Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
File: JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft (raw, json)
Hash identifier: 04UDBAWuKDj7hC4SUjNP5tBxh9qOs4LOqs74i3uBZyY=
Subject key identifier: 3C:03:58:68:1F:40:3C:42:76:B8:F9:D6:67:58:D1:98:86:48:28:54
Authority key identifier: 25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38
Certificate issuer: /CN=25467f2d5bb2355af75fb47f11606d81589f7638
Certificate serial: 01A0EC65E4CB5A86DB5EF23DD801BF116414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
Manifest number: 0204
Signing time: Tue 29 Sep 2026 09:01:35 +0000
Manifest this update: Tue 29 Sep 2026 09:01:35 +0000
Manifest next update: Wed 30 Sep 2026 09:01:35 +0000
Files and hashes: 1: A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa (hash: SrntviZ4+NLJCPuFucg/3YO9L4f5luqtxUvspbJaNHI=)
2: JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl (hash: 5PUlXCtve6f7IEkgZZvUpD7385jna2eT0QEskbhMUw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:e4:cb:5a:86:db:5e:f2:3d:d8:01:bf:11:64:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25467f2d5bb2355af75fb47f11606d81589f7638
Validity
Not Before: Sep 29 09:01:35 2026 GMT
Not After : Sep 30 09:01:35 2026 GMT
Subject: CN=3c0358681f403c4276b8f9d66758d19886482854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:66:72:15:ce:56:4e:1d:1b:12:2a:41:7e:
71:69:47:f4:a5:84:df:83:f5:f2:f3:ef:a0:55:91:
09:58:12:17:af:c8:1c:2a:b4:51:77:ba:1f:d4:82:
43:fa:b7:4c:9a:cd:be:54:48:94:eb:0f:c3:de:56:
6f:d6:d5:40:fb:28:9c:44:8f:fb:57:df:a4:32:7b:
fa:92:61:07:63:a6:0a:6c:90:ce:da:1b:cc:dc:e8:
76:5f:e9:a1:39:af:d0:9f:5b:99:75:d7:53:7a:b4:
e5:7b:29:75:c9:92:c9:b5:b3:76:e3:3f:9e:28:37:
f8:86:70:09:a0:68:e9:e4:8f:96:cc:62:cb:3a:2b:
08:3d:9c:ba:e8:3f:62:4d:c1:09:ab:d2:70:77:3d:
f3:fd:95:20:a4:cc:ca:e9:04:6b:ab:61:2a:81:7f:
38:ee:54:64:38:cd:23:7d:d9:93:52:b7:c2:85:66:
86:d5:ce:10:4d:e4:6d:73:58:20:30:93:b8:ee:78:
e2:4b:24:60:eb:79:21:5e:91:00:74:63:43:af:60:
bc:51:0a:74:03:2d:cd:89:4d:3f:35:42:8b:54:30:
4c:6a:87:87:75:5b:cc:1a:8f:86:20:7b:1d:27:3b:
41:16:ff:2c:d3:1d:de:1a:05:96:2f:86:44:a8:1a:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:03:58:68:1F:40:3C:42:76:B8:F9:D6:67:58:D1:98:86:48:28:54
X509v3 Authority Key Identifier:
keyid:25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:83:6b:01:f6:55:bd:46:69:65:47:cf:3c:60:33:12:c3:
c5:5e:c8:8c:8b:e1:75:9e:7c:ae:7a:fa:3a:4a:fc:30:31:ad:
a9:a8:09:69:ae:d3:ef:9f:a0:b3:97:79:de:74:1a:20:42:92:
02:32:0e:97:db:e3:79:7a:4e:c5:1f:86:a9:ee:a5:5c:f0:32:
5c:ba:f2:b1:11:4e:27:f9:98:df:75:36:8e:48:9c:12:6f:40:
93:96:7a:3b:57:5e:3e:1f:91:23:9d:cc:ae:9d:27:61:40:c1:
79:00:c4:94:b4:f1:bf:0a:12:22:76:1b:ab:a5:14:4f:df:cf:
1f:16:cc:a4:ea:94:b1:b9:67:f6:a5:61:98:31:2f:c6:a6:9b:
86:45:fe:7d:82:05:a0:f7:b0:b1:63:ef:42:23:92:43:a9:54:
6e:d1:a9:6f:1e:21:2a:4a:d1:35:d9:de:1a:19:3a:70:0e:3b:
b1:5d:e9:83:7e:68:2f:b4:d4:08:b0:d6:3d:84:d5:c3:7b:a4:
71:cb:14:ae:a0:88:93:d3:d2:10:d5:32:68:04:7c:16:0d:a4:
86:2d:75:64:ae:1e:6d:ca:d0:cd:78:3a:1e:06:85:14:fc:23:
bd:11:7a:18:c7:6d:4c:13:03:2a:b4:65:7b:92:94:b9:c8:51:
6a:5c:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:26:15 2026 by rpki-client