Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: e7HsOP4a7jI48E79KURiDPoVlZU5TLAqEMIXj1wOrco=
Subject key identifier: 76:9B:B0:86:B9:0E:F3:54:85:3B:38:F2:6E:A3:40:1C:BA:C1:11:5A
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 019E3FAE626CBE114BF80B9E7CD799D74B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 0AAB
Signing time: Tue 19 May 2026 10:00:53 +0000
Manifest this update: Tue 19 May 2026 10:00:53 +0000
Manifest next update: Wed 20 May 2026 10:00:53 +0000
Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: St8JP1qpf2mnOPX60+pMQAbEThxojAORazyJN30pHVY=)
2: aOE6ABSZYDrwHqX0GtKP4yVMn4E.roa (hash: hS/lZIFnL6s3O1iQAeU4NIFW/EmeY34qv/wGghzDiNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:ae:62:6c:be:11:4b:f8:0b:9e:7c:d7:99:d7:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: May 19 10:00:53 2026 GMT
Not After : May 20 10:00:53 2026 GMT
Subject: CN=769bb086b90ef354853b38f26ea3401cbac1115a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:da:c2:76:15:79:ce:6d:37:67:86:54:af:
21:44:f5:d5:e3:7d:b6:67:db:d6:39:a8:73:7b:ae:
49:bf:44:41:18:05:14:9d:d1:64:ce:38:a8:ec:bf:
5c:63:59:fc:fa:ee:05:5a:42:f9:18:c5:90:00:d5:
30:15:8d:da:4d:f7:19:93:79:25:7e:24:a4:f3:f0:
15:75:9e:7c:f9:c9:d2:61:b9:43:af:ac:8c:63:1a:
54:18:a8:fb:50:8d:cb:94:f0:60:f6:81:f5:a1:db:
a2:5c:1f:4f:ab:d2:d9:91:1a:97:8d:b3:9c:cd:fe:
b0:2e:99:61:45:51:34:d1:eb:b6:43:6a:ec:2d:d5:
cb:01:f3:5f:d3:41:c4:53:a9:2a:ea:ba:2a:db:ab:
91:fb:31:ff:7c:55:9e:ab:b8:6a:7d:f3:dc:d3:29:
19:58:53:69:35:4c:0a:80:cb:df:d9:06:fb:f9:5e:
c3:61:cd:96:4e:d5:f9:ef:ea:94:8f:bf:a4:a9:1c:
a4:2a:fb:88:39:ce:42:2e:06:ce:e8:38:bb:ec:7f:
79:13:a0:e9:4c:4f:d1:69:e3:66:fc:17:0b:12:ca:
b2:35:57:c5:a5:71:f8:1a:e3:ec:9a:eb:8c:fa:5b:
75:ad:b0:1b:a1:ce:f7:15:08:72:0a:6d:35:a4:e1:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9B:B0:86:B9:0E:F3:54:85:3B:38:F2:6E:A3:40:1C:BA:C1:11:5A
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:53:66:cb:75:1c:0a:98:b6:e0:07:40:17:ce:b1:3b:93:4d:
01:0f:45:ba:bc:7f:d5:8d:46:21:7e:d2:6d:7d:01:72:00:f6:
2c:e4:02:d4:c8:d8:6f:d3:fb:59:ef:2c:f0:4e:5b:25:47:0e:
53:05:77:e8:fc:8e:65:75:eb:ce:85:9c:30:d8:f1:73:61:17:
81:82:69:8d:28:0f:aa:2b:a0:e4:5b:1d:2a:dd:c8:3d:1f:94:
0a:26:2f:4a:68:5f:2a:cc:0b:dc:48:6a:6d:f9:b2:88:e5:b4:
9d:91:31:6e:75:ef:6a:11:09:60:1e:d2:ec:34:20:3c:a9:54:
3b:0b:c1:f1:ff:cd:db:5e:1f:b6:30:fb:a8:34:9f:40:15:15:
d5:46:eb:97:08:da:cb:4d:5f:2a:2d:18:4c:b3:06:c9:f2:18:
36:41:b1:2b:4a:2c:70:08:50:79:34:c2:2f:43:6d:45:04:3d:
93:61:bb:a0:df:69:37:ea:7a:67:cb:55:ab:54:8f:2a:ec:03:
46:bf:cc:79:f9:76:d7:c6:c5:5e:d7:e7:27:f7:51:78:16:75:
fc:5a:f0:5d:85:4d:2b:8f:5c:f9:1b:1b:cb:ae:ad:ba:c8:4a:
f3:52:8d:9e:1e:ea:7a:7d:80:ab:fd:7b:d1:4e:72:d1:fc:44:
0c:87:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:44:16 2026 by rpki-client