Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: pjvAvuMzJ4/IzEtsdtrTZgLvmSlLPGbaM9gKAF1RNYM=
Subject key identifier: E3:20:97:03:7B:03:5B:35:EE:10:AB:9A:E2:E1:DC:01:AF:A7:B8:D8
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 019D9C2CDB352BAA67C15C24E314AA62800F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 0BEF
Signing time: Fri 17 Apr 2026 16:01:18 +0000
Manifest this update: Fri 17 Apr 2026 16:01:18 +0000
Manifest next update: Sat 18 Apr 2026 16:01:18 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: loI8dN04UZQ0NKUHEPonnNUA7Vhv2CYihDBPx6fKllM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:db:35:2b:aa:67:c1:5c:24:e3:14:aa:62:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Apr 17 16:01:18 2026 GMT
Not After : Apr 18 16:01:18 2026 GMT
Subject: CN=e32097037b035b35ee10ab9ae2e1dc01afa7b8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:3e:27:a1:1e:fc:1f:70:1a:6c:30:98:5f:
ea:c4:bf:8d:e7:3e:11:78:6b:96:98:31:01:c7:f3:
29:77:af:d8:a3:30:a0:d4:ad:03:73:cf:48:59:e0:
52:86:01:08:75:9c:56:fa:df:91:c5:24:76:ed:99:
98:24:d3:c6:78:93:2d:ff:5b:80:16:fb:ed:e5:a4:
11:38:1f:f8:ec:c0:9a:20:65:47:c8:26:29:fa:ee:
22:ed:da:9e:7e:08:3a:84:72:4d:ff:cf:35:c2:96:
ca:c1:db:77:a1:4f:ba:96:ab:9a:c4:84:a5:ed:a0:
42:38:b8:81:c3:51:76:9f:1e:fa:a0:7e:76:59:eb:
c1:86:14:7b:92:31:41:49:6e:4e:43:81:ef:8f:91:
83:c9:63:0a:d6:13:26:ab:b9:f8:d5:90:29:1b:dc:
8b:72:92:af:0c:b5:b4:69:f2:17:0e:28:35:ce:52:
3a:cb:48:e8:03:29:e4:bd:59:54:89:2a:21:56:a2:
d3:d8:aa:79:3f:e0:fe:2e:92:8b:bf:4d:e8:4e:be:
c0:ca:81:95:96:f5:54:ad:4e:e8:80:82:85:66:c0:
40:bf:3b:de:15:f8:68:1d:15:8e:43:f1:34:e2:e1:
8f:59:5b:bb:fa:00:f8:65:38:8f:b7:cd:ae:9a:c3:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:97:03:7B:03:5B:35:EE:10:AB:9A:E2:E1:DC:01:AF:A7:B8:D8
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6c:1e:eb:ca:99:ae:41:63:f3:3f:ca:55:67:2b:56:2d:ec:
e7:8e:f9:f3:da:fc:45:a3:8e:94:f3:fd:a6:37:ce:57:a0:f1:
91:29:20:5a:2c:96:80:25:38:13:76:29:d1:fd:3f:05:10:15:
c3:90:07:ca:95:6c:8a:c0:4d:ed:4b:3f:66:f9:da:1b:4e:0d:
2c:e2:55:d5:8b:81:2e:54:88:74:2e:5a:a8:8b:b5:9f:d6:4d:
e8:d4:61:1a:fc:af:04:1c:3b:f9:83:db:98:1f:a8:1f:e8:a6:
53:6e:d3:d8:32:0d:f2:37:2f:26:f0:c9:f0:7c:ad:04:12:42:
bb:59:27:20:26:44:06:91:9f:cf:80:4e:c1:62:c5:2d:f5:81:
01:83:55:4e:7f:f7:44:33:49:24:d4:f4:a8:1d:69:ac:ff:de:
2f:a6:67:ca:81:6c:55:f7:51:ff:cd:c0:e4:7c:c9:04:a5:ff:
39:11:52:0f:fa:4b:14:53:f0:d4:11:40:ea:f0:d5:26:ea:38:
ef:74:97:f8:d8:f8:a5:ef:1c:fa:00:78:a8:28:87:70:51:dc:
87:5c:91:e4:d6:52:34:65:8b:1e:5d:f0:03:b8:ac:10:2c:5c:
94:e3:70:a2:c6:86:8c:d7:bf:06:6c:4d:d3:41:dc:06:ff:3e:
5f:aa:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:12 2026 by rpki-client