b9:75:8b:eb:c5:81:d2:b4:da:a9:62:d8:62:
54:47:46:24:4b:5c:f6:71:08:61:3f:0a:82:c8:50:
9c:38:5b:e1:46:cc:5e:26:0c:7e:f1:b0:6d:b5:ae:
4a:5e:4e:2c:a8:a9:46:e0:b7:b1:a5:4d:44:b3:03:
9d:d7:01:4b:4a:e7:f9:7b:08:49:93:be:12:fe:55:
67:12:75:27:b6:6c:36:4a:e7:90:19:ef:40:8c:27:
8f:c3:ff:fd:ab:75:1e:b7:c1:6b:17:62:1b:07:8a:
b7:45:b9:62:34:01:22:f2:1e:4d:7f:28:61:53:b9:
66:9d:ac:1e:de:7e:5e:11:6d:86:3b:d4:af:2e:84:
c7:1e:7c:3a:58:25:e3:4a:ee:89:a3:fc:89:1a:45:
60:8f:15:c9:f9:05:c6:e0:a0:ac:a6:dc:d6:ae:c5:
c0:00:40:3d:91:35:61:e0:63:03:39:5b:c2:1b:90:
f4:ba:bc:30:e5:2b:14:d4:1f:86:63:c4:15:42:8c:
0e:f3:93:10:f8:1d:33:81:f3:14:33:42:db:cd:dd:
e4:c4:66:ab:1b:df:9b:41:dd:bf:87:0f:7e:a5:02:
9f:ab:af:26:b5:9a:d5:6f:b3:0d:f3:2e:d4:5b:23:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:A7:1B:1A:08:3E:BF:20:41:7D:AF:60:87:18:1D:03:BA:6F:9D
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cb:dd:38:34:04:bd:bf:09:86:f7:ae:39:59:7f:1e:b6:22:
67:d3:07:43:b3:7b:57:e3:68:48:1d:9b:85:12:03:e6:40:c7:
fd:35:f5:f8:9d:ac:d7:1f:49:e9:35:d2:d0:75:cd:45:b5:ab:
57:cd:2c:a6:c5:66:9e:74:c9:8e:40:e2:c6:0b:f4:a4:73:d6:
02:2c:7d:ad:18:b9:b3:3b:0f:44:99:46:85:b0:69:0f:6b:70:
cd:7a:e4:c4:34:7e:76:44:78:c5:f2:7b:bc:cc:7c:81:80:63:
d3:fa:96:67:22:a3:b1:98:24:85:96:cd:41:1b:f7:6b:f3:59:
cf:c6:0e:eb:1d:78:cf:b3:0c:df:27:95:67:8b:fb:47:b9:5f:
30:3e:2f:ea:84:14:11:f2:df:b4:7f:fc:36:75:95:0a:0c:be:
39:a6:72:d0:e7:b5:d4:35:07:3f:89:33:83:02:1d:d2:74:1f:
4d:eb:7f:5f:d5:c6:86:20:d4:ed:1e:6b:e4:3b:10:1f:36:1d:
2d:cd:63:61:e0:42:a6:5a:dc:34:24:c9:c6:c0:fe:2f:bc:e7:
15:5d:eb:fe:b1:af:7c:8c:d2:78:94:d1:b7:ac:5c:df:a0:77:
55:7f:02:e4:a7:02:50:d6:00:d6:78:c1:74:c4:41:3f:d0:ea:
9a:6b:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:48 2026 by rpki-client