Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: DJTo6/WvB9PvdkMYgdf/O2NcCYOHdcYG3iTuWaIiESA=
Subject key identifier: E9:6A:52:70:1D:AE:59:A1:73:B9:0F:66:58:3B:F3:8E:81:20:9D:78
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 019D3375DD2B0BAFCC8807C7905CBF6C120F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 16B8
Signing time: Sat 28 Mar 2026 08:00:55 +0000
Manifest this update: Sat 28 Mar 2026 08:00:55 +0000
Manifest next update: Sun 29 Mar 2026 08:00:55 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: isEwBB8BqJbzgSq1skaAfK6BxYHXne5q8RP0rFYwR0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:dd:2b:0b:af:cc:88:07:c7:90:5c:bf:6c:12:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Mar 28 08:00:55 2026 GMT
Not After : Mar 29 08:00:55 2026 GMT
Subject: CN=e96a52701dae59a173b90f66583bf38e81209d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:39:3e:fb:eb:22:8b:d7:bd:7d:c3:13:d0:
10:ca:b2:9a:47:3d:2b:5d:ef:ba:60:f8:65:58:3c:
dc:57:db:b2:c5:0c:7e:7f:e0:1c:4e:8a:b6:79:b1:
8b:9e:91:71:d7:ec:7e:22:ea:b5:be:2d:3a:d4:51:
20:60:1c:01:f0:dd:93:1a:b9:d7:3d:ba:02:27:8b:
78:87:be:3b:5e:b4:ba:16:6e:79:40:ee:00:66:80:
88:c4:4b:02:4e:fc:e6:e7:8c:78:8b:bd:87:2b:ec:
4e:71:19:07:d7:8a:1f:29:4f:25:47:f5:88:be:18:
a7:43:06:b8:83:c8:1b:d3:21:2a:c8:3e:55:ed:74:
7c:14:bc:f0:98:19:76:4e:78:b2:2e:95:62:04:e6:
b5:67:85:74:68:29:4d:97:b8:61:b9:d5:03:df:d3:
05:39:91:e8:2d:6b:e8:20:9b:f5:0f:38:c6:eb:98:
b4:cf:4c:9c:c4:02:9e:c7:06:92:19:c4:99:b1:0f:
2f:1c:37:57:e0:fd:6c:a7:4c:83:27:7e:41:32:02:
4f:54:c5:0d:17:a9:33:3c:f7:8b:65:68:36:a0:97:
cb:37:e0:90:c7:3c:d9:0b:59:0f:48:62:35:6e:6d:
bb:cf:e6:50:74:28:b9:3b:76:ee:72:b9:00:b5:85:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:52:70:1D:AE:59:A1:73:B9:0F:66:58:3B:F3:8E:81:20:9D:78
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:fc:a6:ff:4d:b8:87:72:2b:81:cb:97:a1:d3:5e:d8:38:
a5:61:c6:34:da:94:c4:6e:67:cf:17:87:33:6f:65:93:97:fc:
10:06:76:2b:8b:26:46:40:33:02:ee:af:ed:c6:ad:62:f2:16:
1d:30:4a:eb:ee:8f:b6:03:44:8c:9b:5b:39:3f:79:6d:e0:41:
b2:58:6d:b5:54:91:58:f4:07:76:f3:2e:ee:07:77:d6:04:70:
48:20:03:b5:70:2e:4a:f1:10:1e:54:2e:34:c2:41:b9:9b:af:
c1:45:18:b3:34:78:96:07:06:9e:06:e3:e2:88:6b:48:26:50:
18:49:c4:70:5e:6d:1d:37:c4:9e:36:eb:8b:92:aa:cf:ca:34:
bb:7c:f7:a6:c9:ea:99:e9:ac:17:68:c3:66:e2:bf:49:03:8b:
1c:cb:43:57:9b:d8:71:d9:f8:bd:ff:f0:be:c2:72:14:25:48:
c4:6d:c7:e5:bb:e2:fc:9a:87:b8:ce:c7:d0:2d:24:b0:4a:ca:
bd:ec:c7:6a:80:69:3f:92:f1:1e:01:b0:62:a2:ef:90:f1:26:
ea:a6:50:71:4a:fe:be:18:cc:73:3b:22:d1:34:b9:e7:d7:25:
f0:38:54:4d:b2:90:fd:75:60:ae:7a:dd:09:0d:1e:6c:81:48:
9c:15:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:31 2026 by rpki-client