Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: xfAO8l7Joe/BMfu0iHc3LFa2Hrc8QqoClbq5ZjAOfGg=
Subject key identifier: 98:AB:8F:44:E9:2E:D6:7B:C8:AF:83:6C:4E:84:80:AC:16:C9:5B:53
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019E1E36083FACE96F03226805A767B2A7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0DEB
Signing time: Tue 12 May 2026 22:01:57 +0000
Manifest this update: Tue 12 May 2026 22:01:57 +0000
Manifest next update: Wed 13 May 2026 22:01:57 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: Pqvnib2So19pxR98UwSE3Rgm+NfzMffE5W83hB/w1O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:08:3f:ac:e9:6f:03:22:68:05:a7:67:b2:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: May 12 22:01:57 2026 GMT
Not After : May 13 22:01:57 2026 GMT
Subject: CN=98ab8f44e92ed67bc8af836c4e8480ac16c95b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:18:e8:ab:84:9c:a5:79:d9:d6:67:3c:24:
33:07:f9:d0:b0:96:e2:27:c1:a2:d1:57:41:ee:fc:
84:21:34:f1:42:27:5a:fb:b5:00:67:0f:f3:a8:e4:
da:45:17:c7:73:e9:32:6f:23:ac:8f:26:6c:f6:e9:
84:f1:93:01:0c:8b:40:e7:e8:be:75:8e:11:ee:50:
6f:21:2c:82:ac:3f:36:d0:10:ee:51:0c:f3:c7:22:
ce:cd:7c:b6:97:ee:45:8f:39:70:f3:22:2c:c5:26:
ad:99:88:3a:42:f0:aa:38:6a:82:53:b9:36:c1:90:
98:08:97:ab:d6:7c:e2:82:41:32:2f:af:d9:6f:ed:
9c:55:df:39:92:89:5e:a8:5c:cc:c6:ee:9c:84:1e:
bd:a2:b6:5a:fc:74:19:08:60:f8:b4:55:c9:9d:f8:
f1:d8:f8:04:42:28:b8:b3:9b:5c:c7:81:bf:79:35:
eb:bc:96:8d:78:dc:b7:21:6e:ba:89:6d:a6:90:c8:
b2:69:ae:51:d1:61:d3:de:e7:11:f1:72:3d:30:48:
9e:86:b9:e3:2c:4a:dd:a0:eb:af:e6:a8:d7:58:2a:
3d:95:b9:3e:25:f4:dc:20:0a:9d:d1:bb:00:ed:25:
7b:6b:4b:98:bf:c6:09:82:89:db:38:51:46:d7:0d:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:8F:44:E9:2E:D6:7B:C8:AF:83:6C:4E:84:80:AC:16:C9:5B:53
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:48:94:e2:2a:a8:d8:97:db:6c:ed:b6:8d:80:89:40:cd:
9f:fd:57:34:40:f1:ca:6a:99:a4:b6:29:6d:6b:c3:16:3c:f1:
80:07:93:6a:fc:18:9b:3a:3d:f8:7c:81:3d:c4:a0:32:c5:ed:
c2:5b:45:38:58:54:a3:c3:90:24:05:20:cc:f6:e1:86:9b:49:
bb:4e:fe:f2:6b:01:15:27:9a:19:30:58:85:9a:11:f1:54:14:
ea:15:ae:80:ca:a6:5e:a6:83:61:21:73:ca:59:86:d7:ab:f2:
dc:c8:5a:67:93:fa:7e:2a:74:15:75:55:fa:fe:f8:cd:43:08:
9a:7a:75:66:52:4e:69:ea:c0:76:58:59:29:d6:22:be:0d:1c:
4b:34:4e:b5:15:97:bd:de:c1:45:5b:6a:7a:6e:23:39:48:81:
c2:47:be:8d:9b:0d:25:04:c4:2e:71:3a:36:5c:2d:43:e4:75:
64:23:26:b6:e7:24:55:1c:63:cf:1b:53:83:37:db:78:27:3d:
2c:c5:ee:5d:bb:e5:39:76:47:0b:33:eb:e2:40:ec:f2:90:a6:
28:75:63:65:a1:d8:5d:9e:1f:05:3e:6f:a6:ba:de:48:b8:e4:
66:fb:ab:45:c0:27:63:1f:50:52:50:b5:3d:30:ae:81:d0:40:
da:bb:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:04 2026 by rpki-client