
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
File: jaArHaSqceZbb7m-I6ayCMJcV9g.mft (raw, json)
Hash identifier: lXiplFdU0IvfDd0MoqyQd6huJpZitFQn58lOSVYbP70=
Subject key identifier: D8:6B:30:E8:90:70:89:FE:6A:A5:43:ED:0E:75:10:5B:FF:57:DF:F8
Authority key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
Certificate issuer: /CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8
Certificate serial: 019D26CCB88F7D85E10E24714BFC4197891A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
Manifest number: 0347
Signing time: Wed 25 Mar 2026 21:00:43 +0000
Manifest this update: Wed 25 Mar 2026 21:00:43 +0000
Manifest next update: Thu 26 Mar 2026 21:00:43 +0000
Files and hashes: 1: 6kJ3PBkCijr-A9yGAIjkT0Whnvg.roa (hash: x3SAqnSBCxLWGRsChpxh6sJhNMm33GnNhcEkBfSZ2pk=)
2: jaArHaSqceZbb7m-I6ayCMJcV9g.crl (hash: Csm0bbynz2NSEpRLmURwsv0KXIQFu7JEZclJF3GNtIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b8:8f:7d:85:e1:0e:24:71:4b:fc:41:97:89:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8
Validity
Not Before: Mar 25 21:00:43 2026 GMT
Not After : Mar 26 21:00:43 2026 GMT
Subject: CN=d86b30e8907089fe6aa543ed0e75105bff57dff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:ac:54:84:69:e6:ad:94:81:8e:ec:7e:71:
e9:1c:72:25:12:70:77:f6:be:95:b9:9e:e4:4e:7f:
4d:fa:10:53:ea:1d:d4:cb:74:66:43:0a:b1:ba:bd:
47:46:3e:95:e6:d8:01:d3:86:05:5c:25:5d:90:62:
ec:24:a2:0e:01:1e:0d:6f:1a:55:8d:80:cc:15:e3:
36:02:ce:36:1a:19:76:94:c2:8e:e2:23:78:29:72:
00:36:6a:81:c2:ca:97:d8:6a:a9:de:4c:c7:e3:6a:
fd:8c:27:11:ca:7f:56:0a:38:a7:44:cb:50:b9:a6:
a1:51:39:4a:c6:c1:27:ec:1e:db:b8:37:75:a4:3d:
07:09:df:28:27:e9:03:f0:06:db:a6:9e:39:ec:40:
53:62:b4:4b:a3:43:55:56:97:84:71:3c:c4:4e:15:
5c:2b:df:46:d3:e7:20:1c:ce:ad:9d:08:e8:06:c5:
d9:34:16:ee:cd:09:bc:4f:46:0b:49:4c:3a:5e:dc:
cd:6d:3e:8b:bb:0e:6a:29:eb:eb:a8:86:de:37:47:
5a:cf:c4:0c:0b:44:a3:43:54:8b:7a:05:56:20:a3:
ba:5a:75:dd:60:af:a2:5d:62:60:d9:65:9f:fd:1e:
3b:ec:83:31:37:6e:72:e2:4b:ff:01:c7:14:d1:27:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:30:E8:90:70:89:FE:6A:A5:43:ED:0E:75:10:5B:FF:57:DF:F8
X509v3 Authority Key Identifier:
keyid:8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:be:62:92:47:f1:d1:14:2b:8f:e0:3c:70:17:0e:f1:b7:
db:03:89:cb:02:86:25:e8:ce:24:b6:6e:77:25:b7:03:14:8f:
64:4f:8e:6d:7b:25:f7:a4:63:ba:b3:f0:53:01:c5:57:a4:40:
60:bd:67:28:88:6b:95:58:0c:2e:be:20:99:61:01:48:9e:4f:
e1:9b:85:28:19:ed:93:0e:9e:9e:db:53:5e:f1:2a:3c:05:22:
a2:d2:e0:23:5a:6e:d2:75:7d:0d:a2:64:ff:29:93:d1:4b:fa:
05:a3:14:0b:6d:f3:fb:e4:02:e5:e6:fc:3d:ca:24:bc:8b:76:
ec:4e:a3:f0:11:73:36:82:ce:96:b6:4e:42:f1:03:a7:cc:f1:
fd:fd:36:30:f0:07:f6:25:af:4d:a7:70:ad:51:62:16:23:31:
da:65:ef:c0:a1:aa:6b:55:ad:14:10:1e:91:b0:53:51:c9:c3:
87:d6:68:6d:38:33:fa:57:dc:04:90:63:73:57:6d:26:30:cd:
a3:93:9c:d4:c3:dd:b2:78:80:3a:e9:0c:c1:13:7f:ea:cf:bb:
e8:9d:8f:dd:45:f5:b7:54:f9:39:54:be:a6:7f:95:df:fa:60:
a2:43:d2:db:d9:04:fe:97:36:54:f0:58:d5:8f:3c:be:e5:b6:
7e:9b:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:57 2026 by rpki-client