Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: XINvGFjPmgq9BuymRPBTP8cjWEyM++dV+ryzNuY3zBM=
Subject key identifier: 8B:15:A7:9E:2F:C0:C0:24:10:1E:60:C2:DF:E8:ED:C4:F1:CA:B8:E2
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 019D27A8AA754AF6EFB5897EF25F7B22DF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 0A1A
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: zewBB8IyqC/eLa8rjV4KlNTvEvcm7S2OCoH9gypr9mY=)
2: aOE6ABSZYDrwHqX0GtKP4yVMn4E.roa (hash: hS/lZIFnL6s3O1iQAeU4NIFW/EmeY34qv/wGghzDiNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:aa:75:4a:f6:ef:b5:89:7e:f2:5f:7b:22:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=8b15a79e2fc0c024101e60c2dfe8edc4f1cab8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:12:a2:6f:27:6c:ef:9c:4a:86:9b:ce:2c:
d0:a8:90:98:17:4a:db:86:3a:4c:7b:05:86:88:2c:
57:fa:33:49:b1:43:94:bb:3a:03:25:ee:c6:37:31:
43:10:5d:6f:f9:a5:f6:b9:42:91:93:24:f5:d4:6a:
4c:cd:87:72:08:f5:a9:c6:73:32:3c:ed:18:2f:00:
b4:b5:1f:40:4a:b0:a5:71:f0:22:b9:dc:8d:6a:50:
11:99:9e:b3:7a:85:43:a3:2a:2e:22:57:9c:4c:76:
75:c2:1a:ce:02:c7:06:f4:16:c5:0b:f3:3b:b0:57:
58:90:37:ad:6a:7f:b1:88:5e:77:fa:8e:0b:4f:5d:
7b:d7:8c:0b:68:c2:de:13:13:38:2f:8f:0a:4d:9f:
b4:32:e9:ff:45:a1:42:ec:aa:83:d6:55:ea:80:51:
28:8e:0e:ae:6e:c0:13:58:54:ad:48:79:49:5c:6b:
5c:94:64:b2:da:05:3f:83:76:59:7c:1c:97:4e:e2:
1b:00:51:3a:b9:cb:16:fb:5c:ab:83:04:11:5c:ef:
69:d1:67:d7:6a:15:3d:d1:90:21:01:c1:b2:19:d1:
10:0c:6f:50:4d:75:61:53:47:18:43:c2:d4:ca:d0:
86:75:9b:cf:0b:2c:62:ee:cf:60:c4:ec:40:ae:3a:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:A7:9E:2F:C0:C0:24:10:1E:60:C2:DF:E8:ED:C4:F1:CA:B8:E2
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a7:7f:75:6e:80:9e:4f:02:10:70:bf:c4:68:47:54:fc:70:
eb:a2:79:e3:70:6f:dd:6f:d9:b3:12:ff:99:40:0c:a9:c8:c1:
da:8a:cd:e0:ba:db:34:4a:d6:47:e3:98:32:6e:b7:35:34:2c:
b2:c4:32:09:ad:4c:c0:10:5e:d8:eb:8a:0b:c5:94:62:9d:ab:
67:76:1f:e0:91:34:d9:5f:85:25:e9:ef:24:55:19:18:62:5d:
33:1e:0b:8c:df:c1:a8:95:12:af:76:4c:22:f3:64:22:cc:2d:
74:8f:7f:0d:86:0b:71:69:e9:ee:3a:30:65:52:ae:28:f5:1a:
18:61:58:71:c1:be:bd:3c:f0:59:98:1e:10:3c:a9:c2:93:fe:
9d:1e:4f:8b:a8:29:86:21:46:ac:f9:05:25:d2:b6:ab:7a:cd:
3a:74:bb:b0:c7:47:60:c6:e7:ec:ff:31:58:88:77:1c:7b:83:
b9:7f:93:e7:ba:d4:b1:3e:c5:7a:c7:b6:77:fa:36:49:8c:de:
11:0a:99:4a:df:d2:14:6c:32:c6:65:67:a8:ff:a5:a6:9e:b5:
4b:8d:64:78:83:13:2a:4a:6c:ff:f0:6d:37:3a:ee:60:73:86:
e5:e3:ae:1a:fa:04:3f:fa:36:d6:2c:82:d7:31:ee:33:86:1d:
14:8d:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:12 2026 by rpki-client