Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: yq4J4htC/9IzOJEkrQ2xJk8QwCT9Z0wxkeX+8DXr//Y=
Subject key identifier: 3C:1C:06:BF:9C:3B:96:0B:1E:39:E0:F3:18:4E:0C:84:C6:C2:A8:42
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 019D37C094A8A1D89B59B20A62116122FF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 0BBB
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: CokmGXo7eo4Ah6lghd+cDxbEeHWKx51Pvr8zbiqAZL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:94:a8:a1:d8:9b:59:b2:0a:62:11:61:22:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=3c1c06bf9c3b960b1e39e0f3184e0c84c6c2a842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:f1:e5:3a:e0:0e:8e:ed:c5:66:a7:e6:f0:
1f:1e:6f:89:71:d2:38:dd:33:eb:57:32:93:9f:41:
dd:61:26:c5:82:72:f2:33:ba:bd:8c:1a:e0:bc:48:
da:9e:cb:ec:8d:73:50:9b:c2:dd:ee:65:93:b6:4b:
5c:d2:61:0b:2d:fc:a3:09:23:20:cb:9c:7c:38:48:
b9:ad:97:57:d7:49:1e:19:f7:18:45:b7:ad:bc:22:
23:14:fa:6a:3e:97:95:22:d2:61:64:89:f3:9a:12:
d6:1d:a1:39:c6:57:39:fc:a5:23:86:f2:e8:7a:9d:
77:8a:05:2a:cc:21:f7:50:a2:1a:45:be:4a:44:90:
60:da:7d:30:b0:5f:c1:2c:8e:24:26:ad:da:62:45:
3a:89:67:d5:a4:bb:36:fe:c3:9c:8f:05:a4:90:cf:
3a:9e:86:dc:b3:b0:cd:f7:b8:31:76:80:37:5a:69:
09:3d:d1:b8:c8:87:e2:9d:e6:35:ca:51:d0:32:f2:
bc:ac:2d:1b:8c:e4:4d:cd:59:50:90:28:5a:14:42:
1a:78:06:66:02:3e:c5:b2:a7:bd:9e:ee:95:38:81:
b8:f1:9d:b7:e2:a2:a9:ff:33:25:e8:ce:64:0c:20:
d9:a0:c8:ea:07:7b:06:da:fe:51:2b:20:10:df:77:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:06:BF:9C:3B:96:0B:1E:39:E0:F3:18:4E:0C:84:C6:C2:A8:42
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:ad:be:86:3a:a8:74:17:97:20:6e:1e:d1:41:a8:e4:cd:
76:30:44:f8:29:43:d2:38:95:f7:f6:df:31:fc:5b:6b:30:de:
bc:f6:bb:b4:bc:1b:5c:55:08:f9:4e:ae:9a:d1:1c:92:9c:29:
fd:2e:0f:2a:93:08:39:69:9a:a6:69:d7:42:a7:10:d7:97:b4:
f4:5d:d3:8f:84:dd:a1:57:f5:81:2c:51:eb:df:56:3a:69:0d:
49:a1:17:d4:c3:0a:c6:52:2f:11:09:86:c0:f7:02:39:3e:f3:
e1:27:a2:fa:c5:af:0c:ec:c1:f4:a1:f9:39:34:3d:4b:80:e0:
45:49:8f:de:ee:5c:7b:3f:87:e7:07:82:a5:d2:6f:7b:66:01:
19:f0:60:6b:d7:29:19:b8:17:57:f9:af:31:c0:eb:01:86:92:
6d:5f:c9:03:10:06:39:22:29:88:82:06:f4:d2:23:29:70:d5:
bb:0e:6a:7d:88:bc:9d:cd:59:51:4c:dc:2c:5c:ec:fb:1e:44:
be:b7:b6:e4:05:b3:1b:65:b2:7a:9a:07:98:d6:f3:bc:da:9b:
97:88:55:c9:74:14:e1:07:e1:ee:2b:5b:fb:32:c6:3e:2a:ac:
ce:b6:0d:1f:b9:a4:81:3d:fc:51:37:dd:fe:60:9a:09:75:7c:
2d:fc:00:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:09 2026 by rpki-client