Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: uhO7IpDh/YD1VDsBEa+qW7yg08zLkFYZCbgv8AKkmvE=
Subject key identifier: F9:D1:4F:97:70:CA:7E:1E:A9:16:BB:C4:A4:C4:7E:D0:FE:69:86:F2
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 019E1E360881CDCF78D43C8AA61C0AFAB6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 22:01:57 +0000
Manifest this update: Tue 12 May 2026 22:01:57 +0000
Manifest next update: Wed 13 May 2026 22:01:57 +0000
Files and hashes: 1: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: uZ4x0beBbCoj/DfE5SnQc3ErMsE2kSiNEjkpbZ83Rfk=)
2: q-eaNpAC9-NYXDr75-5OxlW81pM.roa (hash: CQhgKaD5oRyS83HVo64oNNz+j4/NbRXCDPlLnL181NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:08:81:cd:cf:78:d4:3c:8a:a6:1c:0a:fa:b6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: May 12 22:01:57 2026 GMT
Not After : May 13 22:01:57 2026 GMT
Subject: CN=f9d14f9770ca7e1ea916bbc4a4c47ed0fe6986f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:c3:27:9c:b3:4f:13:d2:e9:62:75:af:af:
e4:94:63:3d:d4:9e:ec:27:79:2b:37:09:78:77:9d:
33:7d:6e:33:3c:f8:0d:f6:49:72:25:f8:92:2f:10:
a5:e8:70:30:70:52:53:16:81:e6:a8:92:ba:3e:dc:
fb:00:c7:2b:e9:96:18:52:21:82:33:dc:60:89:3a:
73:38:cf:ca:ab:ea:56:19:b7:fb:0d:db:6e:75:7a:
47:00:63:d3:7e:02:7c:c2:3e:3e:fe:9a:1d:bf:c7:
60:eb:e4:05:80:f0:da:65:72:15:e8:7a:d8:3e:f0:
d2:8e:33:79:3c:9f:14:f7:3c:f7:b5:be:ee:eb:2e:
d9:bb:e5:7f:36:4e:12:15:95:a2:f4:42:cc:e7:e9:
4f:91:23:9a:00:b9:21:2a:5b:79:29:0b:97:35:2d:
1c:8d:a4:55:e9:07:32:0d:43:42:fa:e9:b5:b0:4e:
71:a2:05:f4:45:df:02:dc:ce:31:92:16:e9:c5:d2:
ad:64:88:7c:1f:dd:4b:e4:99:f2:89:31:a5:1c:a9:
d1:08:bf:2a:1e:99:da:c1:f3:f3:8d:f2:15:94:4c:
b8:1a:ff:54:0a:c3:fa:f1:cb:1e:7c:8a:2a:84:73:
53:76:fe:45:2e:4c:4d:81:82:25:c9:f8:75:1b:dd:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:4F:97:70:CA:7E:1E:A9:16:BB:C4:A4:C4:7E:D0:FE:69:86:F2
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:c8:01:0d:f4:da:59:c3:36:11:81:27:22:11:b1:d0:aa:
de:52:f7:15:e2:6f:71:94:a1:62:ad:db:5e:84:14:61:e3:b6:
a6:ea:83:1c:bd:dc:2c:29:bb:de:dc:9f:15:7e:92:d8:45:ca:
c9:bc:74:4c:04:8e:65:4f:47:b9:d2:04:db:1d:80:43:04:62:
87:e8:f9:37:9b:b8:ea:ca:16:cd:da:f3:a4:be:9d:a6:16:46:
7e:45:bb:1a:96:71:82:07:b8:f9:87:f8:fa:06:dc:a3:dd:42:
d5:70:39:92:64:93:1f:8a:e5:11:f5:ac:f7:7f:4d:3e:92:3c:
ad:07:63:fd:65:f1:4e:97:70:ef:5a:c3:51:1d:6a:26:d5:5d:
50:4e:2c:df:71:20:da:52:7c:ff:3c:a5:46:56:25:04:e9:61:
fe:1b:93:8b:61:e5:10:21:a8:49:45:30:33:1b:50:d3:12:97:
98:29:8e:5b:b9:66:40:c3:fe:8b:c4:fa:89:8f:f3:3c:3b:2e:
53:83:85:f0:16:d7:0e:62:ee:51:c3:db:ba:fd:c1:45:9e:e7:
cc:6a:ab:b9:84:6a:24:b9:a5:5f:9c:01:b1:23:c9:47:25:09:
33:ee:8d:0f:36:47:4c:94:b4:aa:c2:3b:51:c6:00:0c:0d:44:
79:fc:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:36 2026 by rpki-client