Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: KmKqtngKxC3zZvFv3LoT7prKhw0YhkBq/GDAFw/kNxI=
Subject key identifier: 0D:4D:70:87:F7:9A:66:5D:F3:09:8E:7E:CB:EA:AA:6F:EA:6A:44:D9
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 019F92EDDDD0D06B70251CF4AC4619CA1B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 07:01:29 +0000
Manifest this update: Fri 24 Jul 2026 07:01:29 +0000
Manifest next update: Sat 25 Jul 2026 07:01:29 +0000
Files and hashes: 1: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: CJ9l014PR1neKeGYxZeAn9woq5ih8dEu1DHtsGCRYRU=)
2: q-eaNpAC9-NYXDr75-5OxlW81pM.roa (hash: CQhgKaD5oRyS83HVo64oNNz+j4/NbRXCDPlLnL181NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:dd:d0:d0:6b:70:25:1c:f4:ac:46:19:ca:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Jul 24 07:01:29 2026 GMT
Not After : Jul 25 07:01:29 2026 GMT
Subject: CN=0d4d7087f79a665df3098e7ecbeaaa6fea6a44d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:2f:3f:e4:d2:5d:49:25:cc:23:c3:bc:be:
21:26:be:f6:7e:c0:32:1f:7b:d7:a3:c6:90:60:e4:
04:0a:76:3b:26:7c:75:dc:5f:fa:25:74:ca:b5:e7:
e9:ff:66:4d:54:fc:be:e5:90:3d:18:0a:cf:e1:bb:
e8:1a:c0:45:32:47:7d:a5:62:76:c4:1c:1a:40:ab:
58:6d:d3:8c:c0:b9:f7:02:68:69:af:d4:0e:83:d6:
18:af:15:73:5b:2f:2e:f5:9d:d8:60:62:69:95:05:
a2:e3:f2:48:6b:7b:d4:5d:30:68:d6:79:18:52:19:
e4:76:c2:92:85:24:6a:0e:32:8e:0b:3e:c0:60:f7:
ef:8f:3f:47:d4:1b:7b:7b:c5:1d:46:e0:01:16:00:
e7:26:a5:1b:36:b2:f5:e1:05:65:bd:65:c4:d5:e5:
f2:c6:5b:8f:a2:f8:99:a8:f5:f2:5a:ff:d5:b3:d8:
96:a4:ec:c7:a0:c2:c2:e5:9b:29:e1:32:4d:bc:97:
94:35:82:1e:20:e8:8b:cf:7c:65:91:8d:db:09:09:
76:94:8e:7f:2a:91:83:49:30:54:8a:17:48:f4:15:
70:a2:11:e1:e5:ef:61:32:9d:0e:b7:84:21:a4:e9:
ed:7e:70:a5:f4:c7:f7:95:b9:b6:d4:85:08:dd:c1:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:70:87:F7:9A:66:5D:F3:09:8E:7E:CB:EA:AA:6F:EA:6A:44:D9
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:19:8c:29:4a:b4:51:94:13:71:2e:1a:32:ef:22:71:b1:f6:
73:83:7f:cb:07:f2:a1:0c:c3:b0:d9:b3:5c:3c:d6:c0:11:93:
f8:e4:51:fc:7b:8e:4e:dc:03:2d:42:b9:fa:b4:84:c8:da:84:
5e:fa:2d:7f:1b:32:e3:36:eb:5d:49:e8:88:d8:af:c1:12:d8:
a1:fd:63:b3:fb:9c:78:58:52:a0:7c:f3:cc:b5:80:32:05:45:
c6:01:d1:3b:3a:18:b6:05:f2:27:57:c4:ff:0f:94:e5:b5:ca:
b7:64:a4:ab:80:34:68:6b:e3:a2:c3:58:70:b2:71:3d:e9:e2:
48:54:b8:61:af:2f:c6:d2:15:c1:76:b4:36:30:83:03:8d:4b:
d2:9d:30:0a:a7:00:33:43:0e:e0:82:be:a0:08:2a:33:83:37:
91:06:f6:00:08:2e:6e:63:db:39:48:de:8a:f2:26:17:77:82:
87:c4:57:48:aa:0d:d1:33:4a:cf:37:22:8d:ea:de:2c:d1:1b:
87:55:2c:a3:95:0f:26:2f:c2:b7:f8:46:9b:c4:bc:9e:91:a5:
c0:7e:30:cd:28:d5:d1:c1:f2:80:33:ab:15:67:18:51:f5:8f:
37:3d:46:9d:9e:c9:20:9e:eb:4f:93:a7:4e:02:15:15:f9:b7:
84:65:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:47 2026 by rpki-client