Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: uGRVRzpalrcCx5ucjVOSMR2V8JrwHnlRMfQCwxLH+Tk=
Subject key identifier: 23:B7:56:9E:8C:69:CF:14:92:3A:22:45:45:74:1A:80:A5:1C:EA:EB
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 019D3865E8FA2F51B708D70895E778D881F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 0BD5
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: 2NJoMma4pbSpGhAhnTiVzRF3yb2Up/j2qbhw8IQ/HXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:fa:2f:51:b7:08:d7:08:95:e7:78:d8:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=23b7569e8c69cf14923a224545741a80a51ceaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:14:84:4e:b4:95:b7:a2:ee:02:17:ce:82:
ab:8e:d7:c9:49:4c:95:88:81:77:02:e5:05:e5:da:
15:83:14:12:c2:8f:eb:79:33:d8:bd:75:b0:53:c0:
2e:48:35:c3:02:95:62:34:7f:bb:ab:d5:77:f1:33:
21:43:00:e7:79:e7:47:64:51:30:41:3c:a4:b7:06:
09:17:5f:6a:b4:93:ec:62:9d:1c:e2:ad:77:df:59:
b8:45:8c:15:32:88:1e:d1:19:36:82:b6:04:94:ec:
b4:d7:69:19:0e:6d:2b:89:4b:10:35:6b:67:f4:46:
55:8e:97:8d:25:7e:dd:7e:79:37:7d:e0:03:d7:be:
d8:be:1a:9a:f1:96:93:20:41:97:94:a4:ae:6f:64:
8f:46:f2:04:90:b8:84:23:69:b3:f3:d7:07:cd:af:
38:fa:50:61:57:01:49:76:29:ba:60:98:48:80:9c:
14:0f:21:0c:a2:d3:f4:6c:21:6c:66:c9:62:ed:f4:
8b:7a:28:b2:11:fa:6d:2d:bc:57:b6:5e:90:5f:d1:
7a:f1:4e:a8:a9:37:78:3f:6d:1d:87:b9:64:d8:c8:
a1:1e:2f:24:dd:61:50:f1:39:0c:3e:73:5b:54:6b:
7a:93:fa:4a:ac:0f:38:87:e0:b1:ca:5c:2a:2c:92:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B7:56:9E:8C:69:CF:14:92:3A:22:45:45:74:1A:80:A5:1C:EA:EB
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:32:99:48:04:60:2c:be:66:21:b3:3d:ec:3e:1c:60:4f:64:
8c:34:74:53:c4:4c:30:1c:6e:8a:5e:32:29:85:28:da:82:2a:
8e:81:f5:35:91:18:8b:23:cb:4e:20:19:7c:d6:05:e8:43:84:
64:9a:e6:98:b6:4c:a4:29:54:a5:9e:34:18:19:2f:45:fb:ff:
97:05:30:d0:ed:c6:b9:20:35:b9:09:e8:65:7b:e0:d5:95:52:
f2:ae:bb:ae:49:18:4f:77:aa:de:6b:6c:fb:71:6a:d6:a9:8e:
3a:06:4e:65:a7:b6:1e:a9:ed:0e:c7:4c:65:40:d7:69:a9:24:
a7:e3:76:72:6f:38:c3:50:66:89:ea:34:f0:36:3c:79:8d:fe:
03:33:90:9e:82:04:d1:bd:41:9c:aa:a1:bf:15:26:91:13:68:
33:40:d7:c8:57:b8:ee:f5:3f:9e:64:b0:02:a3:98:60:e2:85:
bd:eb:d9:c0:08:9c:11:f6:a9:7c:da:7c:d2:16:7b:67:c7:a8:
9d:eb:55:bf:fc:2c:2b:50:b2:bc:89:b7:36:ab:c5:e2:12:5a:
7f:99:ba:e0:86:42:01:01:b7:01:50:03:92:06:1a:e4:0b:2f:
4f:3d:4a:47:4a:40:32:a1:3c:ca:7c:d7:42:51:1f:fe:f0:44:
32:bf:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:37 2026 by rpki-client