Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: dMcLp932wTtVOY+OZkH2/rziSsPFlj6QW0/pXx5cuX0=
Subject key identifier: 26:94:E9:36:FF:93:02:35:4E:F7:FA:9B:78:61:6F:6C:C5:79:3E:2A
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 01A0D01225AD87DB40081F4548165D434469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 0B45
Signing time: Wed 23 Sep 2026 21:00:45 +0000
Manifest this update: Wed 23 Sep 2026 21:00:45 +0000
Manifest next update: Thu 24 Sep 2026 21:00:45 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: QqTS+Qkq3prYpuPHj8KeFoM+Z7azY2xLeJdlSxeJlHo=)
2: XbK16gp1Rd7CTE3ryMVkvlqNehI.roa (hash: wmv1rflTHLRXNBfeQWldsma4iJiCHJfDkNf/3azIuu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:25:ad:87:db:40:08:1f:45:48:16:5d:43:44:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Sep 23 21:00:45 2026 GMT
Not After : Sep 24 21:00:45 2026 GMT
Subject: CN=2694e936ff9302354ef7fa9b78616f6cc5793e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:b3:ac:a0:f4:ff:00:e7:bb:b7:8d:5d:be:
19:de:51:db:63:c8:21:82:11:dc:9c:66:23:36:ee:
13:c2:06:5f:cb:ff:f7:b5:03:83:03:27:eb:fc:59:
ed:6d:74:3b:ad:79:14:9c:ab:2d:9c:c5:d5:26:7a:
3d:2f:ce:97:bb:99:7d:81:a7:b6:8a:21:2e:4f:20:
a9:c5:67:9e:bf:f4:36:71:7e:4f:a5:db:f8:42:f0:
36:ce:1b:77:9a:72:20:0d:92:8f:4f:9b:43:6d:0e:
ef:31:c2:74:6b:ce:7b:72:c2:90:db:bc:6b:63:0a:
a8:4c:72:7f:76:7f:92:3c:0d:50:47:1d:8c:91:c9:
77:d3:b0:8a:36:61:cf:91:da:9b:97:ca:d5:b9:d9:
76:0b:19:f4:58:5e:0b:86:c7:af:67:3b:09:a1:41:
53:00:ba:4b:2d:7f:cb:ad:83:4a:b2:c3:89:34:da:
f9:df:87:04:1b:2f:7b:89:3b:b5:ab:02:61:93:fe:
41:4a:ac:46:73:ed:d3:60:e9:01:4b:29:fa:b7:8d:
d5:42:d9:32:02:d5:18:19:80:94:a0:3d:9c:bf:36:
77:4e:2a:50:f4:c1:a8:71:78:ca:f7:bc:ed:d3:2f:
55:b9:66:c7:06:92:6b:5c:62:0b:fb:99:20:8c:0f:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:E9:36:FF:93:02:35:4E:F7:FA:9B:78:61:6F:6C:C5:79:3E:2A
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e6:17:bf:a3:60:a3:96:e0:2b:db:bd:dc:88:39:63:1a:cf:
a5:66:f0:35:36:f0:5a:29:66:33:b9:c6:7c:0b:59:cc:8b:85:
47:fe:b2:1d:d2:b1:1f:e9:d1:cd:c7:8f:a2:a7:b0:48:2f:e4:
38:6e:9d:b6:2d:b5:88:74:f9:db:c0:5d:ff:5d:2e:7f:d0:c7:
da:fc:d1:d3:9b:ac:6c:f5:d2:16:a7:f3:c6:8e:fd:e7:6d:15:
ca:7e:c9:cf:df:a3:ff:04:a1:60:1d:7d:e7:06:5e:61:ca:d0:
35:67:24:f3:52:32:30:02:c5:00:79:d1:dc:28:65:c1:ed:6f:
50:1a:ae:ed:ed:21:58:a2:2c:6a:e3:84:87:27:e4:b3:6b:5d:
c2:72:d3:0d:15:ce:fa:d4:8c:66:f4:44:ee:55:f7:0e:97:06:
f8:da:fa:0b:fa:13:5a:04:9e:9b:9f:92:ea:fb:30:42:ec:33:
8e:70:8d:78:1b:79:3b:c4:ad:a1:a9:4f:02:9e:21:3f:af:10:
4d:88:8f:b0:3a:69:ed:dd:3b:4c:e6:2c:ae:1f:d6:e9:c5:29:
28:1f:cf:ac:da:0e:61:4e:24:47:73:4a:99:d8:cb:d7:1a:f7:
64:9a:cc:7e:29:19:33:1c:98:13:64:6c:0f:a7:fa:39:7f:56:
36:f8:9e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEiWth9tACB9FSBZdQ0RpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MWU3ODcxZmQzOGYyZGY5MTgyNDJkZGExYzZmYzM1Njg4
NDIzY2EwHhcNMjYwOTIzMjEwMDQ1WhcNMjYwOTI0MjEwMDQ1WjAzMTEwLwYDVQQD
EygyNjk0ZTkzNmZmOTMwMjM1NGVmN2ZhOWI3ODYxNmY2Y2M1NzkzZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteezrKD0/wDnu7eNXb4Z3lHbY8gh
ghHcnGYjNu4TwgZfy//3tQODAyfr/FntbXQ7rXkUnKstnMXVJno9L86Xu5l9gae2
iiEuTyCpxWeev/Q2cX5Ppdv4QvA2zht3mnIgDZKPT5tDbQ7vMcJ0a857csKQ27xr
YwqoTHJ/dn+SPA1QRx2Mkcl307CKNmHPkdqbl8rVudl2Cxn0WF4LhsevZzsJoUFT
ALpLLX/LrYNKssOJNNr534cEGy97iTu1qwJhk/5BSqxGc+3TYOkBSyn6t43VQtky
AtUYGYCUoD2cvzZ3TipQ9MGocXjK97zt0y9VuWbHBpJrXGIL+5kgjA8RXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaU6Tb/kwI1Tvf6m3hhb2zFeT4qMB8GA1UdIwQY
MBaAFCUeeHH9OPLfkYJC3aHG/DVohCPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgt
OGJlYWRhYWFkMGIxLzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgtOGJlYWRhYWFkMGIx
LzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOYXv6Ng
o5bgK9u93Ig5YxrPpWbwNTbwWilmM7nGfAtZzIuFR/6yHdKxH+nRzcePoqewSC/k
OG6dti21iHT528Bd/10uf9DH2vzR05usbPXSFqfzxo79520Vyn7Jz9+j/wShYB19
5wZeYcrQNWck81IyMALFAHnR3Chlwe1vUBqu7e0hWKIsauOEhyfks2tdwnLTDRXO
+tSMZvRE7lX3DpcG+Nr6C/oTWgSem5+S6vswQuwzjnCNeBt5O8StoalPAp4hP68Q
TYiPsDpp7d07TOYsrh/W6cUpKB/PrNoOYU4kR3NKmdjL1xr3ZJrMfikZMxyYE2Rs
D6f6OX9WNvieAw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:36:28 2026 by rpki-client