Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: A1hEKzldLqfoh5Bp8gx3k3Yag7hWzxH6BHALSP3t9Wc=
Subject key identifier: 5F:FD:F4:1D:B3:7B:C2:15:DA:00:97:83:CA:42:4A:1A:0B:0B:86:09
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 019CAAC70EBADBE65976B04EE41FD49184D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0E1B
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: WnKfG2FodzLN2RjHdsMo8N98BvDLg5doUG26+aBJRqA=)
2: XkScNvH90ID41eeL1f4PQqE9fIo.roa (hash: O0IfwXUKgTdYCzkdsNlWzP2njTem9TfBGXZ1smPc3BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0e:ba:db:e6:59:76:b0:4e:e4:1f:d4:91:84:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=5ffdf41db37bc215da009783ca424a1a0b0b8609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:c2:a8:76:ea:9f:7f:2e:29:c5:5d:24:b0:
3a:9d:06:cf:97:25:0a:af:62:cc:90:10:b3:c3:58:
fc:2e:c7:0d:33:f1:7b:06:dd:c1:f1:75:10:1e:d4:
fd:d0:a9:e3:88:e2:90:8d:4e:bb:ff:a6:ff:b6:a1:
ba:3b:44:d5:1c:79:35:c3:86:2d:3e:00:96:3a:4b:
0d:6f:b0:6e:7f:7a:ff:ce:b4:42:2c:8f:99:95:7b:
25:cd:fb:58:01:3d:a0:d1:6b:8c:fd:3b:0b:cc:59:
4a:9f:cf:31:64:e0:5e:2d:97:9f:f0:48:19:c3:f6:
0a:86:51:f7:a4:94:a6:a2:9e:97:14:a4:40:42:6b:
18:43:5e:74:ec:7f:6d:ee:e3:ff:f6:ce:35:3d:6c:
19:b4:a5:40:42:69:12:be:94:05:88:24:1c:59:19:
ad:f4:e1:1f:2c:84:b2:4c:b9:ee:e2:6c:a6:18:7f:
46:19:c0:1c:3a:6e:00:4a:50:71:6f:f8:c7:b6:a5:
87:93:ec:e2:07:b1:59:5e:67:90:36:d1:34:5e:d6:
b5:81:92:48:7f:90:e3:71:d0:82:5b:db:a9:1f:96:
82:5d:99:e5:be:27:13:4e:c4:f9:14:e1:29:63:79:
98:66:47:de:00:af:c4:fb:be:61:c3:97:28:33:dd:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FD:F4:1D:B3:7B:C2:15:DA:00:97:83:CA:42:4A:1A:0B:0B:86:09
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:21:ea:1f:2a:2f:87:b0:f0:ae:4f:ac:8a:67:42:85:12:0d:
ca:7a:70:2d:3b:10:58:8a:ff:a3:54:36:8d:d6:2c:88:f3:6c:
71:13:e2:5e:1e:6e:e2:e6:d1:8d:e7:23:46:9f:ee:43:67:85:
57:ba:43:02:ab:d2:b6:3f:fb:1b:29:ff:b9:0c:29:8b:ff:04:
e3:ec:19:6a:98:f0:90:fa:f6:c5:a2:79:fc:9d:bb:2f:97:5d:
45:5b:cc:45:c6:57:80:1f:c8:f0:8d:1c:6f:f4:c9:5c:3e:ce:
2f:12:38:00:a3:ab:a9:d0:5c:7b:b6:21:49:ff:e8:e3:f8:75:
d0:4e:d5:b2:b8:41:f8:0e:e8:ed:cf:4a:3c:7f:00:b4:e1:de:
88:85:25:23:9a:03:5b:5c:04:49:81:e5:33:de:b5:a8:a1:14:
43:07:e6:60:8f:c4:89:ca:cc:2e:ab:bf:c4:14:71:24:26:2c:
7d:0c:84:b3:26:7d:e1:3c:62:81:7a:19:d4:3e:1e:3e:95:41:
bd:5f:46:55:bf:49:ed:56:27:e8:0e:16:6c:bb:b8:5a:a1:06:
ca:e6:76:0a:a7:bb:ed:8f:87:ca:60:97:c9:bc:d0:b5:bb:6d:
29:9e:1c:0f:c3:9c:d1:f3:44:1b:05:d5:78:33:61:e3:28:be:
ab:bb:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:16 2026 by rpki-client