Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: Wom7lyAaz/QiExnxUZHCh9o1sEN4kRukTfg5WRQ6nys=
Subject key identifier: 25:24:F2:92:AB:41:33:EC:F2:F3:27:BF:FC:C1:38:8A:F3:EA:0B:1F
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 019D284DD8F7081B11ECFD5F110222B910A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0E5C
Signing time: Thu 26 Mar 2026 04:01:23 +0000
Manifest this update: Thu 26 Mar 2026 04:01:23 +0000
Manifest next update: Fri 27 Mar 2026 04:01:23 +0000
Files and hashes: 1: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: kxblitcTAq6T/50avlLz110oY9fDQz4RIV3dHW6IukM=)
2: XkScNvH90ID41eeL1f4PQqE9fIo.roa (hash: O0IfwXUKgTdYCzkdsNlWzP2njTem9TfBGXZ1smPc3BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d8:f7:08:1b:11:ec:fd:5f:11:02:22:b9:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Mar 26 04:01:23 2026 GMT
Not After : Mar 27 04:01:23 2026 GMT
Subject: CN=2524f292ab4133ecf2f327bffcc1388af3ea0b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:e5:9e:7f:cb:50:73:db:63:9f:93:4c:f6:
bd:3e:33:5d:c9:a5:72:d9:cb:b8:d9:d1:f4:05:e3:
c2:63:5f:21:83:6e:39:ee:29:d6:36:d4:6c:bc:4b:
b2:54:cb:89:4f:26:4d:a8:42:3c:e9:fc:a5:a4:4e:
f7:22:36:9e:80:54:72:6d:46:ee:14:27:d2:69:b0:
cd:22:53:59:08:b2:db:fa:fa:b8:c7:29:55:50:59:
7e:81:09:ef:0c:45:09:81:67:27:f3:47:ca:71:80:
60:99:5d:a5:a8:8a:3c:1c:50:87:61:97:d3:08:4e:
dc:2e:e5:63:19:e3:48:1b:b0:66:65:04:f9:b1:c8:
5d:8c:3d:68:85:a9:55:6f:91:57:ce:57:30:00:1b:
25:b3:1e:ef:13:77:88:31:f7:85:3a:b8:f8:e4:a6:
e1:ac:0d:e3:bb:b8:66:30:e7:f5:3c:af:68:24:7a:
34:4c:1d:c3:08:af:5b:12:5d:49:1e:3d:55:ce:46:
5e:60:5d:5c:c7:e8:0b:fa:f4:2a:7f:9d:cf:a9:ba:
d8:bc:9e:fc:c6:4b:8c:9c:00:30:fb:ce:00:d6:02:
59:c5:5f:58:7c:10:f9:a1:a9:0b:fc:49:11:a2:b1:
d4:c0:d3:42:e4:bf:17:c1:79:a8:17:86:54:31:89:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:24:F2:92:AB:41:33:EC:F2:F3:27:BF:FC:C1:38:8A:F3:EA:0B:1F
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:52:01:eb:ec:47:d7:d7:a7:68:a1:80:bc:0d:14:34:5d:57:
93:03:df:47:36:93:53:86:26:e6:60:00:e8:52:4d:ed:6a:b8:
aa:12:0c:ec:51:87:44:c5:2e:b5:13:20:f6:81:19:af:37:dd:
3e:c2:7b:e6:71:96:64:76:a1:e2:8d:b8:0c:a1:da:75:6b:02:
38:ef:19:37:71:5b:88:12:21:4e:db:52:b9:0a:71:ad:ae:14:
b4:fb:2a:60:ce:40:f5:f9:9e:eb:f0:02:89:f3:28:18:32:bf:
0a:70:86:42:6c:96:d4:f5:32:9e:49:ed:21:8e:ad:80:c1:c4:
78:81:ee:0d:2c:47:85:fe:46:bc:ea:59:52:e6:39:27:88:5e:
a6:dd:a8:ae:44:d0:dd:99:89:d6:68:05:f8:d7:10:92:45:f6:
17:bc:03:87:1b:89:85:d0:ed:b6:36:e5:c6:31:80:1a:47:73:
21:fa:51:dd:39:9c:d4:7f:89:ac:87:a2:08:48:26:a6:60:57:
04:94:ca:31:71:60:2f:79:21:60:9d:ea:80:06:3c:2c:e7:f3:
b3:9e:e0:88:0c:c2:71:17:ad:08:e5:49:10:27:7d:e4:65:fa:
49:c1:03:ec:76:51:e1:1f:56:72:16:de:77:05:fa:ec:c0:1d:
1a:26:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:12 2026 by rpki-client