Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: nGOGPJsj8p4AT0bm/BTCHLa/z46STleYZPQQURjBoQU=
Subject key identifier: 21:38:DD:A3:D8:68:BF:62:AA:B0:6C:08:03:3B:6B:B3:A7:80:A4:A4
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 01A0E0615F2431F08E34475E2D5FD0F22F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 092B
Signing time: Sun 27 Sep 2026 01:01:12 +0000
Manifest this update: Sun 27 Sep 2026 01:01:12 +0000
Manifest next update: Mon 28 Sep 2026 01:01:12 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: 1yUR3Xpjdvq5whaHgj+YdtZ8oNs+B5uPAwYoFrBuQqk=)
2: wQM8PsfLXNDfnBUjBFOp6hyCGrQ.roa (hash: d3o4lSseIgZGKcysxDl44ESu+XXxyOc/mIb2gK0UDHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:5f:24:31:f0:8e:34:47:5e:2d:5f:d0:f2:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Sep 27 01:01:12 2026 GMT
Not After : Sep 28 01:01:12 2026 GMT
Subject: CN=2138dda3d868bf62aab06c08033b6bb3a780a4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:87:12:5e:85:8d:6f:bd:74:5c:31:f1:32:
64:8e:57:04:41:ab:f7:fc:ea:5b:93:8e:bf:cc:4c:
2f:74:a2:f8:49:79:30:ee:ce:11:04:ef:ef:25:c6:
ee:51:7c:c2:ac:8a:20:22:18:65:ae:64:38:12:c0:
0f:b1:03:14:33:f0:8e:60:79:30:4d:2e:e6:eb:d7:
b9:67:42:ad:4c:bf:f7:83:a0:b6:35:f9:6a:29:89:
70:07:0a:cd:c9:a6:f4:b1:0d:38:17:1f:66:47:31:
ef:41:9d:04:a2:bb:08:a9:40:ac:35:9d:12:00:c8:
a1:56:22:df:d7:f3:d5:0c:d2:ef:d9:fe:95:6c:fa:
b2:fd:f9:7c:61:3a:29:57:4c:0c:5f:ba:fc:6e:d8:
30:e8:2e:cb:1b:3b:86:55:da:7f:d3:8b:16:d1:e9:
70:e4:30:b2:fd:8d:2f:ca:c4:6d:71:af:0a:62:b4:
a2:fb:e5:33:0a:4d:22:33:78:a0:ed:68:a5:18:ac:
b6:4a:b7:74:27:e9:77:37:02:ed:59:66:7a:3e:b7:
42:6b:18:95:94:99:9c:70:17:b0:3f:d8:40:f0:21:
a0:c0:f4:28:c4:6b:7a:66:13:b7:5c:30:95:8a:39:
98:de:a7:47:e8:25:5d:c4:e6:af:94:d9:ef:cb:b0:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:DD:A3:D8:68:BF:62:AA:B0:6C:08:03:3B:6B:B3:A7:80:A4:A4
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f4:a6:84:de:06:ba:23:fa:2b:8e:63:99:d6:6f:6a:dc:6c:
f8:f3:11:1a:ab:0e:f3:e3:8a:d4:d0:2f:36:da:7c:fc:1a:24:
e0:3a:ff:9f:77:52:2a:ca:c6:79:80:fb:e2:c8:2d:11:ff:83:
08:18:1b:17:01:ef:ee:5a:1b:59:d6:ec:3a:9b:a6:df:7b:c5:
74:d8:4e:eb:96:bf:78:5c:e5:51:6a:50:7c:5d:3a:bb:60:95:
20:d0:e2:1d:e8:f7:c0:de:01:58:12:7c:28:ff:37:83:27:b0:
fe:68:94:19:eb:bc:27:4f:6c:1e:96:a8:f4:28:31:22:5b:82:
ba:ac:2a:fd:e8:5a:1e:8e:20:0c:b5:d2:93:a7:2c:f2:f1:7a:
ea:96:46:c4:e4:20:72:aa:a1:b9:27:43:db:a0:93:19:14:80:
79:75:9c:81:80:ce:37:e8:c3:26:2f:97:45:f7:bd:3d:7b:5c:
df:76:57:dd:98:71:a6:f7:b1:ee:35:79:94:9f:23:02:09:49:
3f:f6:34:38:5f:1e:80:bd:30:42:61:3c:e6:d7:30:9a:2e:ad:
20:95:c2:11:70:f5:87:24:66:8b:44:d0:84:2f:76:9a:ba:f4:
8f:d9:02:66:50:a5:7c:0d:19:d1:ed:8f:b0:8f:e3:5c:50:8b:
03:8a:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:40:14 2026 by rpki-client