Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: boCsqgQz2MQbGsGBl4B6zaFPmsynXQ6w12zAMnM85is=
Subject key identifier: C2:8E:13:F6:A3:DA:00:31:85:2D:40:56:EA:12:43:EE:DB:E9:D3:68
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 019DA48A723CB202D1A9C35240C80D0FA115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 0C0D
Signing time: Sun 19 Apr 2026 07:00:29 +0000
Manifest this update: Sun 19 Apr 2026 07:00:29 +0000
Manifest next update: Mon 20 Apr 2026 07:00:29 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: U4WV4d8sXrUrKMLw+rWj5f87r0x4cUIJUgORveFmK0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:72:3c:b2:02:d1:a9:c3:52:40:c8:0d:0f:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Apr 19 07:00:29 2026 GMT
Not After : Apr 20 07:00:29 2026 GMT
Subject: CN=c28e13f6a3da0031852d4056ea1243eedbe9d368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:34:d5:18:34:df:84:4b:d9:8e:9e:75:86:
69:a0:9e:6a:01:25:87:14:0f:a0:82:2c:21:7e:a4:
36:7d:37:50:16:81:a0:ff:80:60:12:46:5a:cf:42:
90:0d:5e:cc:cc:a8:2a:e1:5d:94:5a:ed:15:cb:69:
e8:72:b7:b9:70:29:a4:4d:53:37:de:4e:58:80:22:
2e:e6:dd:96:fe:5b:06:d5:fa:60:1b:a4:f0:42:be:
5d:28:d4:84:1e:86:4f:e0:f0:f7:4b:0a:b5:89:e3:
df:62:12:96:25:b7:c7:cb:51:72:1b:f7:ca:cc:2e:
50:58:f9:e7:c5:33:6d:79:ff:f6:03:07:95:9d:6b:
90:00:42:19:2d:f7:50:02:42:8a:0d:15:05:4e:98:
91:54:da:cf:14:1a:92:be:b1:90:87:0c:82:27:8f:
e3:54:fd:a2:18:f1:02:d7:b4:4a:15:e2:49:26:2e:
3c:a8:b7:2d:a4:ab:46:2a:91:0c:36:08:cc:0d:f2:
69:e6:1b:66:f6:78:06:fa:9e:01:36:9e:4c:76:6f:
58:59:e3:bc:c7:7e:ee:f0:53:18:bd:ba:af:ef:f8:
35:42:7a:72:78:5e:f7:81:f9:42:bf:36:ff:e0:f1:
cb:aa:06:8d:28:13:6b:c4:25:dd:da:62:38:ae:8f:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:13:F6:A3:DA:00:31:85:2D:40:56:EA:12:43:EE:DB:E9:D3:68
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:21:6f:e7:43:82:46:94:dd:41:58:9f:9a:c3:d6:af:85:1b:
d6:89:5b:40:2a:89:d0:27:8e:4d:7f:b1:b9:de:75:01:31:05:
c2:a9:d8:dd:38:9b:fa:9c:f0:3e:f3:bd:00:8f:25:34:02:dd:
91:79:19:f4:7d:20:4c:cc:e8:0f:2a:f0:93:98:bc:e3:70:17:
8a:f7:e7:9a:b0:f0:ac:30:06:ef:87:63:a5:51:8b:bc:6d:f4:
ed:e7:11:79:4a:df:3f:b5:a5:66:78:98:d8:eb:fd:1f:a4:5d:
05:c5:d0:db:90:46:ef:7b:46:9a:87:d1:f6:4d:ef:74:b9:de:
0d:c7:e0:3f:59:dc:fb:b8:85:9c:ec:ba:6e:6c:39:5f:d1:c7:
bb:60:fd:91:e5:ed:a9:89:b9:c4:09:ae:c5:de:02:47:2c:09:
2f:30:4f:93:51:85:9c:69:fe:99:42:0e:00:0f:a4:fb:ab:0c:
38:dc:56:23:af:34:ff:7a:ed:fb:d2:a8:a2:ac:45:6a:c9:d2:
1d:78:d9:bf:37:8b:0c:10:51:99:b3:3d:fa:a6:b3:50:4e:f2:
e3:31:83:34:62:a2:b1:19:41:e2:5f:df:3b:e7:8d:3d:f9:53:
9b:4f:7f:5e:a7:f9:5b:4e:dd:34:8f:13:ff:77:54:db:85:ce:
72:48:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:38 2026 by rpki-client