Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: TfVlo7b0DVu+Gg0JRhPVT3HY6AltkuTYPzrTO5A+rno=
Subject key identifier: 15:1B:39:E5:C4:B1:F0:82:FE:D6:DC:56:F9:E0:18:27:45:2E:67:17
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019D270458E36416FBEA8EFCE0642FB061E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: n4HqOFH1NSLgk0V8wXJ4pN9NiUNXQFuaV9vkmlxQZNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:58:e3:64:16:fb:ea:8e:fc:e0:64:2f:b0:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=151b39e5c4b1f082fed6dc56f9e01827452e6717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:21:f9:21:55:81:e6:7b:4f:3e:f7:a0:18:1e:
0b:3c:d2:d5:17:a4:ef:8d:ba:8d:bf:05:78:ad:40:
0d:ac:b8:1f:78:75:2f:aa:e5:9e:7b:d3:0a:b6:76:
ea:49:b5:0f:d5:93:1e:0e:8c:73:af:e4:9e:5f:52:
8d:86:4d:8a:32:b1:77:fd:67:9e:ac:c1:70:32:50:
87:35:50:f7:67:e5:d3:fe:5c:ff:61:a9:b1:62:94:
7b:6d:fc:43:9c:82:1e:a0:60:e7:7b:04:c1:29:4a:
31:40:5c:1c:92:7a:2f:aa:ac:40:28:23:ec:b7:db:
81:78:a1:2f:33:c4:b2:3c:ec:c7:06:9c:c5:3c:2d:
c0:a3:6b:56:9a:2a:ee:9c:6c:1a:74:5e:22:43:02:
14:b9:8c:f1:63:f2:39:0c:36:c4:1c:cb:93:fd:94:
f4:1a:78:d2:43:af:a4:83:0c:7f:a6:16:15:f3:0d:
5a:1b:e6:b8:e9:f5:e3:87:3c:0b:8d:62:b4:01:41:
87:39:52:68:97:48:ef:62:a7:82:b1:9e:ab:d8:8c:
a1:bf:e1:41:78:d0:d1:46:29:d0:15:ee:6d:17:ac:
33:4f:fb:12:a4:3b:10:e4:1b:da:4b:a0:a2:c6:de:
45:b8:03:43:2b:6f:66:08:12:62:e7:82:73:cf:c6:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:39:E5:C4:B1:F0:82:FE:D6:DC:56:F9:E0:18:27:45:2E:67:17
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5d:68:27:ba:dd:48:d8:57:3f:1f:28:ec:69:19:d9:d9:99:
9c:ae:0e:4a:05:e8:03:b5:d6:f4:a6:61:e9:30:56:c7:fd:f1:
2a:72:c3:d0:95:d4:73:24:4a:e8:13:6e:d4:84:02:e7:92:7d:
e2:c6:11:b7:2c:f4:7c:8f:82:25:0a:13:72:a1:bb:9f:27:6c:
ce:ac:d6:62:9a:d0:9f:80:e3:74:57:13:7e:a5:42:7c:de:91:
06:db:6b:ab:08:16:96:74:5e:12:2a:fd:46:87:d0:21:dd:74:
9b:78:43:a2:c4:e6:d6:42:cb:0f:ff:a5:de:48:db:66:66:10:
6b:c7:9b:cd:43:c2:4f:4e:23:45:dc:65:61:ff:49:7c:b1:07:
4b:02:76:05:be:b1:da:87:e6:8d:ce:2a:03:5c:01:08:28:eb:
43:4d:00:5f:90:e2:3f:a4:47:7a:44:6f:59:a6:50:54:33:57:
f2:12:ab:52:e8:5a:14:f7:f3:0e:6a:3b:3b:1a:f2:e5:61:e8:
88:5d:5e:e2:29:de:20:8e:77:b8:49:cb:3b:13:42:24:50:4b:
e6:e1:55:fb:b2:93:26:d6:05:fa:16:7a:c6:f5:c2:01:69:d0:
cb:f3:9d:ed:5c:fc:ed:a5:60:95:4c:48:ed:57:e5:47:e9:f6:
2b:af:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:41 2026 by rpki-client