Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: ArYAYSTJ0QepRnpyUWm8LNumaUPd528hQLEzJUNfegc=
Subject key identifier: CC:63:B5:53:DB:B0:BF:A1:38:24:72:9D:DC:2A:58:68:CC:B9:07:57
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 019D3865F98F102DD8F2C17542D50304862C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: JNAS8eI6/ghasyhpSK8lj+Xh/IeaY+hSB2epCR4bs/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f9:8f:10:2d:d8:f2:c1:75:42:d5:03:04:86:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=cc63b553dbb0bfa13824729ddc2a5868ccb90757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:c9:4c:ef:62:b8:94:cb:4a:36:f5:90:fd:
4e:8d:47:1c:da:a9:3d:66:06:c4:e8:b4:61:8e:f0:
60:dc:15:42:11:8c:7c:88:e4:1c:d7:8c:2c:09:40:
2a:d3:79:2f:39:bd:d4:40:af:44:96:1c:df:64:55:
7e:61:df:16:1a:ca:f4:71:00:52:cc:e0:30:46:46:
33:e6:3f:1e:d4:90:83:ff:d7:9f:23:cd:7f:d0:f5:
ad:70:06:92:35:77:45:77:e0:f7:14:2a:a2:6c:56:
d1:65:9d:d9:6a:30:9e:92:f7:12:56:fa:46:6f:48:
1f:ce:da:92:5a:49:88:bf:a4:70:f1:61:96:9f:08:
4d:4a:65:df:12:74:a5:e6:6e:f6:d2:78:d9:71:f5:
72:29:de:47:89:4a:4b:4f:83:d4:42:d7:46:f9:d2:
4f:77:b9:0b:65:4b:a8:17:b4:03:5f:b5:ba:f1:4d:
25:2b:b9:4d:20:43:a8:5c:22:a3:1b:d5:bc:73:0a:
c5:ad:2f:12:60:80:85:5f:06:18:a8:b5:59:1a:b3:
87:11:52:90:ac:da:eb:bf:5e:7e:a9:39:e9:62:e7:
5f:d0:56:21:7a:18:aa:69:85:84:34:c5:a3:ba:21:
71:3d:bb:82:48:73:d6:1e:5a:35:1c:19:b0:8a:7c:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:63:B5:53:DB:B0:BF:A1:38:24:72:9D:DC:2A:58:68:CC:B9:07:57
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1a:88:4d:b6:0a:b3:ef:7a:3c:e9:5b:e7:2a:f5:c0:63:c2:
1d:8f:01:d0:ae:67:13:d6:bc:25:03:da:b8:1e:5c:4a:de:45:
a3:4d:8f:f9:8b:b6:60:f3:d1:18:2a:7e:e0:71:e2:f2:94:c1:
2a:a0:21:48:94:6a:95:0e:ca:b7:31:a8:63:b1:0b:b8:5d:b0:
e9:98:ee:1b:a5:e1:fd:bb:29:f7:bc:25:6d:fc:c8:bf:fa:98:
7e:f9:4d:cb:de:f1:b2:ac:10:a3:c7:f0:87:9d:fa:4a:84:b2:
44:c8:53:3a:12:81:37:a1:b5:2e:95:b3:84:48:e4:76:82:50:
74:49:a2:06:7e:61:a0:74:c8:fa:6d:a6:f5:a0:63:50:72:48:
fd:a1:33:77:9c:91:90:e7:b6:bd:83:9b:02:02:4b:75:95:92:
97:b6:76:52:7f:c0:25:4d:6c:15:8f:3e:c4:68:68:30:b5:14:
c0:5a:cf:e0:b1:5b:e9:3f:ca:d9:6a:fd:46:6c:1d:df:27:03:
a4:36:f4:1c:c1:5e:3a:b0:36:7c:27:0c:b3:06:42:07:2d:f9:
3e:f1:08:6f:f7:48:9a:94:3c:82:d5:9d:a8:28:90:c3:6d:d6:
16:d3:d0:ab:2a:5d:10:b1:41:e6:92:4a:98:c3:7f:28:bb:91:
3a:b8:36:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client