Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: qlKYDnn/6D14hGfbZsnY4R8j9lQHe7VOPnBzOVwGrVk=
Subject key identifier: 2D:A0:36:C3:B0:82:8D:92:8C:8F:8F:07:76:90:94:41:62:53:BC:53
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 019D3866780BC000F0C0D0A85E5F0F5710BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: 7dqVPXhftx69z0pT0xE0vRXUmQ1440fF/+pL1/oV4SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:78:0b:c0:00:f0:c0:d0:a8:5e:5f:0f:57:10:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=2da036c3b0828d928c8f8f07769094416253bc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:15:a8:68:7c:6c:40:8e:f7:a4:c2:e6:b3:
5e:37:11:86:4b:69:7e:e0:1e:ba:37:2d:7e:cd:e5:
3f:5b:35:a8:db:43:b3:ae:7f:f2:79:fa:01:89:cc:
03:9b:9c:57:1c:28:9e:f6:35:b7:76:0a:ab:64:59:
73:f8:bd:be:6c:26:f9:be:86:62:cf:2c:60:90:33:
ea:4c:80:21:6b:6a:47:ab:b5:5a:fa:38:8c:62:54:
1d:4e:d7:77:28:dd:5c:10:9d:df:d4:bb:a9:45:1e:
78:bb:23:e6:b8:e8:29:53:e3:55:59:8b:bc:ef:70:
90:7b:99:3f:ac:4c:a3:84:d7:cd:a3:a6:3f:a7:e6:
2f:bd:f5:85:fd:e9:b6:ee:50:35:5a:3c:e5:b9:ab:
65:f4:fc:9f:5c:81:57:b0:91:a9:e1:a2:45:3b:0e:
df:10:9c:0b:e5:75:25:23:2d:b2:3b:14:bf:32:88:
74:27:b0:52:f4:bd:8e:63:85:bc:6a:26:d0:e7:a4:
62:8b:e8:bf:57:88:ce:7d:c3:c8:1b:fd:af:b4:bf:
b2:53:81:bb:4a:ac:c8:d2:58:11:d2:13:8b:38:19:
12:5e:6d:0b:d3:3c:ae:58:fd:bd:a2:91:90:cf:46:
9d:f0:27:bc:78:e0:9d:2a:eb:d3:f8:9f:fb:85:97:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:36:C3:B0:82:8D:92:8C:8F:8F:07:76:90:94:41:62:53:BC:53
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b3:3d:33:b3:ea:d7:e2:24:f7:60:74:97:cb:cf:29:f1:48:
60:3a:e1:5a:e1:13:3a:87:b7:bc:8a:1f:67:88:96:46:8b:71:
0d:a9:ef:90:c1:a5:67:43:e5:b7:12:1b:be:77:a3:33:5d:37:
17:34:2f:26:c2:30:13:8a:73:5f:bf:da:e6:1c:71:b9:23:f0:
a2:01:0c:67:ff:02:62:08:d7:ca:4a:84:ae:dc:83:24:40:37:
5e:8c:2f:d0:03:bf:da:05:bb:ff:9c:e1:f3:30:67:ea:86:bb:
30:f8:2e:85:3f:86:91:ec:a0:5a:38:36:60:0c:a1:e5:59:e6:
d3:c4:eb:f3:c5:96:20:26:a9:2a:84:01:ff:10:e8:c1:0d:0a:
cc:ec:c1:7a:df:b5:61:c6:65:62:ce:90:95:0e:34:15:b6:23:
3b:6d:24:13:a8:31:a4:df:90:df:b6:a5:78:56:6f:f7:e2:db:
73:c6:16:86:54:8f:c7:18:05:1f:2b:8e:39:6c:a3:61:a4:db:
69:78:2f:c9:2e:cf:1f:67:c7:01:3b:3d:17:28:29:6a:05:6d:
38:66:b2:e9:61:1d:bf:58:9f:07:7e:5a:94:ab:e2:14:67:d4:
1c:f1:6d:39:f1:6b:b8:77:96:ed:0e:e6:b9:11:8b:a9:aa:35:
c9:6e:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:05 2026 by rpki-client