Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: GTXoBLqboT4q5v5k59MBPEp27+PIZ+LQwJ5DsuYUKVY=
Subject key identifier: 3A:E6:5F:0F:C5:0F:5B:C3:6B:E5:33:7B:E8:C6:A8:AB:94:AC:0D:CA
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 019D37529E54DCE3BFABA5FD86D3072F05D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 16BA
Signing time: Sun 29 Mar 2026 02:00:54 +0000
Manifest this update: Sun 29 Mar 2026 02:00:54 +0000
Manifest next update: Mon 30 Mar 2026 02:00:54 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: 2RIzI7pstexmskBMjbSo8OfcJldLdMQu4MjBtE8n+6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9e:54:dc:e3:bf:ab:a5:fd:86:d3:07:2f:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Mar 29 02:00:54 2026 GMT
Not After : Mar 30 02:00:54 2026 GMT
Subject: CN=3ae65f0fc50f5bc36be5337be8c6a8ab94ac0dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:43:4a:77:1e:c2:33:09:2f:37:c9:28:b3:
87:62:d0:d1:38:07:62:5d:5e:ec:80:01:f0:f3:fe:
fa:f5:3b:4d:7e:3b:7a:5a:37:5a:58:48:a1:63:a4:
5d:9f:c8:dc:7e:42:17:1f:f2:76:0f:49:98:92:c6:
73:43:51:09:c9:21:9d:06:b2:20:1e:84:7c:40:88:
f3:b7:52:ae:93:cf:a4:70:13:0e:65:af:da:6d:00:
e6:4d:ac:03:e1:c1:8c:db:0b:c4:fb:cc:06:9b:a1:
77:60:e9:fe:c2:ea:3d:d1:75:e6:fb:14:8b:de:e0:
c4:70:c3:2f:0e:7e:cf:c2:d7:0c:31:99:cd:aa:37:
f5:91:02:7b:a2:9a:b9:fd:45:18:f8:53:35:e3:3c:
d3:13:6f:13:8c:1f:6d:d5:13:74:00:5b:10:8f:0e:
7f:ec:95:46:31:12:ad:1e:6f:9d:74:2e:70:63:32:
a0:6b:49:49:ae:79:af:71:0a:14:4a:f2:f5:2b:85:
40:9f:b2:e2:df:40:ba:2d:92:8e:9d:53:4f:0f:70:
6f:d3:2f:69:f4:1d:7e:36:ed:4b:95:48:6f:f9:16:
55:a9:9b:af:6e:ac:92:e5:fe:c9:83:8a:fb:1c:d7:
f8:03:68:33:24:fd:98:6f:19:78:f4:07:b3:38:e3:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:5F:0F:C5:0F:5B:C3:6B:E5:33:7B:E8:C6:A8:AB:94:AC:0D:CA
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:ae:71:0b:18:45:bc:4d:d0:6f:27:45:e9:af:b1:12:6c:
be:c2:f2:bc:9b:cf:e6:5c:18:0b:3b:08:a8:59:e3:62:66:ce:
ab:81:bb:e5:9c:91:71:b3:b6:6c:f9:c8:3b:c7:d4:47:35:c5:
e8:e4:30:9e:35:34:3d:a4:2a:ba:22:d6:54:7a:46:b6:46:d2:
4e:08:ad:e4:dc:13:cc:62:9e:8c:9c:35:7c:9e:ca:38:fd:63:
96:6a:c2:34:0c:dd:e6:3e:66:91:ef:af:a0:3d:39:c7:26:d6:
81:af:43:ff:0c:07:03:4a:aa:82:33:9d:a6:38:4e:94:57:9c:
59:82:ad:a9:de:37:83:42:cf:34:34:6c:73:cf:7c:e2:20:b6:
42:34:57:15:10:38:c6:63:fa:54:fe:7f:35:f7:56:ee:fe:ea:
64:5b:06:55:b9:9c:07:19:3b:c9:dc:7a:e8:47:75:4d:1f:8d:
52:e5:e3:00:07:53:f6:0a:8b:fe:ee:8e:fe:1f:22:5a:12:60:
68:22:9b:18:a4:c5:8c:1f:e2:27:61:4e:05:59:06:66:2b:b0:
75:1d:a2:4c:76:07:37:1a:48:4b:00:df:ef:36:7c:b2:ae:97:
0d:9c:e1:7a:8a:12:e0:13:0e:e5:c2:6b:c7:6f:60:ba:62:d2:
19:76:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:26 2026 by rpki-client