Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: CFLUu/ZSgEDJWjAK10emYyuC0OLI+ks0ltUGUg1iUyw=
Subject key identifier: 89:11:DD:4B:51:5E:A0:3C:1E:3E:F5:98:D3:DF:AA:B5:52:20:6F:9B
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 019D9A3E947453FC418846EC384343A81085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0E97
Signing time: Fri 17 Apr 2026 07:01:25 +0000
Manifest this update: Fri 17 Apr 2026 07:01:25 +0000
Manifest next update: Sat 18 Apr 2026 07:01:25 +0000
Files and hashes: 1: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: 2LorLpVTxdmnON7FXYdPoxKRSyHfgDI7Ij5vCwtTDTY=)
2: XkScNvH90ID41eeL1f4PQqE9fIo.roa (hash: O0IfwXUKgTdYCzkdsNlWzP2njTem9TfBGXZ1smPc3BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:94:74:53:fc:41:88:46:ec:38:43:43:a8:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Apr 17 07:01:25 2026 GMT
Not After : Apr 18 07:01:25 2026 GMT
Subject: CN=8911dd4b515ea03c1e3ef598d3dfaab552206f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:3f:03:9d:04:7d:ff:93:5d:1e:e0:bf:9f:
8e:11:1c:26:19:c9:5a:32:b5:d1:22:9b:bc:29:29:
af:30:f9:d7:95:05:2b:0b:dc:2e:c5:ab:ff:85:35:
d8:79:48:28:2f:60:1a:51:de:f8:e0:c2:06:77:fd:
25:56:02:a7:b9:ce:ef:94:f6:38:64:25:51:bb:44:
40:03:9c:cb:a9:a8:05:a5:59:f2:dd:ac:7f:98:56:
0e:7a:72:56:d8:b9:25:90:74:93:e2:a6:7d:4e:e2:
5b:40:5a:51:f9:c6:3f:a5:eb:e7:4d:96:c3:64:88:
01:c8:ad:f6:2e:44:c9:53:82:ba:15:ff:25:72:e7:
37:fe:6e:38:78:fc:28:26:e4:93:95:b6:fd:ad:07:
7f:99:26:92:ac:2e:25:1b:35:a0:20:18:d3:7e:d6:
53:b8:8e:ca:c5:af:88:d0:a8:5b:a5:a7:34:94:1c:
48:72:b5:8d:52:a7:44:be:fa:50:a9:34:1c:16:88:
9a:da:e9:4a:63:6e:d9:6a:b5:61:03:52:ec:5d:50:
74:6f:4d:7c:99:18:2e:e3:e7:d5:e8:41:ee:0a:87:
ce:9d:f7:c1:a2:09:70:20:45:74:69:37:dc:1d:72:
d6:03:54:34:f5:9a:ea:55:76:23:1c:d4:ff:fc:88:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:DD:4B:51:5E:A0:3C:1E:3E:F5:98:D3:DF:AA:B5:52:20:6F:9B
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5f:cd:3e:fc:7d:df:79:fb:b8:60:34:9e:72:a8:48:91:7e:
98:20:e7:33:d5:91:86:ad:9b:df:61:bd:c9:d0:9a:73:eb:c7:
3f:36:6a:89:a3:63:83:3b:15:df:9a:fc:d7:b4:54:48:c6:90:
b7:b2:70:77:bd:9d:48:75:5f:bc:9d:f6:f9:a4:2f:57:3b:fb:
37:f9:b4:d7:36:56:cb:88:98:a9:bd:af:6b:1a:03:ba:62:aa:
29:46:d2:bd:16:53:4b:7a:eb:22:e5:b3:f3:c8:5f:b5:bb:ec:
6a:36:dc:5c:8a:9f:99:02:83:48:c4:92:58:88:5f:88:e3:e7:
29:23:4f:00:96:f4:47:89:40:6a:fb:bb:04:83:fe:46:90:09:
de:7e:4f:59:21:3a:35:e4:e6:8e:35:fc:f9:67:c5:40:fc:fc:
0b:27:ee:34:61:9d:8d:9b:d2:9b:ef:55:7c:21:e8:51:76:11:
94:7b:e5:39:8f:d1:98:3d:c4:22:f4:67:a7:58:bb:7c:bd:21:
cf:95:b6:b6:87:f2:c5:d0:33:cb:b3:80:94:41:a8:09:ea:64:
33:7f:9e:b5:8e:34:0e:93:80:0b:c9:52:d6:a9:68:6e:eb:82:
6e:2b:bb:2e:7e:f5:5a:a7:12:06:e3:24:18:46:cd:98:8c:c1:
62:d5:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:31 2026 by rpki-client