Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: O9ZRqY6Pvh7u8jlAPlMloYl3yRnyxjA7g9zra7l2yRY=
Subject key identifier: C4:58:40:9C:9D:10:48:35:82:BA:EE:31:DD:4E:13:FD:F8:DC:C4:09
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 01A101DB63F2BA15547D8A1AD3667B5D9ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0F6A
Signing time: Sat 03 Oct 2026 13:01:57 +0000
Manifest this update: Sat 03 Oct 2026 13:01:57 +0000
Manifest next update: Sun 04 Oct 2026 13:01:57 +0000
Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: /rD60VMJV6jbCo9PtbwW8zt8i4Og3eGD1KDIgVzpuK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:db:63:f2:ba:15:54:7d:8a:1a:d3:66:7b:5d:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Oct 3 13:01:57 2026 GMT
Not After : Oct 4 13:01:57 2026 GMT
Subject: CN=c458409c9d10483582baee31dd4e13fdf8dcc409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:71:dd:74:63:3a:35:07:db:42:98:f9:b5:
ab:04:d1:28:ac:36:8c:ec:fb:9a:4c:fb:56:90:1f:
55:29:bc:40:ae:23:e9:cc:c4:a0:ca:ba:99:df:17:
c1:d0:b2:ce:d9:42:41:09:28:4b:ee:a6:67:41:95:
cf:45:20:d4:89:d2:14:49:b3:a8:f6:b1:19:8c:f4:
8c:a8:0e:79:cc:7a:66:e3:91:92:a8:55:45:ab:8f:
19:1a:76:d7:bf:ed:5f:93:b1:7d:57:0a:65:5c:31:
d1:e8:1a:2d:72:33:90:31:9a:b4:b7:47:60:19:bf:
7a:6c:bb:dc:85:53:7a:c4:50:40:6b:cd:49:6e:63:
77:0b:6f:47:ee:f8:fd:72:f7:0d:3d:48:4b:8a:4c:
75:cb:3d:4d:1d:c7:40:86:6d:13:ef:93:b5:72:8f:
fe:8e:b8:af:fa:20:90:aa:f7:10:0b:a3:db:80:62:
41:c4:a6:3b:c7:b1:7b:b3:7f:f3:86:fe:32:e3:9b:
f0:e0:12:72:40:c2:11:82:5f:5f:df:cc:81:e2:55:
5a:20:c0:ea:85:6d:75:e5:fe:8d:3b:c1:b9:30:a6:
c8:04:13:6f:f8:42:da:dc:a0:92:5c:1d:7e:de:8f:
c2:85:ec:bb:13:b5:6d:03:7c:65:b5:5f:a6:17:88:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:40:9C:9D:10:48:35:82:BA:EE:31:DD:4E:13:FD:F8:DC:C4:09
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:54:44:e4:79:1c:b5:50:44:9d:8d:cb:51:22:a0:c8:95:e3:
f3:3c:e5:16:84:10:4e:c8:ef:bc:23:28:96:d1:0c:76:99:5d:
79:3a:11:f3:7a:ed:08:85:a4:1f:86:74:e3:cb:2a:d4:17:54:
50:09:52:07:8d:16:43:86:fc:57:ca:53:89:63:c9:06:ad:25:
3d:b3:ce:59:d0:e7:9c:f1:85:be:10:2d:b3:4c:37:a2:65:d6:
e6:cb:44:1b:e1:a9:a1:87:0d:48:4d:6d:e3:46:62:b5:77:61:
6d:3b:5f:f3:7c:f6:ea:4f:f7:b3:4d:d8:2b:22:e5:96:48:5c:
fd:f4:6a:89:c1:07:56:51:f1:1e:39:f8:1b:b5:50:21:3d:0a:
62:e1:a4:5b:10:ce:c0:e7:2d:58:dc:53:cd:b6:d8:f6:1b:39:
cd:7a:b5:ec:c8:b7:1c:d7:0c:e7:71:63:17:59:2c:05:18:a9:
f6:3d:95:f0:76:e8:34:f7:b3:a1:31:26:3e:6c:2e:79:31:58:
68:41:ba:ed:8e:0e:31:64:67:bf:2e:a1:f9:84:da:1a:71:78:
40:1a:d2:45:25:55:de:ee:33:00:0a:69:b1:ca:21:72:2b:dd:
87:47:c8:3a:56:0c:0a:9b:eb:a6:2c:f3:29:0d:7a:ff:91:2e:
d1:28:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:29:52 2026 by rpki-client