Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: OhJJ11OFZOTRI61DeykZsL6noybe5gkTkxSDRrb7E1o=
Subject key identifier: 98:E5:38:AD:A5:5B:1A:03:79:09:1A:ED:8E:EF:C0:A8:1B:92:E3:07
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 019F916D11C56DD0100323858E6CD2B1F939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 0AA0
Signing time: Fri 24 Jul 2026 00:01:12 +0000
Manifest this update: Fri 24 Jul 2026 00:01:12 +0000
Manifest next update: Sat 25 Jul 2026 00:01:12 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: 6MJKn/Zo5aVEY0VcaD4Pukz2U+O3tnlVHAAoeZtiIk8=)
2: XbK16gp1Rd7CTE3ryMVkvlqNehI.roa (hash: wmv1rflTHLRXNBfeQWldsma4iJiCHJfDkNf/3azIuu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:11:c5:6d:d0:10:03:23:85:8e:6c:d2:b1:f9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Jul 24 00:01:12 2026 GMT
Not After : Jul 25 00:01:12 2026 GMT
Subject: CN=98e538ada55b1a0379091aed8eefc0a81b92e307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:a1:76:ce:59:7a:75:a6:c5:74:cb:93:b8:
17:6b:87:7d:56:2f:5e:0f:21:f4:77:d1:11:5f:60:
4a:1f:83:81:fc:24:5b:5f:24:b2:55:a9:0d:a5:6d:
3e:f1:7c:f0:bb:2f:1f:9c:67:af:e5:95:47:9f:b3:
ba:8d:5c:fa:a0:b0:c9:d9:3f:5a:fb:65:ac:6a:01:
81:62:e9:4d:25:05:d7:e6:36:3d:1f:be:59:c3:c1:
4e:67:d0:ef:60:51:00:ed:8d:1f:b6:7f:14:00:4e:
ba:86:52:98:3e:40:69:ad:9b:b6:7b:b6:ed:16:44:
5f:29:e1:c1:83:ae:a4:ab:90:17:7d:dc:86:f8:3a:
13:b4:29:ff:63:05:10:11:1d:04:c4:bc:6d:40:d9:
a0:8e:1b:f5:2d:35:16:d3:9d:89:df:4d:3b:95:dd:
6d:87:21:6b:7c:9b:51:58:78:f9:cf:4d:4c:c1:fb:
05:ec:31:f1:7a:49:7f:4e:b0:5d:fa:cc:c5:df:9d:
43:7d:7f:2f:87:b9:a1:34:5a:df:f3:87:b8:94:90:
0a:7e:ce:48:b2:3b:3f:13:2c:28:08:f4:18:f6:27:
88:1b:a1:4e:f1:18:a9:68:af:e5:a1:b8:8c:af:33:
ba:f2:f5:d5:21:37:8e:24:bc:97:ea:9f:f0:3d:b7:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:38:AD:A5:5B:1A:03:79:09:1A:ED:8E:EF:C0:A8:1B:92:E3:07
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:ce:6d:e3:60:ae:ef:e3:b1:74:77:f2:fd:4b:20:6e:e6:
3b:f3:7d:65:dd:f3:a7:38:8f:b5:d0:ea:43:49:e1:14:04:f2:
97:4c:9b:92:be:0e:bb:f8:03:6d:26:f6:aa:04:98:f6:47:10:
bc:94:e8:34:fd:12:8e:44:c1:9a:11:3b:f7:d8:07:da:2a:05:
18:dc:0f:d9:2a:33:4c:bb:f0:ac:72:92:6d:b1:2e:57:ac:b8:
5e:34:e9:a3:19:c4:28:ed:51:e3:15:ae:07:65:62:6c:f2:d6:
08:fe:f3:f0:4b:46:95:c2:83:b2:4c:68:bf:13:ca:53:da:c1:
26:c7:c1:9c:00:5a:8c:0b:c4:ee:ee:22:96:fd:da:29:26:e4:
dd:b7:4d:21:2c:4d:7c:94:59:38:c2:06:df:08:85:55:5d:8c:
41:a6:bd:1a:a8:0e:ca:10:66:45:d4:24:55:8a:21:96:59:b3:
e3:8f:28:f9:bb:7b:59:93:c5:7c:d0:08:88:a0:f3:78:fa:29:
4c:dd:6e:db:b0:b0:9b:cc:b2:f1:c7:71:6b:85:50:81:62:7e:
b5:3e:ba:04:d2:d5:ab:6b:14:fc:30:1f:77:c2:8b:86:7e:24:
81:b7:d5:38:e4:fb:3e:00:51:5a:bb:eb:31:7a:ff:dc:a9:7c:
fc:7c:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:43 2026 by rpki-client