Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: hKcstadVz5bQFJhmJ8zmwfrEnCo+MPIJ0/QfwQ+pcME=
Subject key identifier: 2F:B6:AE:70:74:44:BF:F6:6A:4D:FC:6B:B1:05:EA:44:07:EB:31:3A
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 019CAB3455C6E0D93F1CCB3EBA180E27A740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 1586
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: KKVyj0IwO44ZgmRW05ERxPaT1D4h7Htgq6E78we3uY4=)
2: LUqVoC445OwuMDQ02JnxJokVy0c.roa (hash: sTwGxPhTJ/H24QIf8MGKPbk8zrx1fr0jAaNaXKcuA+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:55:c6:e0:d9:3f:1c:cb:3e:ba:18:0e:27:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=2fb6ae707444bff66a4dfc6bb105ea4407eb313a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:ea:d1:91:42:fc:f9:17:59:3d:58:f7:a3:
4a:77:98:ca:be:16:fb:83:98:a7:13:aa:5b:f4:e8:
78:1b:19:70:a4:97:a8:de:a2:52:cf:d7:98:89:2f:
a5:53:3a:8d:2c:35:5c:d8:9e:df:4d:fd:e0:2a:af:
fb:9a:2b:89:73:03:18:b5:e6:3c:0f:7d:ea:85:8e:
85:57:fb:f0:87:c2:fd:ba:c9:00:cc:39:f9:3e:d8:
36:fa:a3:64:22:95:ec:50:98:93:2f:c0:64:80:c7:
2f:33:0a:a4:9b:6f:bb:2e:3d:ae:21:08:1b:40:5c:
09:9c:ca:3a:e3:0e:20:90:94:77:db:ab:86:09:e7:
d5:2d:82:d1:f7:fb:dd:71:42:43:31:1c:62:5b:0b:
0b:46:91:57:27:d6:c5:de:fb:9d:54:5b:92:21:28:
b9:6c:a5:75:9f:57:62:c7:62:33:b6:70:d9:03:97:
81:0a:bb:f2:2d:d3:0d:f8:84:65:44:74:c0:92:f6:
f1:7e:bc:c7:fe:1e:54:24:8d:c5:80:33:b8:f9:96:
f2:9c:18:87:c9:99:aa:a9:21:4d:1f:45:b3:1b:4a:
e7:9c:41:69:23:24:79:39:f8:d9:0b:47:99:d2:22:
25:34:5f:8a:77:aa:10:cb:4b:2c:28:b2:c7:69:00:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B6:AE:70:74:44:BF:F6:6A:4D:FC:6B:B1:05:EA:44:07:EB:31:3A
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:b9:07:52:67:b3:eb:ff:c4:b8:aa:64:d0:9b:1f:31:2d:
4c:b0:6c:90:b6:1a:4a:d8:ad:a1:59:e9:12:31:74:16:95:75:
1c:31:cd:30:2a:6e:e3:25:7e:c3:f4:0e:dd:0e:55:9c:9a:60:
18:5c:7b:69:85:3f:b3:92:38:b5:db:6e:ce:06:4c:f4:aa:ab:
3e:ba:59:f5:43:86:ca:6b:09:48:d1:ef:b5:7c:5a:a5:48:c6:
02:d7:9d:d1:03:ca:1b:f8:bd:44:d1:b8:2a:e0:07:33:de:0f:
2d:af:e8:5a:ab:92:2f:12:eb:05:97:9c:52:40:6c:d7:7a:bd:
56:4a:a6:59:82:e2:a1:8b:e2:a4:4f:9b:d0:ed:16:61:7d:51:
ce:9e:e4:ce:f3:56:bc:8b:3b:13:1a:1b:15:44:b6:be:6c:c4:
b2:d2:7c:20:c8:5b:ae:36:2b:9b:cd:ba:42:9e:31:3b:4a:f2:
af:44:e2:d0:59:f6:1c:98:67:a7:ff:e9:98:fe:9f:e8:ae:e0:
df:df:f6:1a:2d:5f:9f:f5:10:d6:ee:d4:26:05:08:f9:f2:4a:
aa:42:ce:6e:6d:1e:b5:8f:dd:4f:36:c7:f1:9c:ff:d6:17:c0:
31:65:b0:81:4d:9b:30:70:44:d7:5b:47:f0:82:dd:54:1d:a4:
69:7a:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:33 2026 by rpki-client