Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: Uu47yRwTskoGMiLa5PzsMKJF6hZNMs+DLbzyoG7w2hk=
Subject key identifier: FB:F4:A5:49:53:25:91:B4:77:CA:F2:A3:5B:8E:3F:49:31:97:86:31
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 019D27DFEEBF39AA2A65A6F239E8198DC16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 073D
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: zskN7qwpI/rZ9UEoDmzv43JB4KVrqbpD1T3u4Q5CkUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ee:bf:39:aa:2a:65:a6:f2:39:e8:19:8d:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=fbf4a549532591b477caf2a35b8e3f4931978631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:dd:d6:85:81:76:9f:aa:3d:66:cc:e7:76:
e5:ad:ac:b0:eb:2c:df:ce:40:ec:08:c1:ec:fd:97:
9f:2e:31:ce:6b:ca:4a:6e:8f:23:00:df:08:02:0a:
28:70:c3:b7:7e:bc:b6:e5:a7:b2:58:c5:70:32:d6:
66:4c:eb:7e:be:0e:62:3e:bb:21:bf:e8:94:e4:91:
d0:34:af:df:d1:dc:f6:43:65:2d:d6:97:ff:77:cd:
23:b8:d8:72:2a:19:27:83:fb:db:2d:33:5c:ad:4f:
39:02:78:a8:a8:67:f4:c4:48:2c:3c:da:88:e3:a8:
28:8b:5e:5f:de:82:03:b7:0d:0f:84:a9:99:d8:80:
b1:34:8e:72:87:e4:5e:21:b7:db:9a:dd:df:ab:d6:
98:d7:49:59:37:bc:01:b7:d9:11:4d:2e:04:9e:82:
cd:42:b3:f8:22:b5:89:19:3f:0d:4c:2a:f5:cf:a2:
88:50:d0:89:90:ac:2d:bb:90:79:02:8a:87:c2:0f:
4d:6a:cc:df:9b:70:78:65:d0:00:12:5c:9a:54:72:
69:f2:ab:68:aa:e7:6b:0c:63:97:25:1c:3d:a4:67:
84:b8:ee:44:ec:32:b2:f1:ea:f4:e8:97:75:ff:5e:
59:bd:1f:37:a8:19:c6:db:85:cf:14:08:61:4a:e7:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F4:A5:49:53:25:91:B4:77:CA:F2:A3:5B:8E:3F:49:31:97:86:31
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:12:09:f0:87:6a:a1:c7:f5:bb:78:c2:26:a9:72:01:f1:4c:
51:d8:54:ae:43:ec:55:67:df:fb:d5:4d:a1:1c:27:2e:a9:76:
2c:ff:c0:3e:d1:0e:66:92:0e:e6:3e:12:de:4d:20:d7:21:35:
22:b7:c4:01:c2:58:ee:de:18:1f:e7:4c:21:e4:c4:42:31:b8:
3b:78:49:e3:be:f8:81:7d:37:ca:4d:cd:0f:cf:18:a8:c5:cb:
9c:e1:90:db:09:6b:82:15:fe:44:24:61:8d:bb:74:03:e1:12:
20:16:23:2d:2d:fa:c6:be:01:e4:b2:7b:c4:56:45:ad:88:3e:
40:dd:4d:d4:69:e0:43:b6:d2:f4:4e:ee:2d:72:c2:2e:5c:c0:
39:8f:72:1c:29:98:d3:30:10:0e:8e:c4:7a:69:0a:b5:f8:95:
1f:67:59:56:6a:57:d5:ce:cb:c2:98:79:95:bd:c2:d9:4a:f7:
e9:7d:31:da:67:0d:d6:fd:b8:b8:9c:60:f8:ff:68:cf:df:c9:
6c:75:c7:2b:60:03:b9:47:80:bf:3c:c5:f6:41:ca:8f:19:fb:
c7:75:c6:b0:e7:fb:30:e8:38:37:98:27:b4:3f:65:eb:36:5c:
30:01:5c:76:99:bc:26:28:be:43:8e:52:9b:9f:1e:1a:aa:df:
8f:d0:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:16 2026 by rpki-client