Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: wiFZeCR85Isrf7Q+mthhQuuptHCslmWbzVD07CBptOc=
Subject key identifier: 56:6A:58:46:AF:4E:37:9D:F6:66:C6:AC:AC:72:8A:25:7B:4B:5B:9F
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 01A0EBF8DA30760AE7710C0D76FD1EFEAE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1A84
Signing time: Tue 29 Sep 2026 07:02:29 +0000
Manifest this update: Tue 29 Sep 2026 07:02:29 +0000
Manifest next update: Wed 30 Sep 2026 07:02:29 +0000
Files and hashes: 1: NloTUsOLqpfTu8IkwsLGe53OKiM.roa (hash: Txhri0SKfqPnlod2zhIYj6wgCSRlDYus6zsHb7gohlo=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: dSkqqTm0181qNgTfhIdWU51UtGPDbtL9MfKoCyhIknk=)
3: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (hash: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f8:da:30:76:0a:e7:71:0c:0d:76:fd:1e:fe:ae:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Sep 29 07:02:29 2026 GMT
Not After : Sep 30 07:02:29 2026 GMT
Subject: CN=566a5846af4e379df666c6acac728a257b4b5b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:d6:08:69:66:0d:0c:e3:da:23:e1:2e:f7:
1e:a8:7d:13:4c:5c:9e:9a:27:9b:55:a2:3b:18:9e:
44:9a:8a:1a:b4:9c:cb:e3:f2:1c:fd:9b:11:a7:69:
92:45:8a:3d:6d:61:d7:c2:21:48:3a:af:2b:93:0b:
ff:22:28:37:c3:10:d8:4e:37:e0:3c:f0:cb:52:a4:
a4:7d:35:30:94:6a:d7:b1:7a:cb:70:fa:38:1f:c8:
29:32:6f:3c:6e:fd:36:f7:9a:01:42:64:56:f8:92:
53:9f:6a:b8:2c:d9:84:5b:2e:49:2f:ef:8a:a2:75:
e9:83:d4:18:91:6e:90:82:d0:82:cf:ee:59:d8:64:
1a:1c:f4:7e:48:65:fc:d7:ae:6b:cb:4e:80:74:fc:
de:40:5f:b7:bf:45:fb:45:8a:75:df:98:49:ce:ad:
54:5e:ea:f8:bc:44:cf:3b:30:0c:c5:f6:84:cc:19:
4c:87:73:b6:6b:99:c1:05:58:a1:80:d8:7f:e0:1b:
10:62:91:9e:ae:fd:a8:a7:40:d6:5e:cd:b9:b9:0f:
5f:6e:0c:fe:bb:14:ea:71:d9:80:46:ee:1c:6b:03:
ac:d4:a4:3f:d4:10:fa:fe:70:15:30:77:83:55:e5:
80:ef:5e:67:08:0d:db:d8:22:75:49:62:8c:21:21:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:58:46:AF:4E:37:9D:F6:66:C6:AC:AC:72:8A:25:7B:4B:5B:9F
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1c:0c:59:3c:33:1c:91:1d:84:df:47:92:90:8d:a1:db:0f:
a6:a7:04:c8:f0:f6:d7:4f:be:56:09:cc:98:90:e2:f3:ba:19:
18:73:31:0a:95:14:74:88:99:2e:0f:98:8a:88:46:50:02:76:
b3:5e:cb:f7:b4:0c:f0:7c:9c:46:37:3f:b5:c9:9d:ee:82:59:
e5:07:c4:d9:7c:bc:87:44:3b:55:31:cb:5f:7b:b0:15:9b:c7:
60:33:c0:78:f6:d6:4b:35:b6:80:c9:16:5e:17:89:02:64:11:
7b:83:38:43:bd:2a:26:cf:d1:bd:f4:d7:dd:70:74:0b:31:75:
18:a9:ab:cb:dd:c2:66:7c:94:e2:c5:a3:66:7a:ce:d0:fa:a6:
ab:5b:95:bc:06:3f:eb:36:32:0b:00:bc:bf:ac:2a:81:65:b2:
ec:f8:34:67:56:85:43:3c:17:3e:fc:43:39:c4:cc:c5:5a:35:
ed:17:44:32:a8:de:8f:89:24:94:89:cc:36:3c:08:fc:e3:3b:
17:c8:dc:86:84:1e:72:92:67:09:d0:d0:ac:98:5e:13:20:dc:
bc:8f:8f:52:c8:cf:c9:a4:17:3d:8a:d4:e9:ae:7b:30:e6:47:
19:b0:60:48:21:9a:53:39:a4:90:f4:fa:9b:79:20:a2:d7:68:
1e:99:cd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:22 2026 by rpki-client