Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: X/9zRnEK/euy1qzCzFYfzUxItxIziuEM8emHC+m2RtM=
Subject key identifier: 4F:30:38:BD:38:E9:0C:15:C0:3B:B1:DE:C6:34:A7:DD:B6:A0:5E:14
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 019D2A3BD9F1A10D70B361B7E26AB2EFE8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 0BB4
Signing time: Thu 26 Mar 2026 13:00:58 +0000
Manifest this update: Thu 26 Mar 2026 13:00:58 +0000
Manifest next update: Fri 27 Mar 2026 13:00:58 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: EZguK1sEzvQRGH32i1+aVkg6cPYMaLjfeCGmK0uZc64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:d9:f1:a1:0d:70:b3:61:b7:e2:6a:b2:ef:e8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Mar 26 13:00:58 2026 GMT
Not After : Mar 27 13:00:58 2026 GMT
Subject: CN=4f3038bd38e90c15c03bb1dec634a7ddb6a05e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:95:e5:9c:08:56:00:b4:1b:f4:4d:79:df:
68:15:d2:3f:cb:9b:22:22:31:95:bd:c0:9b:2c:e8:
56:d9:1e:f9:e9:aa:7e:70:44:00:3c:d9:83:7e:90:
27:b9:36:a3:05:af:65:6b:a8:03:7f:67:b5:3e:4e:
c7:38:7d:a2:7d:47:4f:6d:ea:f4:7e:63:a0:f3:21:
5f:e5:c0:b7:b0:45:21:5b:ef:d6:1d:2c:d1:ae:51:
ae:0e:16:e6:b8:fc:db:7f:be:4a:90:89:85:3b:3e:
97:7b:b6:01:e4:89:63:e2:35:4a:16:b1:f1:42:14:
96:9c:54:df:65:51:a0:ab:a5:10:b4:26:1f:40:b7:
c7:77:82:7c:99:e9:ee:3a:23:3e:32:b2:81:0f:28:
62:b3:d0:65:d7:db:75:6c:ef:5a:dc:e2:24:ed:c3:
11:b6:79:29:ae:f0:48:3b:e8:32:bd:ad:c0:e8:ae:
61:7c:71:c7:2e:33:8d:cd:c9:35:c3:2d:57:fe:61:
18:f4:24:d5:66:e4:af:a4:cf:0c:02:ef:b8:d8:d6:
c9:b7:8b:e8:25:08:89:29:67:a8:e8:13:8e:63:62:
22:19:5d:c2:cb:3e:05:11:ab:46:8e:91:d9:c6:98:
03:a4:2c:20:b3:32:5c:93:5e:22:0e:37:09:23:f5:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:30:38:BD:38:E9:0C:15:C0:3B:B1:DE:C6:34:A7:DD:B6:A0:5E:14
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:14:86:10:81:46:dc:b3:62:c9:ec:98:77:aa:60:c6:86:a6:
8b:ae:2e:99:69:70:ac:4c:63:7a:6d:91:1a:0a:13:26:f8:4e:
43:dc:eb:52:e4:d2:51:f8:83:af:bf:66:ab:32:06:c0:a3:ba:
11:3c:7b:a0:76:7c:b4:19:09:e4:75:c9:14:7c:d8:a8:a5:e3:
77:73:d5:95:ab:71:ba:20:c2:0c:64:9d:26:6e:0c:14:ee:35:
8d:8a:6c:9f:75:b6:4a:dd:9d:c9:88:19:9a:88:5e:e1:87:70:
56:e4:60:ed:98:29:97:d8:ac:a5:5c:51:9f:87:15:3c:a7:5e:
8b:da:fd:94:0b:a6:6f:e9:a5:5c:8e:ea:3e:f7:e4:14:4f:8e:
6e:da:92:9e:a1:be:39:80:9a:43:3e:22:86:fd:7f:40:58:cc:
3f:2f:7e:2b:96:65:35:34:59:3d:6a:67:1e:c9:9d:67:14:9c:
89:1d:23:29:e5:5a:48:12:d3:37:54:7f:1a:4f:30:57:5f:f5:
33:b1:94:cc:ae:7e:8a:0f:00:3f:0d:fc:44:92:a4:03:42:51:
89:5e:71:79:9f:54:7c:7e:ff:dd:27:16:70:60:20:8c:2b:e2:
0b:db:d3:cc:97:66:53:eb:6a:dc:e6:87:4f:b4:a6:ed:f2:32:
38:13:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:35 2026 by rpki-client