Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: mb4AFza8qAkTaoaqR84mLnMBGYXBHxFrclfzwKlv6HY=
Subject key identifier: 14:71:2E:1B:41:34:85:84:A5:9F:AA:2F:02:34:93:C4:BA:C8:32:E2
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 01A0C40D977C96FFA7C5AF907BDFD9AA99F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 13:00:20 +0000
Manifest this update: Mon 21 Sep 2026 13:00:20 +0000
Manifest next update: Tue 22 Sep 2026 13:00:20 +0000
Files and hashes: 1: FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa (hash: 8L9pbzjRhlXXYzdKFRwuzPzPptTX51ON4RUCMnWRonY=)
2: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: eNFGuOAytPbF/Kr1gne2pDRWQPgF45Xcr6dpElnZULA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:97:7c:96:ff:a7:c5:af:90:7b:df:d9:aa:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Sep 21 13:00:20 2026 GMT
Not After : Sep 22 13:00:20 2026 GMT
Subject: CN=14712e1b41348584a59faa2f023493c4bac832e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:3f:81:5e:6f:c3:bf:24:a2:9a:d6:90:e6:
61:39:fd:64:ee:f4:8d:ff:d5:39:5a:26:26:06:f7:
19:05:31:eb:4c:0b:f0:04:15:8f:a8:41:2c:a6:12:
60:d9:4d:92:ec:73:b2:34:90:08:90:79:89:1a:c8:
ca:82:6a:1f:bb:b1:54:0b:02:dc:ab:cf:a1:8b:14:
8f:4a:69:2c:32:b6:83:fe:81:e3:2d:f9:1d:a2:ce:
36:03:8d:13:60:d9:fe:07:03:3a:65:5e:60:f5:cd:
17:f3:e9:33:40:82:06:1e:8b:70:ca:b4:e2:7b:21:
70:8b:12:d1:29:43:f6:b9:78:07:61:45:b0:dd:b3:
f8:9d:e7:e5:19:96:20:a2:e8:73:54:bf:e7:e8:8f:
4a:7e:4b:b8:40:35:6b:a6:fd:4d:cf:88:24:a3:88:
44:18:07:46:c6:aa:3e:5e:7e:f1:da:bd:07:32:b4:
cc:1b:83:2d:1f:18:d4:80:43:5a:ed:67:4a:66:1d:
65:21:4c:73:df:3a:9e:82:79:2f:36:ee:a7:c4:33:
86:07:78:23:b5:e7:89:62:f1:95:c6:21:5e:35:60:
01:d8:a1:68:5d:35:82:bf:f5:75:30:d9:d3:29:8c:
32:91:97:56:41:48:f2:d5:74:16:7d:8b:00:4b:16:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:71:2E:1B:41:34:85:84:A5:9F:AA:2F:02:34:93:C4:BA:C8:32:E2
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5f:34:f4:1b:5e:df:23:15:80:8b:cf:39:b4:a3:91:52:be:
78:43:36:76:5e:ab:b9:c8:7a:a0:73:dd:a7:65:1f:41:46:7d:
5e:59:f9:57:ac:85:bb:f9:22:94:41:26:8d:9a:f9:8a:f1:2a:
78:63:e2:c9:61:98:ca:6e:bf:2a:dc:33:7c:8b:1a:ff:0b:f1:
d6:97:b9:68:bb:c1:14:3f:43:d5:01:77:8b:b8:ff:ac:89:5e:
e7:9e:ac:57:0d:04:f1:b8:8a:a4:18:f8:37:45:59:39:38:7a:
f8:24:36:89:51:27:71:bc:da:d4:15:ee:29:bf:9b:a7:cd:e7:
c1:aa:57:3a:36:67:54:55:fe:78:e7:35:51:43:ea:b1:fc:87:
d2:8d:ec:d7:3f:1c:71:ef:20:f1:78:c8:1e:85:c7:47:7c:fb:
b7:c5:eb:db:0e:9d:12:46:f6:48:8e:6d:87:30:3d:59:21:82:
c8:36:a3:cd:3e:44:e8:5a:99:14:f4:07:07:5a:5d:cd:3c:3b:
25:4d:be:b9:4b:45:bf:e8:db:ea:65:cb:d6:77:5e:ec:3f:df:
a6:54:a8:d8:7e:4f:99:7b:64:42:82:67:f3:16:18:43:f4:1b:
1b:a4:35:66:1d:3c:4f:78:3a:17:ae:8d:b7:d1:0d:ed:b7:07:
4b:1b:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:33:49 2026 by rpki-client