Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: 5dV/yl6k8lkBcwsbdtLUJzNvujN6Z6x2nTxkt8WEIG8=
Subject key identifier: E2:6A:6C:9F:64:E2:EB:56:0A:F0:9D:90:82:77:D7:2A:EC:F0:B4:2A
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 01A105B78A0D679082A2B39B1E09B6F92D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1A84
Signing time: Sun 04 Oct 2026 07:01:16 +0000
Manifest this update: Sun 04 Oct 2026 07:01:16 +0000
Manifest next update: Mon 05 Oct 2026 07:01:16 +0000
Files and hashes: 1: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: 1k54HLtn4Vf3UnZ/8duYZu9joJsq/mm2qJBBY7djsRQ=)
2: q-eaNpAC9-NYXDr75-5OxlW81pM.roa (hash: CQhgKaD5oRyS83HVo64oNNz+j4/NbRXCDPlLnL181NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:8a:0d:67:90:82:a2:b3:9b:1e:09:b6:f9:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Oct 4 07:01:16 2026 GMT
Not After : Oct 5 07:01:16 2026 GMT
Subject: CN=e26a6c9f64e2eb560af09d908277d72aecf0b42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:1c:41:6b:93:20:56:33:bf:c4:12:51:74:
15:6c:8b:a9:29:61:9d:30:d0:d6:8e:b0:07:db:da:
97:d2:6f:dd:5a:fa:66:ec:df:34:c2:a3:c1:9c:e1:
37:dc:bf:39:d5:c0:ca:42:59:f9:f0:bc:32:75:97:
1e:38:19:22:4d:c0:ea:a3:90:49:f3:cc:8a:2a:e3:
6b:a1:dd:d4:90:03:ce:9c:b0:0e:1e:d9:ac:c3:4c:
b9:f1:91:0b:e8:7f:95:17:b2:27:bb:ef:87:65:af:
79:2a:cc:09:36:78:f8:7f:52:ef:bd:65:f8:6d:e5:
00:85:36:36:2b:1e:6b:f8:ac:6a:cc:ca:be:ac:f1:
96:db:c4:7c:a6:a6:09:95:5d:53:25:a5:58:56:dc:
70:2a:f3:98:2d:e0:39:28:09:98:e0:8b:42:89:ad:
24:48:63:3b:93:e9:9d:8f:db:65:5a:51:b8:ac:4f:
d0:8a:0f:ea:38:19:fb:85:29:31:6f:2d:90:46:9d:
0c:a4:d2:1f:8a:73:6b:89:d7:a5:57:73:c9:c9:7e:
97:3f:47:29:d0:ad:70:91:ce:d6:6d:19:c1:a4:d9:
4c:b4:9a:e8:9a:25:54:00:3e:a7:42:2a:a8:6b:a1:
de:fc:38:bd:61:1f:25:dd:4d:07:e6:30:dd:bf:8d:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:6C:9F:64:E2:EB:56:0A:F0:9D:90:82:77:D7:2A:EC:F0:B4:2A
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f7:0b:c3:06:40:cc:56:0f:bc:cc:ff:e4:ac:bc:94:31:62:
6e:b4:ae:f9:d8:77:4e:a4:79:cc:3c:cf:42:7e:6b:78:ff:cb:
9d:1c:e2:dd:d8:c9:3e:96:27:95:36:c6:c3:6b:7d:df:5e:ce:
c2:97:92:74:ef:0d:90:9c:d2:5c:c9:4c:99:3c:ec:e5:5b:2b:
d3:47:cf:a0:fb:3b:50:81:3a:a8:92:4d:db:ae:55:e6:f8:26:
d2:4a:8b:92:48:4e:ed:c8:39:f5:39:1e:b4:42:3a:f4:4c:ca:
48:15:54:91:82:a2:0c:6e:19:4b:44:a4:22:4d:fb:45:c0:1f:
bc:9a:bc:a3:f4:e9:cc:1f:3f:25:7b:f2:6b:1f:9c:5c:ce:45:
ee:27:57:53:cd:a2:f2:b0:ab:32:25:49:95:d9:2c:99:cb:6d:
40:86:e8:5f:dd:bb:9f:83:b3:4b:aa:2f:f5:9f:b4:27:aa:28:
33:89:0d:bc:2f:41:df:4f:0b:e4:14:75:2d:7c:38:3d:db:16:
51:52:2c:87:93:70:04:17:26:12:0a:03:1b:94:12:cf:24:81:
2d:9d:f0:9f:c2:d3:98:db:f8:e0:2a:a5:ab:e8:62:83:1a:46:
cf:71:6c:39:62:f8:7b:bc:c0:9a:a1:89:ae:ce:15:e7:bb:0f:
f4:3c:03:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:03:56 2026 by rpki-client