Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: EpYjncIuSgd82p2dz7dkzK9WjnEOE+qXEENGTevoyx8=
Subject key identifier: 02:86:EE:DA:B3:03:08:2A:F0:51:FE:2B:36:11:A9:66:33:F9:EA:64
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 01A0D57031BDB76AA7C41D365359D1466178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 1A01
Signing time: Thu 24 Sep 2026 22:01:34 +0000
Manifest this update: Thu 24 Sep 2026 22:01:34 +0000
Manifest next update: Fri 25 Sep 2026 22:01:34 +0000
Files and hashes: 1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: s7HEfGsHiFe5hthzpaA0ebpOZukeGd281ANVoGFFaZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:31:bd:b7:6a:a7:c4:1d:36:53:59:d1:46:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Sep 24 22:01:34 2026 GMT
Not After : Sep 25 22:01:34 2026 GMT
Subject: CN=0286eedab303082af051fe2b3611a96633f9ea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:da:3a:c9:ae:f5:7f:6f:66:6b:a4:3b:be:
2e:0b:ee:ad:32:6d:69:97:c0:c1:7c:f9:0e:27:e9:
bf:5e:ef:c6:0e:3a:3b:e5:9c:a9:cb:5e:44:3b:64:
35:41:71:5d:e3:53:61:da:00:41:b3:ff:b4:ae:fe:
83:4b:e6:44:dc:da:ac:7b:ac:b5:a7:50:7c:72:6d:
7d:a2:3e:ed:f7:bd:03:7d:32:16:c7:a8:7a:4e:86:
06:f4:3a:8c:cf:f1:4c:cd:a3:e2:7a:d9:d3:a3:95:
d5:ba:99:23:3a:71:09:d5:7f:6a:bb:53:b9:3f:62:
d3:10:ce:65:76:04:b4:6a:e2:e2:2e:d5:f2:a0:37:
b8:4b:7e:78:24:a6:7d:a4:e6:97:84:00:8e:e8:82:
95:fd:e2:fd:db:03:a1:6d:ac:cb:5b:b4:d3:da:2b:
bd:c8:e0:0e:7a:fb:77:f6:33:08:42:88:70:b6:c2:
36:a4:2d:78:fe:37:5e:d4:ee:cb:f7:12:c1:98:4b:
af:76:30:47:28:da:c6:bb:f7:e4:58:6f:80:ae:44:
c2:bc:c4:57:e2:b8:f4:af:70:83:5c:e0:9c:49:28:
32:ac:04:11:ef:5f:33:59:21:24:dd:46:63:a8:83:
d3:1c:9e:8b:85:36:42:44:65:14:70:c0:ff:3b:98:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:EE:DA:B3:03:08:2A:F0:51:FE:2B:36:11:A9:66:33:F9:EA:64
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:45:2b:00:10:e3:d5:02:75:cd:ee:4c:91:59:f7:0e:49:83:
32:b6:c5:24:69:8e:6a:91:84:cf:83:93:bf:c8:7f:b6:5c:32:
1c:13:85:47:37:68:a8:97:5d:22:60:6c:c2:10:1b:0c:6c:28:
ed:bc:d0:7a:97:e2:de:df:00:00:de:fa:39:e6:7d:d3:cf:cd:
a9:e0:1d:0f:d4:52:ec:4a:36:b2:41:cc:51:66:80:f4:f5:5a:
3a:13:85:f0:cc:ed:34:6a:73:f0:23:ad:06:77:60:06:e1:6e:
f3:0a:5a:4c:50:1d:de:af:d6:01:e4:18:8a:21:85:1a:31:13:
a8:05:7d:46:28:75:dc:e8:4c:e1:b2:38:76:c1:90:27:27:c8:
ec:68:2f:92:30:ae:c5:f3:ee:a4:23:ba:86:61:fc:3e:94:81:
f9:f6:44:4b:47:44:17:8d:f0:47:fc:05:2c:f8:a4:49:54:53:
00:43:85:5b:72:e4:6e:c2:fe:32:b7:6c:15:28:23:d0:bd:e5:
c3:a2:d0:c5:39:9a:87:db:c6:49:c7:c8:31:ec:97:de:46:64:
dc:44:15:10:b0:39:37:3d:9c:56:31:06:be:1c:bd:30:74:85:
6f:3b:7c:bd:33:76:8b:2c:af:10:85:ba:c0:c6:5b:c8:ee:7d:
e1:d5:74:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcDG9t2qnxB02U1nRRmF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZTdmZmU4ODU4Mzg3ZWQxYjNhN2VjYTc2MjA1ZWYw
ZTIxZjYwHhcNMjYwOTI0MjIwMTM0WhcNMjYwOTI1MjIwMTM0WjAzMTEwLwYDVQQD
EygwMjg2ZWVkYWIzMDMwODJhZjA1MWZlMmIzNjExYTk2NjMzZjllYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtHaOsmu9X9vZmukO74uC+6tMm1p
l8DBfPkOJ+m/Xu/GDjo75Zypy15EO2Q1QXFd41Nh2gBBs/+0rv6DS+ZE3Nqse6y1
p1B8cm19oj7t970DfTIWx6h6ToYG9DqMz/FMzaPietnTo5XVupkjOnEJ1X9qu1O5
P2LTEM5ldgS0auLiLtXyoDe4S354JKZ9pOaXhACO6IKV/eL92wOhbazLW7TT2iu9
yOAOevt39jMIQohwtsI2pC14/jde1O7L9xLBmEuvdjBHKNrGu/fkWG+ArkTCvMRX
4rj0r3CDXOCcSSgyrAQR718zWSEk3UZjqIPTHJ6LhTZCRGUUcMD/O5iIgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKG7tqzAwgq8FH+KzYRqWYz+epkMB8GA1UdIwQY
MBaAFI8/nn/+iFg4ftGzp+ynYgXvDiH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMt
ZTdhY2Y5NDFmMzc1LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMtZTdhY2Y5NDFmMzc1
LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0UrABDj
1QJ1ze5MkVn3DkmDMrbFJGmOapGEz4OTv8h/tlwyHBOFRzdoqJddImBswhAbDGwo
7bzQepfi3t8AAN76OeZ908/NqeAdD9RS7Eo2skHMUWaA9PVaOhOF8MztNGpz8COt
BndgBuFu8wpaTFAd3q/WAeQYiiGFGjETqAV9Rih13OhM4bI4dsGQJyfI7GgvkjCu
xfPupCO6hmH8PpSB+fZES0dEF43wR/wFLPikSVRTAEOFW3LkbsL+MrdsFSgj0L3l
w6LQxTmah9vGScfIMeyX3kZk3EQVELA5Nz2cVjEGvhy9MHSFbzt8vTN2iyyvEIW6
wMZbyO594dV02Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:13:21 2026 by rpki-client