Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: lap7MQLNFmOrr1kAe45rUsLNrmG+Db8RndLTkqaiPDg=
Subject key identifier: BC:95:3C:9A:25:A2:7D:27:17:AD:48:E0:D7:E7:DD:7A:89:6C:6A:2B
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 019D28F3434D0F171118A549808BC82DF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:02:04 +0000
Manifest this update: Thu 26 Mar 2026 07:02:04 +0000
Manifest next update: Fri 27 Mar 2026 07:02:04 +0000
Files and hashes: 1: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: mLbbMQragGyGJjyCLQ3mCrmLWl7Bf88CDZjg/wvDDKA=)
2: q-eaNpAC9-NYXDr75-5OxlW81pM.roa (hash: CQhgKaD5oRyS83HVo64oNNz+j4/NbRXCDPlLnL181NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:43:4d:0f:17:11:18:a5:49:80:8b:c8:2d:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Mar 26 07:02:04 2026 GMT
Not After : Mar 27 07:02:04 2026 GMT
Subject: CN=bc953c9a25a27d2717ad48e0d7e7dd7a896c6a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:a5:d4:33:19:b5:f6:a4:11:1d:a2:86:b5:
e9:06:c0:d4:c6:d0:a7:2c:35:62:af:11:8e:a1:87:
14:d3:39:16:92:ae:57:2a:7b:d5:17:a5:d3:6d:87:
af:b3:58:19:4e:0d:14:73:b9:39:6e:d5:a3:e7:71:
76:c1:42:fc:7d:15:37:28:ba:8c:ac:b9:2e:11:b9:
65:a3:64:31:c0:9c:46:fb:f2:90:49:39:d0:55:be:
1d:6a:6f:49:1d:c9:4d:a8:72:be:4a:56:0a:dd:44:
9d:04:34:da:ed:70:60:62:05:d7:9e:76:93:4a:64:
f4:fd:5d:52:c8:43:e8:a6:da:67:18:4e:9b:f6:8a:
f2:32:98:21:7b:de:f1:39:51:89:30:90:08:74:db:
10:91:cd:f3:3d:e4:8c:ef:2b:a6:e5:af:10:20:54:
87:be:47:47:52:ae:ff:99:b5:c3:f5:d0:e0:db:02:
18:ee:c1:d7:13:43:cc:08:51:8a:97:67:33:8b:7a:
64:ec:96:be:99:d4:9c:d2:8f:56:f5:14:63:f0:f2:
00:01:e7:b2:ab:64:75:1f:54:38:5c:77:95:8a:fa:
ce:7d:be:41:1d:e5:e9:d4:3e:b6:c1:3f:1a:f7:74:
95:e5:a4:3c:88:fc:e2:bc:ce:e2:d9:56:05:1e:3d:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:95:3C:9A:25:A2:7D:27:17:AD:48:E0:D7:E7:DD:7A:89:6C:6A:2B
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:6a:39:e9:c0:d6:c2:2f:d9:da:81:95:7b:37:95:86:df:
38:a7:60:85:c1:29:51:2d:bc:e7:e9:5b:0f:4f:05:69:c0:df:
9c:ab:71:c5:83:e6:b4:d9:47:1c:e2:d0:72:1c:4b:8f:50:93:
ad:cd:0a:83:7d:2e:66:24:68:58:06:dd:3f:44:7f:f1:98:78:
43:b8:05:72:15:27:60:fd:24:65:9b:df:dc:65:4b:20:34:77:
22:70:69:2b:8d:b7:8f:7a:3e:69:2a:06:cc:09:aa:ad:0f:7f:
3a:60:2d:05:7a:41:48:ad:ba:94:1a:2f:c6:dd:7a:6d:94:08:
d9:fd:d6:d5:f2:03:1b:7b:96:46:4c:f8:79:c7:da:4c:cd:b4:
bf:5c:af:d6:76:e5:8e:c0:a0:50:92:f3:9f:51:87:eb:93:7c:
c3:57:ec:79:21:ae:2a:8f:94:f9:b0:c3:25:9d:8c:f6:87:7e:
c8:d3:d7:10:76:23:23:a4:41:80:ef:ac:06:d4:1c:4d:25:7d:
a8:d0:0a:20:77:1c:12:63:4b:a4:eb:e7:62:8e:f7:48:12:1a:
1b:00:fc:dc:5b:0a:64:51:9d:ba:b0:d6:a8:42:6e:ac:48:9c:
e0:51:18:c4:dc:7b:87:b9:d6:62:aa:b1:ef:c9:c1:31:82:a7:
27:7e:f3:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o80NNDxcRGKVJgIvILfKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NGQxNzhiZTFiMjBiOGQ3Mzg0NDZiZTA1MmUwODljODlh
MDBhYjMwHhcNMjYwMzI2MDcwMjA0WhcNMjYwMzI3MDcwMjA0WjAzMTEwLwYDVQQD
EyhiYzk1M2M5YTI1YTI3ZDI3MTdhZDQ4ZTBkN2U3ZGQ3YTg5NmM2YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmyl1DMZtfakER2ihrXpBsDUxtCn
LDVirxGOoYcU0zkWkq5XKnvVF6XTbYevs1gZTg0Uc7k5btWj53F2wUL8fRU3KLqM
rLkuEbllo2QxwJxG+/KQSTnQVb4dam9JHclNqHK+SlYK3USdBDTa7XBgYgXXnnaT
SmT0/V1SyEPoptpnGE6b9oryMpghe97xOVGJMJAIdNsQkc3zPeSM7yum5a8QIFSH
vkdHUq7/mbXD9dDg2wIY7sHXE0PMCFGKl2czi3pk7Ja+mdSc0o9W9RRj8PIAAeey
q2R1H1Q4XHeVivrOfb5BHeXp1D62wT8a93SV5aQ8iPzivM7i2VYFHj054QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyVPJolon0nF61I4Nfn3XqJbGorMB8GA1UdIwQY
MBaAFCVNF4vhsguNc4RGvgUuCJyJoAqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQt
YTEwNGQyNDc3MTVmLzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQtYTEwNGQyNDc3MTVm
LzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd99qOenA
1sIv2dqBlXs3lYbfOKdghcEpUS285+lbD08FacDfnKtxxYPmtNlHHOLQchxLj1CT
rc0Kg30uZiRoWAbdP0R/8Zh4Q7gFchUnYP0kZZvf3GVLIDR3InBpK423j3o+aSoG
zAmqrQ9/OmAtBXpBSK26lBovxt16bZQI2f3W1fIDG3uWRkz4ecfaTM20v1yv1nbl
jsCgUJLzn1GH65N8w1fseSGuKo+U+bDDJZ2M9od+yNPXEHYjI6RBgO+sBtQcTSV9
qNAKIHccEmNLpOvnYo73SBIaGwD83FsKZFGdurDWqEJurEic4FEYxNx7h7nWYqqx
78nBMYKnJ37zAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:22 2026 by rpki-client