Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: /j1LZ7zVi8hyElhZ+T8ucd0Xe1Dc3emZa7CJlDWF5yM=
Subject key identifier: C5:D7:0F:CE:ED:61:93:80:DE:5B:96:57:2F:5F:2A:39:A9:36:3E:30
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 019D2772AC51A8D87845635C45CB8C51F98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 0960
Signing time: Thu 26 Mar 2026 00:01:59 +0000
Manifest this update: Thu 26 Mar 2026 00:01:59 +0000
Manifest next update: Fri 27 Mar 2026 00:01:59 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: +QLFh/J4wc0KJBlkCF+Env/OOaDdSCm7G26Q8WbXlVU=)
2: XbK16gp1Rd7CTE3ryMVkvlqNehI.roa (hash: wmv1rflTHLRXNBfeQWldsma4iJiCHJfDkNf/3azIuu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ac:51:a8:d8:78:45:63:5c:45:cb:8c:51:f9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Mar 26 00:01:59 2026 GMT
Not After : Mar 27 00:01:59 2026 GMT
Subject: CN=c5d70fceed619380de5b96572f5f2a39a9363e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:42:a4:a4:d4:4c:1e:cc:2e:1c:9b:e7:96:
a2:1c:a2:06:46:2c:82:1b:9e:0a:32:45:b9:0b:2c:
21:be:8d:6f:58:38:27:f2:f1:53:f3:12:71:7f:da:
cb:5a:a1:21:89:ab:1a:33:93:ad:34:d2:b4:77:74:
af:78:0c:19:02:6b:9f:c0:20:28:65:c8:48:8b:a7:
00:37:66:52:61:c2:9a:06:ef:02:91:9b:d2:f9:35:
39:02:3b:82:e9:ed:bf:bd:b1:e4:8c:95:fc:05:2d:
ba:d9:17:d0:9b:8d:60:98:e7:2e:79:bf:3f:af:3a:
72:f8:2d:b6:26:cc:f2:a3:a6:ed:f7:8b:17:c2:ac:
48:3b:94:bd:29:f2:0e:16:05:2a:cf:3d:06:30:50:
f7:19:c9:34:ca:9c:ab:9f:e5:a7:95:4d:52:ee:f9:
91:5c:36:d7:56:a9:e7:f5:4b:b6:86:48:f9:59:e1:
ad:3f:0c:c9:14:97:24:fb:25:35:87:d0:bb:f3:ad:
2a:ac:1d:46:4c:de:a9:db:a3:ba:15:21:3e:91:99:
c2:01:4c:2e:48:fe:0d:38:de:a4:16:8b:49:03:86:
2f:fc:da:9a:f1:71:09:92:a6:6d:b1:a3:6e:37:09:
ba:91:3c:90:c6:2b:d0:37:51:73:37:a8:c2:30:be:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:0F:CE:ED:61:93:80:DE:5B:96:57:2F:5F:2A:39:A9:36:3E:30
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:b6:53:f2:c8:c3:a5:60:f5:bc:e9:7b:72:a0:fb:23:9a:
f3:de:4f:d6:c3:45:ff:ab:74:c2:e2:be:1d:5d:b6:b7:59:86:
de:d2:0a:fd:60:a6:14:1f:61:bf:60:3b:cd:5a:34:f3:cc:9c:
e3:c2:9d:a1:58:a0:34:db:ab:7b:c0:06:db:74:50:ce:aa:c0:
ee:f6:dc:d2:a0:71:a7:00:ca:2b:01:93:a4:82:20:1a:ea:1b:
ce:bd:b7:56:4a:12:84:30:1c:9a:ba:00:d1:ba:ad:27:94:90:
5f:35:6c:86:45:66:46:26:c3:a1:e7:98:64:12:42:ff:14:24:
8f:58:aa:90:e5:20:fc:9e:0d:b6:06:f1:09:0e:2d:d0:ac:2a:
35:33:18:3b:be:24:a6:59:47:b5:c6:07:c8:cd:49:cf:53:57:
ba:10:15:36:47:1f:55:a9:5b:73:69:03:96:b9:97:7a:fe:6d:
6f:54:c1:08:bf:4c:8a:df:08:72:63:4e:13:bf:36:33:35:ff:
ca:c7:6f:c9:8a:1c:ea:ce:80:d3:72:b0:d3:26:d2:cf:5e:6d:
a9:01:93:83:db:e9:2b:49:67:53:ef:7e:d8:03:bf:98:ef:8c:
31:a0:49:73:08:6f:de:01:90:cb:fa:9a:07:8b:33:94:49:d9:
c7:f8:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:41:15 2026 by rpki-client