Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: gx30txevzS55jPzOVMR1hSYGahPIW1EYdpZQYSK8Kps=
Subject key identifier: DE:AC:81:EB:BF:C2:DE:BC:00:13:DD:08:EA:83:B1:95:EE:6A:D8:F7
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019D38D32FD8B3CD44686E80715EA3E26E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: ZvgcqvjjYRpdx+fwbXOtZ/zDG8lTJbkO74v/8tyse2w=)
2: uggilkPXIQowDX7IENHctXgTYrc.roa (hash: bdstU+Ed9ZtoDiLImu8JYA/k3J0Pn1VQzFJ5dM1IotU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2f:d8:b3:cd:44:68:6e:80:71:5e:a3:e2:6e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=deac81ebbfc2debc0013dd08ea83b195ee6ad8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:1f:1f:2b:7b:ce:fd:7a:5d:6a:bb:69:82:
30:2e:11:12:77:65:19:ba:1d:b8:6e:ed:34:ab:db:
fc:3f:23:11:70:b3:fd:81:a9:4a:28:a7:bd:dc:4d:
10:a0:b6:4b:4b:ef:68:da:1b:93:75:87:0b:aa:cd:
7a:40:05:c8:29:b5:7c:ed:d1:da:08:c8:26:e0:b7:
b4:20:46:b9:58:7c:4c:61:44:32:be:ff:e8:31:9c:
ce:71:05:b9:c7:1a:c6:bd:86:4f:11:02:42:5f:72:
83:da:87:64:af:69:5f:88:89:a1:3d:9e:bd:7d:4c:
d9:ce:13:c2:f4:f9:4f:e1:c0:24:b4:22:8a:af:7c:
ef:4c:ed:82:4c:9f:63:af:54:6c:6f:6d:1c:0b:22:
df:b3:c3:18:8d:b8:c7:ec:bd:f2:ca:33:18:29:34:
27:11:9a:b3:e9:65:7d:18:70:67:7d:ef:aa:9a:00:
00:2e:0a:0d:a7:53:8b:72:da:d3:cb:f8:94:73:5a:
90:74:35:6b:bc:ec:36:58:16:5c:c2:46:99:62:eb:
c4:7e:8b:d8:92:90:cf:55:88:05:ea:40:e1:8a:ff:
55:3e:7d:51:8d:50:9c:0f:d4:62:e7:bf:d0:61:d1:
76:b6:cf:27:34:49:6b:66:e9:42:9f:07:83:c9:4a:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:81:EB:BF:C2:DE:BC:00:13:DD:08:EA:83:B1:95:EE:6A:D8:F7
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e8:16:2c:76:4a:fd:ec:79:48:9e:28:11:34:0a:f7:62:40:
43:ba:9f:85:49:1f:c6:ec:45:62:ce:0c:61:08:0c:79:20:da:
ff:b8:20:2f:5f:e3:94:e7:a3:fc:09:58:59:b4:11:05:8e:d1:
b3:e0:c3:67:5c:15:60:84:d4:16:eb:0d:8e:b1:e1:5b:fc:d1:
c0:a1:f0:7c:94:8b:09:bc:12:e0:44:36:d4:fc:f5:06:d4:2e:
34:a2:73:55:09:29:81:40:47:82:26:71:16:dd:34:68:33:64:
1e:25:59:8a:41:fa:67:28:8d:a1:de:fa:dc:8a:83:16:61:07:
92:ea:cd:d0:81:22:0d:cb:9e:2b:e8:03:49:61:45:0f:56:81:
f8:2f:e3:cf:98:1b:ba:cd:03:9c:65:12:91:b1:54:69:e5:95:
19:15:22:6b:8b:99:65:53:68:4f:b2:de:14:aa:53:d4:ac:03:
24:7c:d3:7a:de:2b:fb:09:82:e5:bd:3e:e0:c0:4d:56:8e:02:
05:3f:82:cf:84:fe:4d:de:59:b4:c6:0b:3b:52:fa:6c:31:86:
82:7b:b5:54:7b:8b:f0:00:5a:07:37:8d:96:bd:4b:77:fc:e4:
67:2f:03:83:a8:a8:00:c3:7c:48:bd:b2:e0:be:e2:88:c6:b0:
fc:36:76:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040y/Ys81EaG6AcV6j4m5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDlmNDVlZjIwYjUwNmVhOGVmNGNiNjgyYzJjYTI3MDFi
MjkwYjQwHhcNMjYwMzI5MDkwMDU3WhcNMjYwMzMwMDkwMDU3WjAzMTEwLwYDVQQD
EyhkZWFjODFlYmJmYzJkZWJjMDAxM2RkMDhlYTgzYjE5NWVlNmFkOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxkfHyt7zv16XWq7aYIwLhESd2UZ
uh24bu00q9v8PyMRcLP9galKKKe93E0QoLZLS+9o2huTdYcLqs16QAXIKbV87dHa
CMgm4Le0IEa5WHxMYUQyvv/oMZzOcQW5xxrGvYZPEQJCX3KD2odkr2lfiImhPZ69
fUzZzhPC9PlP4cAktCKKr3zvTO2CTJ9jr1Rsb20cCyLfs8MYjbjH7L3yyjMYKTQn
EZqz6WV9GHBnfe+qmgAALgoNp1OLctrTy/iUc1qQdDVrvOw2WBZcwkaZYuvEfovY
kpDPVYgF6kDhiv9VPn1RjVCcD9Ri57/QYdF2ts8nNElrZulCnweDyUqIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6sgeu/wt68ABPdCOqDsZXuatj3MB8GA1UdIwQY
MBaAFCVJ9F7yC1BuqO9MtoLCyicBspC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMt
YTU0MzFiMDdkMDllLzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMtYTU0MzFiMDdkMDll
LzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+gWLHZK
/ex5SJ4oETQK92JAQ7qfhUkfxuxFYs4MYQgMeSDa/7ggL1/jlOej/AlYWbQRBY7R
s+DDZ1wVYITUFusNjrHhW/zRwKHwfJSLCbwS4EQ21Pz1BtQuNKJzVQkpgUBHgiZx
Ft00aDNkHiVZikH6ZyiNod763IqDFmEHkurN0IEiDcueK+gDSWFFD1aB+C/jz5gb
us0DnGUSkbFUaeWVGRUia4uZZVNoT7LeFKpT1KwDJHzTet4r+wmC5b0+4MBNVo4C
BT+Cz4T+Td5ZtMYLO1L6bDGGgnu1VHuL8ABaBzeNlr1Ld/zkZy8Dg6ioAMN8SL2y
4L7iiMaw/DZ2bw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:43 2026 by rpki-client