Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: EqfK3ybDmIlXFa0LDyqsM0jsdXwel6McfvZ/iZGLSjs=
Subject key identifier: 2D:79:F5:E9:D7:8A:06:E8:FA:7B:C2:1B:B7:4F:93:73:40:1E:FC:33
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 019F954934DD5417E235784AC3129997F7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 0CFC
Signing time: Fri 24 Jul 2026 18:00:30 +0000
Manifest this update: Fri 24 Jul 2026 18:00:30 +0000
Manifest next update: Sat 25 Jul 2026 18:00:30 +0000
Files and hashes: 1: Du-XM-c7cfjHmKd00CKR9makRlg.roa (hash: bZdNBjpYg86yMRtuooKH77vDZynRPwu50M4bVcyHluQ=)
2: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: 7zBBYRr9aHIxc/Kv4bQrM4HABb1EIzEmjoveY5gTyoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:34:dd:54:17:e2:35:78:4a:c3:12:99:97:f7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Jul 24 18:00:30 2026 GMT
Not After : Jul 25 18:00:30 2026 GMT
Subject: CN=2d79f5e9d78a06e8fa7bc21bb74f9373401efc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:d2:5a:4e:ba:dc:06:a7:73:e2:e7:7c:27:
8e:d0:93:6f:08:ce:05:c0:21:b9:46:48:ca:da:e0:
57:79:0f:d4:e3:e8:59:98:95:44:e6:7d:17:d5:c1:
3a:7e:27:2a:6e:7b:cd:64:90:42:10:03:a3:e0:f6:
6a:57:6e:ec:fc:a5:18:38:2c:fa:d4:8c:2d:ff:df:
27:06:c1:d9:04:50:ee:40:59:7d:97:44:0c:eb:ec:
d0:c2:95:6d:90:bd:12:c2:ed:dc:0c:16:9e:3b:dd:
5b:5a:69:d7:4b:4c:12:7b:6f:f9:44:6b:36:fc:67:
5d:07:90:fa:ff:30:5a:fa:89:36:25:fd:3b:d8:12:
ec:7e:a1:a7:d3:af:cc:3e:dd:26:bf:e8:6e:89:09:
a2:be:0b:46:a5:99:b2:c8:7a:5a:0b:52:02:29:fd:
8e:fc:74:e4:6c:23:70:7f:ce:71:62:01:98:17:31:
e9:9d:b1:30:89:1d:b7:80:23:2d:1f:a0:b4:05:f4:
b0:29:75:3f:75:fb:2f:53:61:9e:2d:12:d2:90:0d:
d1:f7:f9:17:6d:04:1b:04:f7:00:27:8d:79:90:00:
e7:2c:9e:6c:98:2d:d8:79:07:bd:1a:3a:d5:92:cc:
0b:85:3e:b6:78:48:67:0d:af:bb:b5:10:22:13:dc:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:F5:E9:D7:8A:06:E8:FA:7B:C2:1B:B7:4F:93:73:40:1E:FC:33
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1f:da:35:95:87:1b:a5:ae:38:af:50:38:a9:25:13:e4:da:
bf:bd:65:2b:77:f0:2f:ad:dd:e4:8c:15:84:14:61:70:3e:f9:
59:13:04:7a:f0:78:e6:80:c9:89:21:1d:53:6c:5c:73:f3:3d:
50:c0:a3:cc:db:8d:e0:a4:52:23:83:14:f3:00:a9:fa:d6:0b:
2e:89:b0:da:45:33:60:e9:10:9f:89:66:0b:49:68:44:d9:23:
af:27:98:52:f3:fc:ca:18:c3:25:ee:2b:0e:7c:30:9d:c5:70:
7f:f8:a7:69:ec:ee:bb:bf:aa:8a:7a:52:1e:b9:66:44:45:c4:
62:a0:98:dd:49:88:88:7a:97:b0:d1:56:e0:dc:b2:5a:b0:13:
3f:62:a4:00:3c:c0:da:37:f5:29:1c:c1:a5:12:68:1d:ee:63:
8e:d5:d4:00:43:3c:22:a7:5c:aa:54:95:95:e2:06:4e:a2:05:
d8:4d:95:d1:76:30:65:22:b3:e3:5f:af:26:e1:26:b2:ce:a7:
b2:fd:82:93:f9:ab:08:bf:95:52:ff:6d:a7:d1:97:83:f4:8c:
f0:b9:30:16:5d:76:ba:49:2e:4f:2a:4b:cf:2a:02:3f:d4:00:
7b:4b:97:e3:75:11:52:46:9a:de:82:f5:27:e3:69:26:ed:63:
49:2a:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:15:58 2026 by rpki-client