Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: +I/k+/EnWrLj4UXWnjs7FYpzApI0LkCNXBqNoQngN/M=
Subject key identifier: A1:4C:AB:95:9C:56:D0:A7:92:6F:F7:9B:DF:22:35:77:13:5A:70:BF
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 019CA97D08614DD458F59A378258330796AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 0B8B
Signing time: Sun 01 Mar 2026 13:01:09 +0000
Manifest this update: Sun 01 Mar 2026 13:01:09 +0000
Manifest next update: Mon 02 Mar 2026 13:01:09 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: Ai1EsOT2iCZDifUX1fHHOiwRo2z3mNADNL3VDQiT5hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:08:61:4d:d4:58:f5:9a:37:82:58:33:07:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Mar 1 13:01:09 2026 GMT
Not After : Mar 2 13:01:09 2026 GMT
Subject: CN=a14cab959c56d0a7926ff79bdf223577135a70bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:da:50:ec:65:97:8d:e7:3d:a7:ef:8a:d5:
76:9c:d5:13:0a:54:43:f0:f2:9f:f0:37:42:3c:90:
ff:53:57:2e:84:d0:de:c3:92:12:0d:68:61:3e:90:
63:d6:86:01:01:6e:d0:8f:94:d3:fc:1c:e2:bd:4a:
85:fd:dc:81:eb:f9:6c:bb:c3:57:e8:00:28:7c:28:
f1:cf:a4:17:1b:f3:4b:55:46:d2:26:c8:79:08:73:
86:f0:a8:9b:80:ed:cf:bb:69:5b:d5:2a:6d:e8:90:
f7:3f:e2:87:94:97:c3:21:11:05:71:b5:e6:d7:58:
23:ae:96:81:43:61:b5:ff:bd:4d:12:e5:ee:ab:1a:
60:c8:0f:0e:a0:9b:c3:9a:98:a5:b0:77:b0:68:32:
49:b1:0b:2c:43:71:02:ea:61:68:0d:14:9d:3e:ab:
d8:77:84:80:43:02:f8:03:25:d3:c8:bb:c2:f4:65:
bf:09:73:b5:e2:4b:06:65:34:a8:f9:69:bb:ac:69:
33:e1:34:b9:e7:60:ed:78:7f:f3:a6:9f:7e:8f:8b:
cb:4f:09:99:b2:6e:7a:ae:cd:dd:54:bc:c7:63:ef:
6c:91:75:4c:3b:39:2d:eb:ca:9e:9e:d9:66:44:cc:
13:ba:7f:29:23:8e:8b:24:04:4c:57:16:d6:d7:e5:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:AB:95:9C:56:D0:A7:92:6F:F7:9B:DF:22:35:77:13:5A:70:BF
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:75:53:e1:3b:26:e9:52:ae:06:cd:07:1e:1c:d7:28:20:
08:cf:37:5c:ab:15:94:61:37:78:f6:d5:5b:7b:91:fc:82:1b:
45:e0:47:7b:e9:33:a9:ea:a6:6b:3e:70:35:9a:76:10:9e:ba:
e7:b8:71:bb:a7:ae:9b:d6:6c:a9:ae:33:db:f5:fb:74:ff:39:
84:1a:fe:5a:2e:9b:b3:6d:95:1f:26:c5:f4:ea:57:9c:74:b1:
a5:55:cc:73:29:ec:c3:24:29:e9:4a:f3:a0:c6:72:1f:c7:a3:
ee:83:51:35:59:d9:b4:2f:e3:ef:d7:60:d1:e6:cd:97:09:c5:
f6:6f:53:2b:92:8c:8c:cd:12:2d:58:3d:02:62:70:b5:d5:f6:
67:3b:1d:a3:a2:16:f3:3c:bb:26:8e:02:4b:c7:2b:00:ca:ab:
65:0a:3a:ae:48:1c:3c:40:b5:e2:f2:7b:ff:c1:1a:40:bd:c5:
6b:77:c7:9a:4a:52:fd:2c:31:d8:97:65:e2:93:f3:39:3a:76:
56:b1:b8:4d:44:5c:23:d0:2e:05:34:1f:f0:fd:08:2a:af:c0:
11:1a:2b:49:b6:fa:38:1b:62:3d:76:a9:1a:59:43:f7:01:31:
52:f5:52:bb:19:eb:d0:f8:c9:d8:4f:50:e5:4d:39:16:da:86:
d6:6b:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:58 2026 by rpki-client