Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: abREljI929/WLKMT54j+Mtk3Exp/LvAFGv9nkMLCXTs=
Subject key identifier: 22:F9:CB:24:E0:A8:9F:14:53:A3:8C:77:A5:3B:B7:10:CE:C7:5B:2A
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 019D371B377799D4932D411C5EFE4B585B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 0A22
Signing time: Sun 29 Mar 2026 01:00:23 +0000
Manifest this update: Sun 29 Mar 2026 01:00:23 +0000
Manifest next update: Mon 30 Mar 2026 01:00:23 +0000
Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: cI0KkT0R+Ob3bMBUEX/lR5rmfExMZFjc1XgVfDgBHAg=)
2: aOE6ABSZYDrwHqX0GtKP4yVMn4E.roa (hash: hS/lZIFnL6s3O1iQAeU4NIFW/EmeY34qv/wGghzDiNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:37:77:99:d4:93:2d:41:1c:5e:fe:4b:58:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Mar 29 01:00:23 2026 GMT
Not After : Mar 30 01:00:23 2026 GMT
Subject: CN=22f9cb24e0a89f1453a38c77a53bb710cec75b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:ce:44:f8:bf:1e:10:42:fd:0f:90:c0:b6:
bc:cc:d0:2d:5c:c7:b6:6a:bc:0c:c6:d7:23:8f:d3:
0e:95:7e:7b:46:ee:b4:af:4f:21:18:5e:82:7a:eb:
e6:db:58:51:60:18:6f:ec:88:3b:c1:66:3a:c3:ca:
3f:97:79:8a:23:3a:80:07:6d:a7:a2:bb:07:c5:c7:
9b:18:d5:08:c1:f1:84:1b:5d:73:20:93:4f:78:2b:
e6:3a:20:48:ea:fe:bd:f5:ca:3b:7d:fd:76:23:43:
69:7e:0e:46:02:c4:ac:27:30:f5:4b:fe:66:92:73:
77:ef:eb:b6:4e:3c:91:59:e2:09:0f:61:54:ed:84:
dc:94:a0:8a:ed:c0:07:20:dc:72:35:d0:68:c8:02:
ce:a5:ae:b9:10:75:75:a5:d3:2a:09:d4:82:c3:b5:
5a:47:46:ea:2f:82:c4:45:37:b4:da:86:9d:ee:f9:
6b:16:62:f5:17:e6:54:f1:30:d4:08:08:84:f5:05:
ce:c4:1e:0e:1d:3f:c7:5d:f0:84:ca:3f:7e:1e:44:
05:22:d4:f9:ed:e2:63:83:fc:6e:14:66:1d:c7:22:
ee:2e:a2:e5:b8:8a:9b:30:6c:18:8b:ad:8d:7d:14:
9e:ad:b4:a1:ad:b8:de:c4:5e:d0:81:1f:ec:6a:59:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:CB:24:E0:A8:9F:14:53:A3:8C:77:A5:3B:B7:10:CE:C7:5B:2A
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c1:7e:de:90:30:b1:61:5a:0a:69:1a:7f:8f:2d:06:d7:d2:
f2:0c:44:03:e8:de:17:e5:9f:a3:24:d8:aa:cb:e2:45:3b:17:
80:d8:a1:d1:68:9d:5e:83:b2:f3:eb:0e:15:4e:0e:d6:00:46:
ea:b9:8c:fc:1f:12:59:57:37:34:76:ee:57:3c:25:0e:3f:c5:
e1:22:59:f0:b2:cb:3e:d7:de:e0:88:88:30:08:cc:87:d8:e5:
74:e1:0c:c9:9b:7e:f9:87:9e:2f:dd:32:63:cf:63:fe:d3:bb:
d7:cb:60:4c:6f:c0:0a:f1:18:b9:96:6e:48:99:45:14:81:bf:
a7:93:81:b4:fa:32:88:10:ed:4c:0f:1f:fe:4d:21:69:5b:d2:
ed:0b:d5:2d:48:e5:71:31:5b:c8:e3:67:93:92:e2:a3:0b:0b:
7a:9f:dc:ac:d1:ba:39:0f:44:32:fe:4a:8d:13:df:0e:0f:5a:
e9:49:5b:c2:71:17:09:44:b8:98:24:a2:ae:41:35:ef:8d:d0:
b8:de:31:47:7b:8b:f7:80:4a:48:42:d4:03:b1:db:02:15:94:
25:63:67:6e:4f:73:bc:3a:56:78:05:8c:d4:99:a5:aa:c3:c6:
1a:05:d8:c5:dc:7a:70:8a:8c:2d:23:16:22:91:25:b4:3e:76:
f6:ff:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:22 2026 by rpki-client