Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: SpvZ7YPSc/GdQ8AD5zNGU2MnhpcQ7fyaztpZPj5r0co=
Subject key identifier: 37:38:B8:1E:84:F9:96:D7:6E:46:28:8A:41:B8:10:B4:7C:22:1C:DF
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 019E1EA38CD3DA18CE0729FA5592A584503F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 09E0
Signing time: Wed 13 May 2026 00:01:35 +0000
Manifest this update: Wed 13 May 2026 00:01:35 +0000
Manifest next update: Thu 14 May 2026 00:01:35 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: 1GAAxqeCODCetT1JUFn96XQEbPtg+lZzwciEpHVKFnI=)
2: XbK16gp1Rd7CTE3ryMVkvlqNehI.roa (hash: wmv1rflTHLRXNBfeQWldsma4iJiCHJfDkNf/3azIuu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:8c:d3:da:18:ce:07:29:fa:55:92:a5:84:50:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: May 13 00:01:35 2026 GMT
Not After : May 14 00:01:35 2026 GMT
Subject: CN=3738b81e84f996d76e46288a41b810b47c221cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:68:1f:66:e6:0e:60:8f:d2:b3:1f:52:88:
fb:97:36:6f:e0:46:1f:fe:70:97:bd:ac:6d:a2:40:
b7:10:22:2e:59:12:3e:8a:f2:8e:df:46:4a:9f:6e:
90:b1:e6:11:46:c2:e5:1a:28:c9:e5:85:66:6a:fe:
88:f5:cf:15:c6:e5:0e:95:07:ab:f8:2b:45:f7:9c:
6e:82:66:80:b6:09:9f:f3:71:47:48:ef:ea:ff:dd:
2a:5e:e2:2c:9d:3c:fb:8b:ca:07:26:b1:df:82:40:
84:5e:b6:26:00:2e:f2:a7:89:6f:b4:82:ec:a8:ae:
9c:21:10:4c:99:6e:31:2f:4c:b7:b8:82:73:a2:aa:
93:e2:4c:03:27:4a:8d:c4:c3:d8:0d:0a:a2:bf:41:
3a:a9:f4:87:ee:7d:25:d7:aa:68:81:fb:1b:0a:b3:
ee:14:89:37:f9:a0:b7:98:5d:74:f6:08:e1:c0:ee:
cb:b1:09:83:ca:ad:9e:e1:ab:ca:d8:1c:bb:f9:df:
91:64:ae:16:13:c2:a8:bf:08:08:1d:59:36:a8:50:
3c:95:c8:ea:69:0a:05:9c:e2:2a:e5:03:01:71:a6:
9f:81:da:b7:eb:da:d5:4e:73:87:a6:7e:9d:44:61:
82:88:af:c4:ad:fb:ce:c2:2a:65:d5:6e:ae:c0:a8:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:38:B8:1E:84:F9:96:D7:6E:46:28:8A:41:B8:10:B4:7C:22:1C:DF
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e4:3b:1b:df:8d:6f:68:12:fe:ed:1d:c4:07:53:ec:ff:70:
7d:e9:52:3a:25:97:4e:bd:71:4c:30:8d:41:c3:64:34:e4:c6:
3a:1e:f6:26:00:5b:0c:cd:01:cb:40:15:48:d9:ff:eb:53:e8:
46:d4:c4:0b:59:a8:7a:92:0e:28:ce:d3:a3:84:97:86:43:73:
f4:8b:8a:3d:16:8d:9f:80:4a:79:2c:72:80:8b:5f:33:2c:f1:
d1:9e:0e:c7:ed:c6:45:d0:6a:fe:40:6b:7a:c1:8c:ab:c0:1a:
77:da:ec:af:06:be:09:ff:7a:1b:6a:3f:9d:ff:1e:b1:d0:42:
e7:9f:9d:11:b5:46:cd:17:f1:a3:81:33:a0:58:1c:66:5f:1a:
38:3a:c7:e2:a2:02:c9:9e:02:97:01:ee:c8:34:c2:be:80:ef:
b2:80:89:0d:ce:d9:16:80:17:2b:66:79:ed:6a:bc:98:d2:13:
03:5a:f7:08:79:af:48:94:ce:84:4f:7e:57:34:5a:0e:7f:68:
b9:d4:f2:a1:f3:73:95:67:7c:14:14:fb:85:6e:4f:b1:fd:e3:
ac:e4:53:ed:97:7f:38:cd:04:7d:3f:25:a8:ae:de:7b:77:7d:
72:99:61:7d:22:a9:93:a2:71:97:af:8e:9c:ff:ee:b3:63:12:
54:9c:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:44 2026 by rpki-client