Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: tiaVmlnu0sjWQRlOr1z8ESsHTV8t0NCiUWZ2myHkUys=
Subject key identifier: 9A:FA:32:38:21:B9:7C:65:4E:F0:6C:F2:28:62:2F:69:28:C6:2E:57
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 019CAB6B2D0EC1A45D17DDBEB65215BC5EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: 7tq/aCIHuYgQfCYhRvll3mYuHoAlci1dE00Frp/pqZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2d:0e:c1:a4:5d:17:dd:be:b6:52:15:bc:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=9afa323821b97c654ef06cf228622f6928c62e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:e7:83:80:cf:8d:7f:cc:31:d9:b3:20:2b:
96:a7:13:e4:d6:fb:77:3e:42:54:db:53:36:cb:36:
f7:e3:11:86:91:71:c2:30:ee:4e:35:a5:e2:8e:40:
58:f6:0f:5f:b7:0c:ee:6c:15:27:e6:6b:f6:44:db:
db:fe:0a:4a:34:41:91:2f:26:f4:c9:8a:fd:62:0d:
b3:fc:ac:b2:62:89:40:73:59:62:f2:81:5d:37:5a:
7e:e5:2a:5d:0b:5e:b7:5f:b9:ea:fd:7f:43:09:bc:
a8:15:4d:df:18:29:a9:af:28:49:dd:8c:d4:c1:fe:
93:34:14:c5:98:5c:a2:41:35:53:32:09:26:2c:4e:
33:91:ab:4c:4f:8a:f8:a3:73:eb:9a:f7:e8:bc:3c:
94:3b:77:cd:44:45:eb:4f:6e:23:d1:29:15:a5:23:
87:0b:5d:b9:8d:4d:8a:8c:2e:9b:cd:b7:9a:82:ff:
da:3b:11:9e:bb:fe:64:bd:1d:2d:3d:4f:1b:2d:00:
d7:bd:a0:2e:83:25:02:db:53:c0:ad:c4:31:65:de:
2f:41:98:96:e7:0f:60:96:fb:3b:e6:b8:0c:3a:30:
66:ac:ea:55:da:66:64:d5:57:48:08:73:c6:27:cc:
ab:fc:cb:42:f7:5f:f2:78:40:64:16:2d:e2:98:e9:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:32:38:21:B9:7C:65:4E:F0:6C:F2:28:62:2F:69:28:C6:2E:57
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:86:73:24:bf:d2:da:cf:3e:69:2f:6a:8c:15:41:6e:13:47:
28:d4:f5:b0:50:e7:d0:6f:21:36:6b:20:bd:2c:ed:53:3d:6f:
32:49:4f:83:84:ef:9f:c5:11:2c:e1:87:06:f7:a6:ce:55:95:
36:b9:3e:5d:e7:8a:35:ab:ec:5f:77:2f:8b:b6:5d:c0:74:84:
da:be:51:b0:0f:81:6f:50:91:37:3f:7d:b7:f7:7b:c7:52:37:
b1:f8:96:3b:0c:05:42:49:90:c8:25:9e:bd:d0:05:df:f0:39:
98:e3:93:8a:ef:9b:0f:21:49:f7:04:c3:94:c9:22:aa:1c:ee:
df:bd:75:c9:79:47:cb:8d:7c:ac:cf:bc:39:af:ad:6b:85:21:
b0:62:be:67:ef:6a:ca:42:a8:b6:80:e7:82:c6:93:b3:f3:0f:
c0:8d:af:7a:ac:d6:d5:4e:4f:d6:ae:61:f7:9c:5f:64:58:33:
87:ad:66:21:22:c4:cc:d9:fc:ae:f7:da:1d:4d:7f:c3:b8:f0:
f2:ea:8c:d2:88:d6:90:14:77:8e:a7:49:1d:20:8c:b4:20:56:
4c:b8:a1:3b:68:92:78:46:6d:49:9b:f4:5e:8f:4b:46:c7:1a:
51:0e:2d:38:8f:0c:1d:a1:76:e3:84:30:9c:24:3d:08:1a:62:
d1:59:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:55 2026 by rpki-client