Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: xBbWI3ffsZv+9uPmOgB+4kel74HaCW+ggBbVf69iiiI=
Subject key identifier: E0:F2:B3:FC:7B:9F:A2:DA:D4:5B:F5:45:B6:9F:3E:FA:92:85:07:E7
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 019D9AAC177DDF4DB0581081F98645083E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 1602
Signing time: Fri 17 Apr 2026 09:01:02 +0000
Manifest this update: Fri 17 Apr 2026 09:01:02 +0000
Manifest next update: Sat 18 Apr 2026 09:01:02 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: nmT5CQc/3oTef+axybPLOTdJK/howeU1Qy7KK2sMAPY=)
2: LUqVoC445OwuMDQ02JnxJokVy0c.roa (hash: sTwGxPhTJ/H24QIf8MGKPbk8zrx1fr0jAaNaXKcuA+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:17:7d:df:4d:b0:58:10:81:f9:86:45:08:3e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Apr 17 09:01:02 2026 GMT
Not After : Apr 18 09:01:02 2026 GMT
Subject: CN=e0f2b3fc7b9fa2dad45bf545b69f3efa928507e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:d7:13:9c:e4:47:4e:94:51:8b:16:b0:e1:
87:ff:4e:1b:9f:59:d8:15:82:25:c4:59:65:ea:c5:
3f:84:c5:5c:da:e0:cc:00:60:9d:1e:aa:72:55:12:
37:9e:30:44:24:28:7d:51:ca:1c:e7:76:7c:60:1b:
33:55:85:f1:18:e3:a5:5e:2a:e6:79:36:38:8c:89:
6d:72:71:39:8c:9b:67:18:8b:50:fd:c1:e9:84:df:
dc:5d:8a:6d:38:88:77:f7:4a:70:38:73:8d:b6:31:
e6:26:fb:e6:31:e9:a0:00:d4:93:02:d5:72:31:4d:
29:4e:c5:ef:58:85:92:c9:34:7b:d5:40:50:14:7b:
e2:1b:f3:ac:f3:b9:18:10:7e:28:95:1f:1a:4c:e1:
31:1b:b3:43:bf:38:59:d7:da:92:13:0a:48:63:81:
80:a0:df:7c:aa:37:93:46:0a:aa:c9:77:c4:69:22:
16:33:39:2a:67:f8:f8:dd:ac:3c:d7:77:0f:d1:df:
e7:e1:02:38:f3:06:fe:6e:92:b4:ab:22:b6:d9:e0:
46:5c:a4:36:bb:57:b8:d9:9e:3a:95:77:a6:72:3d:
3f:db:a8:bf:5e:ed:ff:e2:7a:81:1a:6d:0b:e5:43:
f4:f8:75:8d:7e:b1:40:6e:a2:bf:4f:30:cb:ad:36:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:B3:FC:7B:9F:A2:DA:D4:5B:F5:45:B6:9F:3E:FA:92:85:07:E7
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2d:44:6f:9d:1d:d7:e9:80:1a:6b:12:b9:b4:e1:f9:b3:3b:
00:a0:da:b8:f8:3c:c8:05:21:4a:cc:93:ed:ed:83:d9:d2:ae:
16:77:67:11:96:cc:8c:19:b1:6d:8f:a3:56:dc:0f:bd:2d:2f:
22:7e:90:db:be:88:aa:4c:92:6f:c5:1a:65:c5:d3:57:f0:67:
d7:c6:1b:1e:3c:10:52:c7:7c:4a:f2:62:94:b0:a3:06:c7:7e:
bd:32:70:0d:7b:cd:c3:fb:96:69:e6:d2:7a:92:29:79:40:4e:
e9:12:f5:db:13:bc:18:b7:79:5f:a0:dc:30:ad:d5:66:a9:62:
38:35:f4:43:91:e5:d5:69:4e:44:54:e7:c8:23:a9:30:5b:6a:
05:d7:8a:c7:01:7d:f1:30:fd:cc:29:ba:fb:b5:c8:ec:b6:1d:
61:30:45:16:f2:8c:c9:d7:95:07:86:68:bb:57:f7:61:cd:28:
1e:c5:1b:19:0c:31:eb:9b:a8:a7:89:d8:74:f3:75:02:80:3c:
55:a8:40:7b:b7:19:4d:bc:9f:c4:d7:70:2a:bb:05:1e:ec:95:
52:0f:f3:8d:d9:25:75:61:7a:ee:34:01:b9:c6:ac:d0:9a:e3:
2a:f4:1e:07:b5:b9:a4:63:a3:49:d7:1d:5e:de:8d:d0:19:29:
60:62:12:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arBd9302wWBCB+YZFCD5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw
ZjU0YzYwHhcNMjYwNDE3MDkwMTAyWhcNMjYwNDE4MDkwMTAyWjAzMTEwLwYDVQQD
EyhlMGYyYjNmYzdiOWZhMmRhZDQ1YmY1NDViNjlmM2VmYTkyODUwN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPzXE5zkR06UUYsWsOGH/04bn1nY
FYIlxFll6sU/hMVc2uDMAGCdHqpyVRI3njBEJCh9Ucoc53Z8YBszVYXxGOOlXirm
eTY4jIltcnE5jJtnGItQ/cHphN/cXYptOIh390pwOHONtjHmJvvmMemgANSTAtVy
MU0pTsXvWIWSyTR71UBQFHviG/Os87kYEH4olR8aTOExG7NDvzhZ19qSEwpIY4GA
oN98qjeTRgqqyXfEaSIWMzkqZ/j43aw813cP0d/n4QI48wb+bpK0qyK22eBGXKQ2
u1e42Z46lXemcj0/26i/Xu3/4nqBGm0L5UP0+HWNfrFAbqK/TzDLrTZK9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODys/x7n6La1Fv1RbafPvqShQfnMB8GA1UdIwQY
MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct
MTBjNzUwYzZlMzUxLzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx
LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYC1Eb50d
1+mAGmsSubTh+bM7AKDauPg8yAUhSsyT7e2D2dKuFndnEZbMjBmxbY+jVtwPvS0v
In6Q276IqkySb8UaZcXTV/Bn18YbHjwQUsd8SvJilLCjBsd+vTJwDXvNw/uWaebS
epIpeUBO6RL12xO8GLd5X6DcMK3VZqliODX0Q5Hl1WlORFTnyCOpMFtqBdeKxwF9
8TD9zCm6+7XI7LYdYTBFFvKMydeVB4Zou1f3Yc0oHsUbGQwx65uop4nYdPN1AoA8
VahAe7cZTbyfxNdwKrsFHuyVUg/zjdkldWF67jQBucas0JrjKvQeB7W5pGOjSdcd
Xt6N0BkpYGISuw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:50 2026 by rpki-client