Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: 0BteBYwehdtPkqdJwmeI9wQfzQ3EZ/obKmYyCLr4+Lw=
Subject key identifier: EC:ED:ED:37:30:F3:4F:20:1B:25:94:3C:5A:47:C3:BE:59:0C:8D:57
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019F92EE00F2EF67A4BD5A37DED17E3ECC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 07:01:38 +0000
Manifest this update: Fri 24 Jul 2026 07:01:38 +0000
Manifest next update: Sat 25 Jul 2026 07:01:38 +0000
Files and hashes: 1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: 451sg+tLXsrTuZdTurJE3GVzn3Co8mVqP0WAncmavlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:00:f2:ef:67:a4:bd:5a:37:de:d1:7e:3e:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Jul 24 07:01:38 2026 GMT
Not After : Jul 25 07:01:38 2026 GMT
Subject: CN=eceded3730f34f201b25943c5a47c3be590c8d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:4c:55:29:fa:2a:c3:2b:75:f1:7a:56:53:
66:cf:73:42:a1:f4:ae:91:35:c6:f2:aa:77:8c:ab:
15:16:81:dc:de:5f:4a:b0:ff:df:0c:ae:92:c9:13:
67:e6:e8:09:34:38:ef:6d:e9:42:03:ff:5e:f6:4c:
81:72:8b:68:3e:25:69:63:97:ef:b2:71:c2:64:be:
54:00:da:a3:35:56:66:cd:26:f1:6d:67:a8:12:24:
f0:e4:8b:2d:27:5d:5a:b1:ee:7f:87:10:43:62:08:
37:e2:f6:43:ee:d6:d9:c2:3b:3b:0f:8d:5f:e7:23:
06:15:41:3b:17:5a:37:ea:11:ad:f9:60:5b:12:6c:
55:77:27:18:65:d4:7c:e7:f0:f7:a5:73:20:30:e0:
20:63:09:ce:11:70:26:ab:fa:fd:46:ee:c5:ae:29:
51:7d:1f:e3:b9:ff:36:87:c5:d1:a2:8d:72:63:9e:
ab:7f:4e:63:70:10:57:14:f1:d6:09:bf:c5:de:c5:
d9:49:06:ab:20:d4:8c:3a:74:f2:05:c7:99:19:c5:
c3:1a:28:d8:30:0d:36:16:34:49:39:8e:4a:4b:41:
f8:e9:c5:4b:15:5f:56:ea:a5:46:98:21:2b:18:a0:
bc:1e:9a:09:9b:24:9e:49:c5:d9:b8:af:fc:b2:0e:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:ED:37:30:F3:4F:20:1B:25:94:3C:5A:47:C3:BE:59:0C:8D:57
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4d:a4:ab:9e:17:92:1c:f8:78:b6:e9:76:20:ec:2b:2e:79:
71:ec:a1:51:f9:54:3f:9f:3a:12:5a:e4:ac:72:63:92:2c:9d:
9c:00:38:99:ee:23:5d:de:e1:82:b1:1b:3d:01:0f:ba:65:83:
35:ad:9a:20:9b:39:01:36:93:1d:bc:f5:74:5d:88:45:81:09:
14:24:94:9a:c4:0b:98:4f:2c:30:88:c3:e1:f1:26:2a:34:1a:
79:83:d6:fe:0b:c7:32:34:6a:ce:17:5a:83:52:8b:01:f7:a7:
51:4d:74:79:f0:fb:f6:52:1a:44:a3:ca:3b:15:65:0e:09:94:
e1:f6:9e:4b:6a:37:d7:d7:55:49:50:e0:6e:d1:2c:ae:fd:29:
e1:41:d0:1e:58:14:c4:d8:7d:c9:af:fe:4c:97:7e:3d:32:d6:
bd:6a:43:99:a5:93:e6:19:70:57:59:51:a9:c9:20:81:a8:df:
6b:71:27:d5:86:3f:05:35:ea:b8:8d:50:9d:8a:1b:3c:57:90:
d5:8c:47:71:35:56:62:59:a3:59:64:27:bd:43:f7:69:e0:a8:
32:fa:2c:9e:86:26:fc:34:3f:a9:f9:52:de:9c:02:9d:03:eb:
4d:b9:c1:17:ec:64:00:bc:ea:79:b5:01:2f:58:10:be:66:06:
cf:42:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:51 2026 by rpki-client