Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: PYy8Vfw/W7s4+3mhVXt2m0/7sH/peA4fdr5YJzc+ZPo=
Subject key identifier: 8D:99:5C:4B:90:4D:B6:27:06:6E:ED:E1:FF:41:C0:C9:10:69:D2:EF
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 019D27039F51C9716EF51C3A650A302F163F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: kpNnzHYzXL9aIBBHGtl1xtTApANRGRjmahR4J1li8NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9f:51:c9:71:6e:f5:1c:3a:65:0a:30:2f:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=8d995c4b904db627066eede1ff41c0c91069d2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:38:b8:d2:3b:48:76:af:6f:1c:1d:00:ca:
7b:31:63:e4:7a:ea:a7:f4:89:d5:9e:a5:bd:c9:06:
96:8e:d2:10:2d:7c:44:63:dd:e4:95:4a:97:62:36:
ef:44:d9:55:2c:92:f2:be:8a:c2:db:07:3d:9a:c7:
3f:04:3e:c0:39:83:28:e3:f9:f7:72:ac:32:4c:3c:
a5:98:96:81:93:85:18:42:75:3e:38:23:11:34:15:
b7:38:56:6e:a3:58:23:4c:8a:6a:d7:b7:96:01:1a:
82:21:a2:e7:54:6e:1d:51:49:34:b4:43:8c:2e:f2:
f5:ec:91:1f:e9:29:d9:73:94:f7:42:80:d4:12:73:
f2:27:5a:77:bb:05:12:94:91:f0:90:d6:20:c1:d6:
bf:fd:ca:d9:c3:e0:2d:38:65:88:4d:a5:8a:5a:9d:
20:a1:82:c4:4e:ce:1d:38:1a:bf:b9:a8:d8:bc:4c:
d6:89:7b:c5:69:17:0b:ff:60:c3:51:11:d8:8f:b8:
ab:55:f9:a8:fe:59:80:e3:ec:83:85:de:f9:d3:f0:
0f:f6:2e:e8:b9:da:ee:95:c8:3a:02:24:0e:a3:52:
88:82:36:bd:b2:07:9f:57:a8:39:7c:87:0e:33:9e:
eb:c1:64:62:8d:83:ce:e9:31:d2:24:c8:77:2a:5f:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:99:5C:4B:90:4D:B6:27:06:6E:ED:E1:FF:41:C0:C9:10:69:D2:EF
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4c:24:3e:39:cd:2d:8d:c3:af:ad:97:66:80:02:36:bf:96:
59:a8:1a:a0:3c:75:c3:f7:90:b1:6b:e1:18:ac:e8:c0:40:60:
bb:d3:70:27:68:fc:90:4a:1e:68:7d:2d:ef:0f:1b:6b:a8:9b:
5e:b5:65:25:c0:0b:d5:a9:27:8d:51:cf:a6:21:7a:a8:83:61:
73:de:75:8d:bf:08:8c:4a:dd:38:c9:a3:70:c8:da:08:3a:eb:
fd:20:ae:d5:63:b3:8e:d3:33:86:64:fc:d3:78:8c:d6:c9:6d:
7a:36:29:3b:8a:19:89:50:1c:e7:8d:bd:b9:cc:2a:c5:16:53:
6b:5c:ad:de:51:fd:bd:c6:81:80:eb:f8:31:32:43:36:12:53:
76:00:4e:69:23:45:70:ba:66:c1:df:c1:2e:a4:40:22:39:80:
38:74:30:ef:d2:99:d2:7f:d7:24:88:7b:cd:ab:5d:69:e6:ac:
7c:d3:5c:1f:31:b9:f9:a4:04:b0:b8:92:0c:8b:44:20:a5:b6:
d1:9a:60:b5:69:ce:e4:54:69:d1:2b:99:73:fa:48:31:86:b8:
86:f6:7e:0f:a3:85:f5:d7:0d:d3:37:72:03:eb:56:24:fc:09:
df:45:7e:4f:01:ee:ef:d8:f0:0b:9e:9f:e1:8e:d2:f0:39:45:
51:b6:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:06 2026 by rpki-client