Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: r8XXrNVEbfrXAHHqqfAvk4QDMqjhsZvJMmgLQex8CKQ=
Subject key identifier: 58:0B:C8:4D:F3:4E:C7:86:A1:16:B8:CF:9F:7F:5C:CB:51:CE:51:F1
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019D27E0555F4BAB98D5A39AE7E1F954B8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: JX7d8zzvnag673TXY/SFRiao5YyzDK/qdGViPX8Vz+I=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:55:5f:4b:ab:98:d5:a3:9a:e7:e1:f9:54:b8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=580bc84df34ec786a116b8cf9f7f5ccb51ce51f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:51:da:31:71:22:5b:88:ed:ba:1a:a2:50:
18:c7:7d:63:21:82:27:0b:ba:1a:df:61:46:35:d6:
aa:c7:b7:15:53:8b:82:c4:77:50:d8:81:4b:ab:30:
5a:78:85:cf:9e:8e:4b:89:a1:7c:95:5d:d4:b3:c0:
c8:4c:46:70:06:b9:e4:96:44:42:1e:52:05:9b:2b:
51:cf:21:06:19:9a:0a:11:c6:7d:51:0f:5c:11:1e:
d8:4c:9e:8f:b3:95:4a:49:46:f2:a3:b1:db:6f:a1:
67:e8:c3:13:59:60:5e:ab:8f:d0:7b:de:c9:b1:fb:
19:3a:d5:28:ab:69:f1:de:7b:ef:c8:79:69:5f:48:
89:51:d9:6d:12:fe:6e:b6:d3:c6:53:46:62:97:0b:
e4:75:73:27:97:e8:ad:48:04:ad:8c:4f:70:d1:2f:
30:5c:20:b0:70:3d:fe:39:2e:84:d6:60:a0:a0:52:
5c:92:1e:e0:ce:d2:72:21:0e:43:8c:2b:55:e5:7c:
e6:7c:c0:d0:2f:36:1c:69:a4:a0:03:87:50:e5:34:
14:72:14:02:50:11:17:8c:ec:f6:a1:c0:69:ab:5a:
20:c5:a5:08:e2:de:2d:78:cf:14:5c:b9:82:2b:90:
db:97:4c:7c:3d:f2:fe:0e:17:b1:0b:8e:09:e4:9a:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:C8:4D:F3:4E:C7:86:A1:16:B8:CF:9F:7F:5C:CB:51:CE:51:F1
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e6:f9:ab:8f:a9:54:0a:e5:fd:3d:9b:b1:5c:04:b0:d3:44:
d9:70:7a:de:13:cb:b1:a5:50:81:3c:1d:18:23:03:de:fc:54:
c1:a8:ff:11:07:ce:75:29:69:2e:2f:8b:46:9a:3e:a3:e7:6d:
90:ed:29:6f:c7:bd:bd:76:14:5f:86:01:27:41:d5:43:13:6f:
f2:fd:72:e3:2f:34:3d:87:9c:da:24:37:05:ad:3e:4f:ed:04:
03:73:73:8c:9b:e3:24:a1:5d:e4:a8:8b:91:65:88:80:2a:43:
77:a5:59:a2:f5:9b:22:62:b6:cc:81:55:a0:3e:08:04:63:cd:
ca:d1:7e:ca:a9:88:b3:c2:b9:a7:b8:4e:00:d0:7a:5e:4a:27:
27:a8:75:20:12:ce:2e:8d:98:4e:c3:4d:44:4a:8f:8b:1b:24:
f9:b8:a6:ec:33:b3:f2:bb:1f:0c:51:1d:dc:fa:9d:05:87:ac:
c9:1d:94:f7:0c:3b:e3:3b:e5:5f:3f:ba:61:c9:87:d4:aa:65:
06:3d:a2:8e:ed:76:67:ec:5e:73:5b:7f:e8:58:e2:31:3e:f2:
54:ea:dd:6c:93:5a:a0:b9:29:08:fc:98:f5:a0:35:b9:7b:b2:
dd:82:8c:48:8f:d4:ef:73:83:2a:66:31:27:28:94:44:0a:5d:
6e:14:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:21 2026 by rpki-client