Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: K4m0cYjnNmY8N6X0IEHYKlU9JD4zuB72vBgN1KJywOo=
Subject key identifier: 93:FA:9C:7C:C8:57:D1:9B:5D:07:81:9B:8F:E7:C0:07:32:51:63:4B
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019D2772BC5F3E87B25DDBF855A1329DD0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: v6GdjijcpR+WLEvAjVraX8upKmdqubRV9z5qKwaYchY=)
2: uggilkPXIQowDX7IENHctXgTYrc.roa (hash: bdstU+Ed9ZtoDiLImu8JYA/k3J0Pn1VQzFJ5dM1IotU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bc:5f:3e:87:b2:5d:db:f8:55:a1:32:9d:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=93fa9c7cc857d19b5d07819b8fe7c0073251634b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:3e:9b:ad:3e:3f:88:3d:98:9d:30:9b:37:
51:e4:15:f7:83:1e:43:ea:ed:e9:31:ec:05:18:7e:
b9:84:8b:dd:6e:15:8b:da:56:a6:8a:f9:cb:8b:9a:
3f:b0:d8:2a:fe:b7:78:00:48:f7:d0:75:c0:e3:09:
e0:3b:66:35:dc:17:dc:73:1c:26:99:b9:68:a0:af:
34:38:c9:7a:1b:2f:48:a5:bb:a5:24:af:3e:7f:ed:
bc:db:c8:17:5e:18:e1:c4:61:ef:b9:77:8f:c9:38:
47:50:8a:20:3a:fd:c3:67:c4:d9:80:e1:17:bb:58:
58:60:e3:15:95:2d:e8:b6:79:3a:24:a3:2b:5f:eb:
45:98:83:ad:93:31:1a:37:11:48:65:c5:ff:1a:c3:
de:25:be:5b:27:4f:3e:d4:63:44:87:ef:9c:31:13:
65:d9:20:ff:d0:62:da:dd:b2:2c:6e:3b:ca:95:48:
72:1b:90:15:00:71:77:21:08:06:c7:05:c8:08:13:
d2:cd:2c:46:28:49:df:51:c5:82:73:f4:fe:dd:f3:
9a:69:c1:50:6d:9b:4b:58:10:16:89:19:b7:dd:be:
a8:d3:59:e2:17:95:7f:b6:de:aa:6f:82:da:f6:14:
f7:a7:44:c1:37:72:1b:c0:ff:0c:94:7c:eb:d5:cd:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:9C:7C:C8:57:D1:9B:5D:07:81:9B:8F:E7:C0:07:32:51:63:4B
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:51:4c:f5:9f:07:00:12:8d:29:a7:16:05:97:78:14:20:0b:
9c:6f:e4:94:92:8d:e4:a8:d5:b0:1c:3b:02:83:d4:7d:82:da:
7d:fc:7b:88:f0:7f:c2:48:66:73:7f:48:7c:e7:68:15:36:64:
b9:2e:d2:5c:b6:17:70:7a:63:ba:ee:0f:dc:85:6f:1c:9e:82:
b8:0e:86:22:a8:fd:ba:9f:19:ac:82:97:59:99:3a:32:38:54:
ae:51:f4:09:0e:a0:f1:75:a7:82:eb:e9:e0:53:b0:c9:e1:70:
71:b7:e7:3f:16:d3:f8:e8:18:c9:af:4f:e7:93:44:db:48:29:
ee:f3:f4:2b:74:86:78:2b:ea:32:a3:87:cf:95:49:2e:af:5b:
90:3a:92:0f:3f:22:f0:44:5b:bb:af:80:0e:4e:a7:0c:63:af:
e8:be:cc:2a:e8:80:27:22:91:44:6d:d5:30:14:72:b3:b6:c9:
12:a9:b5:4c:67:32:d5:19:38:c4:c4:73:58:99:61:7f:c8:08:
1f:2e:b1:ce:c8:1d:d3:fd:6f:6c:9b:25:ba:b7:7e:e5:4c:c8:
d8:c8:f3:9c:22:dd:8d:08:a2:0c:ee:ad:e4:92:86:73:a7:bb:
e3:cb:4d:7c:9a:3f:29:85:1a:0e:bb:49:58:9a:ba:ae:05:9f:
64:6d:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:17 2026 by rpki-client