Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: S+DOdiDoXXTMbK7BcuWtSZ9yms802atbbaAkQS4D+UI=
Subject key identifier: BD:6F:76:B8:54:48:CA:B2:C9:B5:4C:71:DF:CF:E4:8E:E5:DE:8E:D2
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 019D28BB9831294C82B273DD16BA8A225924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 15C7
Signing time: Thu 26 Mar 2026 06:01:15 +0000
Manifest this update: Thu 26 Mar 2026 06:01:15 +0000
Manifest next update: Fri 27 Mar 2026 06:01:15 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: rpfeEU2+6sNCdzOhttMd1hf8Am/Kv2cs6rptE0KtxZE=)
2: LUqVoC445OwuMDQ02JnxJokVy0c.roa (hash: sTwGxPhTJ/H24QIf8MGKPbk8zrx1fr0jAaNaXKcuA+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:98:31:29:4c:82:b2:73:dd:16:ba:8a:22:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Mar 26 06:01:15 2026 GMT
Not After : Mar 27 06:01:15 2026 GMT
Subject: CN=bd6f76b85448cab2c9b54c71dfcfe48ee5de8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:eb:c5:de:cf:af:17:df:86:41:ec:73:a4:
80:34:df:b3:3f:a7:7f:64:89:66:ec:ff:e9:87:ab:
14:3b:9b:a9:f0:c6:a4:eb:4d:6e:75:4f:25:8c:3a:
5b:06:3e:9b:5d:c4:bc:3e:e3:86:ea:91:f2:f4:74:
ee:ba:fc:0b:aa:3a:57:b5:99:5c:01:30:5b:f0:af:
03:d6:ed:cb:f7:6f:9d:4a:74:af:cc:6b:84:a5:d8:
fa:7c:a1:35:da:e3:dc:05:3f:90:a4:41:a3:e3:94:
b0:ec:91:53:5a:dd:a9:8b:79:2a:bb:a9:fc:b6:f3:
c7:c9:97:d3:1c:a6:25:28:54:e5:6b:8b:68:84:6e:
c6:2e:14:d5:fd:5f:a8:5e:ef:ad:3e:97:35:d8:90:
d3:65:d4:8c:f2:cd:30:fc:7a:ff:3d:62:4e:0a:c5:
d4:f4:d6:a5:88:4f:e9:8b:bd:42:86:1e:af:25:20:
f9:ac:7a:15:37:fd:7b:39:7b:a8:9d:4d:f6:b0:4f:
d3:47:69:ed:0e:5e:4f:8f:50:ac:b2:2a:a3:c5:50:
56:e6:d8:5a:dc:9d:f3:34:8d:10:b6:98:6e:c2:49:
4d:73:89:74:1d:7d:9a:72:3c:c9:68:09:e3:4d:eb:
3d:2f:7b:93:13:d2:ac:63:ab:2f:cf:5a:9d:3d:82:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:76:B8:54:48:CA:B2:C9:B5:4C:71:DF:CF:E4:8E:E5:DE:8E:D2
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:8c:fc:21:aa:f9:f9:1d:3f:d4:be:07:b9:68:d4:00:be:
ce:30:b8:e0:e6:fb:70:13:92:55:64:05:60:c9:4e:72:39:f1:
95:e8:24:69:89:3e:ec:22:62:e4:23:23:20:29:5c:1b:7c:b3:
a0:d3:66:82:54:42:50:07:0f:a7:d8:4b:65:6c:19:05:2e:b3:
dc:1b:b0:e1:54:46:b8:42:a4:34:c2:1f:33:6a:1b:76:62:31:
46:d1:52:7a:fc:d7:7b:9e:ce:39:85:1c:2b:07:d5:77:f3:d3:
33:8a:25:b6:22:55:f3:ff:46:92:f5:d8:b8:98:cb:15:b0:43:
82:c1:11:67:a7:85:9a:3d:ea:69:41:03:8e:a1:24:7c:36:a5:
69:c7:79:5b:70:76:47:be:bd:08:11:89:e1:6a:2b:d8:c7:5f:
84:e0:bc:d5:b8:e0:91:7f:40:1f:ec:12:ae:18:d4:70:bb:a9:
00:13:5b:00:a8:ad:09:9c:3e:2a:3c:65:f2:05:24:c2:78:50:
e2:61:d0:bb:2f:bd:ed:4c:df:ce:cb:e1:03:0c:78:58:44:b7:
75:bf:dc:b1:b0:51:a1:46:7c:f7:0f:e4:17:7f:47:3e:19:de:
6d:73:36:44:35:43:30:81:6f:93:15:04:62:22:26:f2:48:49:
ae:57:87:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5gxKUyCsnPdFrqKIlkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw
ZjU0YzYwHhcNMjYwMzI2MDYwMTE1WhcNMjYwMzI3MDYwMTE1WjAzMTEwLwYDVQQD
EyhiZDZmNzZiODU0NDhjYWIyYzliNTRjNzFkZmNmZTQ4ZWU1ZGU4ZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNrrxd7PrxffhkHsc6SANN+zP6d/
ZIlm7P/ph6sUO5up8Mak601udU8ljDpbBj6bXcS8PuOG6pHy9HTuuvwLqjpXtZlc
ATBb8K8D1u3L92+dSnSvzGuEpdj6fKE12uPcBT+QpEGj45Sw7JFTWt2pi3kqu6n8
tvPHyZfTHKYlKFTla4tohG7GLhTV/V+oXu+tPpc12JDTZdSM8s0w/Hr/PWJOCsXU
9NaliE/pi71Chh6vJSD5rHoVN/17OXuonU32sE/TR2ntDl5Pj1CssiqjxVBW5tha
3J3zNI0QtphuwklNc4l0HX2acjzJaAnjTes9L3uTE9KsY6svz1qdPYJ0+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1vdrhUSMqyybVMcd/P5I7l3o7SMB8GA1UdIwQY
MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct
MTBjNzUwYzZlMzUxLzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx
LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvSM/CGq
+fkdP9S+B7lo1AC+zjC44Ob7cBOSVWQFYMlOcjnxlegkaYk+7CJi5CMjIClcG3yz
oNNmglRCUAcPp9hLZWwZBS6z3Buw4VRGuEKkNMIfM2obdmIxRtFSevzXe57OOYUc
KwfVd/PTM4oltiJV8/9GkvXYuJjLFbBDgsERZ6eFmj3qaUEDjqEkfDalacd5W3B2
R769CBGJ4Wor2MdfhOC81bjgkX9AH+wSrhjUcLupABNbAKitCZw+Kjxl8gUkwnhQ
4mHQuy+97UzfzsvhAwx4WES3db/csbBRoUZ89w/kF39HPhnebXM2RDVDMIFvkxUE
YiIm8khJrleHZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:42 2026 by rpki-client