Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: MYbIcfVTGieikGKqB4TaGx6ZGT58py9LqS9SDcKtuoQ=
Subject key identifier: 06:31:A7:A9:FE:0B:01:67:67:6A:23:3D:1D:55:4B:36:D7:06:55:4D
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 019CAB6ACB4F23923E060329753464E1FC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: IpsaCTQHpIuysezK70LYwVuayH8Md5rIas4e0aHD2Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cb:4f:23:92:3e:06:03:29:75:34:64:e1:fc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=0631a7a9fe0b0167676a233d1d554b36d706554d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:57:84:6a:bc:66:4b:48:df:74:fd:9f:9f:
a8:98:a5:78:71:7f:dd:33:4b:70:f4:19:14:5e:27:
f1:47:f1:16:fc:5e:5c:c3:92:6c:c4:37:e3:02:1f:
dc:59:d2:20:44:64:4a:22:4f:ea:eb:d0:e1:ee:6a:
29:6f:f3:d7:31:1b:32:34:fa:13:73:70:f6:4a:4b:
0c:84:bd:a1:4d:fc:0b:c2:4f:0b:f4:0c:2f:9f:7e:
44:a0:c2:06:cd:01:33:02:bc:ac:38:83:66:d0:98:
ef:c6:d5:67:2f:98:c3:8e:79:ea:af:25:73:54:31:
de:cc:3b:38:9c:4c:be:3b:d0:57:00:f6:bd:c3:8f:
b7:f8:fa:b7:f8:38:b3:06:d3:ab:fe:6f:65:82:cb:
ac:3d:41:9b:90:5b:e8:0c:94:8f:b4:7b:10:20:ca:
63:af:6f:38:6a:7b:d3:b7:e6:8a:12:fc:54:5a:17:
57:05:e8:0f:03:a8:90:c6:1b:2c:7a:b7:8a:12:4d:
b5:ea:d7:84:cf:e4:c6:b7:67:af:12:86:ea:ba:98:
6c:fb:e8:86:cd:fe:32:bc:23:43:6c:52:f5:93:c6:
71:cb:8b:8b:bd:61:b5:24:91:60:d0:70:11:e8:8d:
e6:95:12:c8:41:86:1c:cb:9b:25:4b:0b:2f:68:75:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:A7:A9:FE:0B:01:67:67:6A:23:3D:1D:55:4B:36:D7:06:55:4D
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:cc:b0:fd:55:d7:03:54:4a:fa:10:0b:17:83:8b:4d:e7:d0:
74:f2:39:05:7f:13:94:ee:ad:e2:b2:8c:6f:cf:49:fe:63:bb:
3b:6a:c6:97:2a:a6:d3:92:0a:10:9b:00:3e:a0:5e:94:9d:b8:
d6:c2:d4:62:b2:5a:79:ce:02:89:10:41:a6:2a:81:f6:1f:7a:
d7:85:34:c5:6c:35:54:47:a3:2f:8e:45:30:da:17:4f:dd:d2:
7c:72:ee:ea:85:b1:7f:f9:10:c1:5c:41:d0:db:fa:40:ea:42:
bb:ad:29:48:e9:7a:e5:4e:bf:ca:12:25:e1:91:50:6b:90:ba:
bf:d9:e2:55:0b:8a:01:43:df:d6:e2:c5:b1:85:4a:c5:32:f0:
db:e3:eb:bb:51:30:4c:31:27:ef:b2:3a:2c:37:b1:d1:05:a8:
05:4b:7f:c9:7f:9b:f0:8a:e1:40:06:95:1c:bd:94:5e:a1:7f:
1d:6b:7a:14:fd:8c:7f:7d:63:a0:06:54:03:94:ce:65:bc:b9:
96:15:53:8c:14:6d:8f:4d:c3:76:c8:b0:78:ca:35:84:a8:ff:
2f:89:f0:9f:23:cb:63:6f:5f:45:72:db:32:4e:a1:61:d1:5e:
6e:cc:16:2c:d7:ea:ad:2a:32:5a:b9:05:6a:c2:61:67:13:8d:
f0:08:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:28:16 2026 by rpki-client