Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: 223CJGqlpS7WvNFthTvfvBGpiB0VUf6HsewTLpOta70=
Subject key identifier: 07:ED:89:2C:42:83:A7:9E:6E:7D:7C:1D:F7:AC:A5:04:33:40:90:37
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 019D2AE1003B8DAE4DF422CB1AAA0E96730D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 16:01:21 +0000
Manifest this update: Thu 26 Mar 2026 16:01:21 +0000
Manifest next update: Fri 27 Mar 2026 16:01:21 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: XT96b108KdWMt3ee5hdaKRzQ0ThTfwh49zjdW+It0L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:00:3b:8d:ae:4d:f4:22:cb:1a:aa:0e:96:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Mar 26 16:01:21 2026 GMT
Not After : Mar 27 16:01:21 2026 GMT
Subject: CN=07ed892c4283a79e6e7d7c1df7aca50433409037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:70:90:4c:4c:78:dc:37:ae:5a:cd:b1:af:
ce:12:08:e8:a6:9a:da:b9:6f:9b:63:25:d7:08:2d:
57:fc:a4:1f:28:f6:59:da:4a:5c:04:99:58:f2:29:
98:4c:5b:5f:f8:b7:2e:b2:ad:81:03:91:8e:72:4b:
9d:12:b3:c9:83:c5:f4:10:55:b4:bf:66:17:90:c3:
05:5b:4e:a6:4e:b3:4c:ad:c2:4d:12:b7:03:52:c6:
ff:14:4f:50:7a:9b:c1:63:9c:6a:d4:e3:e3:0e:29:
1a:61:42:b6:05:9a:0a:35:6b:57:0d:07:4a:d1:fa:
c4:76:44:83:98:8b:b0:8c:2b:ac:f4:56:b3:78:8e:
1f:62:08:eb:4e:eb:f4:10:e1:13:06:fa:1d:87:9c:
71:cf:55:53:cb:50:0d:ae:47:d8:43:6b:45:d8:71:
d1:46:54:cc:25:76:41:52:16:8f:96:93:98:37:fe:
b1:43:c1:0c:eb:18:1e:ad:d1:91:13:42:84:8b:ee:
26:97:36:af:fa:80:b0:57:12:3e:a1:ee:35:8d:c0:
58:e2:96:29:81:ee:2e:a7:4a:8a:80:02:8e:25:c1:
65:9a:f9:40:ba:c8:f2:ed:13:ef:f7:22:5d:8f:6c:
c0:f2:57:7b:e1:43:b3:30:f5:8d:8f:09:8a:29:6f:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:89:2C:42:83:A7:9E:6E:7D:7C:1D:F7:AC:A5:04:33:40:90:37
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:85:db:48:69:9f:81:b8:8a:10:5a:7f:63:c1:9f:00:4e:
b8:83:68:75:1d:79:a6:aa:76:80:91:9e:bd:53:66:1f:38:05:
f7:3e:ac:c3:3a:96:ad:37:13:fa:ab:08:a5:3f:0e:52:b5:f2:
be:4f:b4:07:4c:ad:fe:6f:84:fa:78:cd:3b:e1:47:9c:57:b2:
42:69:a4:ec:c0:02:4f:93:9a:92:83:96:26:28:dc:2b:62:36:
40:f1:2d:c4:12:0e:b3:e3:ec:72:ea:e6:38:81:25:22:68:71:
3a:60:8b:71:f2:04:dd:c0:ea:b2:fe:69:20:f1:12:f5:95:d1:
bc:38:a8:c9:c4:87:7c:b7:73:13:29:e6:c7:2c:61:f6:78:43:
27:9f:48:d7:70:c8:c2:31:85:1e:d4:5a:1b:df:6a:9e:e2:45:
04:26:58:9a:d0:86:36:bd:ac:6d:68:36:f9:7e:b0:77:0c:10:
76:c5:ed:39:cc:8a:85:04:3e:70:92:5d:95:0b:b4:c9:dc:80:
e5:73:fe:d4:9c:cc:ee:14:cb:ef:06:16:3f:bf:d6:91:72:05:
73:d2:8b:a9:0c:56:13:2c:5f:19:ba:94:70:48:cf:1f:b5:93:
60:a6:8e:90:16:45:f5:47:14:a5:db:cd:42:70:9e:4c:9c:fe:
da:0a:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:24:52 2026 by rpki-client