Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: uvkYakms2Difx4eYlz39g22A8NRn53T2MlDrPGxiKBc=
Subject key identifier: 26:56:92:45:76:D3:01:D2:C9:92:0C:8F:D3:67:BE:0C:BF:45:E4:F6
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019F943709657A1E0F1360C689D85ADD128C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 13:01:02 +0000
Manifest this update: Fri 24 Jul 2026 13:01:02 +0000
Manifest next update: Sat 25 Jul 2026 13:01:02 +0000
Files and hashes: 1: NloTUsOLqpfTu8IkwsLGe53OKiM.roa (hash: Txhri0SKfqPnlod2zhIYj6wgCSRlDYus6zsHb7gohlo=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: JFo/9B7mgyAWE2iUvknls4ZNBoox2a3G1GxfGKYa0oA=)
3: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (hash: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:09:65:7a:1e:0f:13:60:c6:89:d8:5a:dd:12:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jul 24 13:01:02 2026 GMT
Not After : Jul 25 13:01:02 2026 GMT
Subject: CN=2656924576d301d2c9920c8fd367be0cbf45e4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:15:e7:df:7e:79:0b:ef:88:74:c1:c6:1b:
01:8d:32:e9:58:6c:71:3c:f1:9f:c5:c3:8b:fc:18:
a7:db:8e:14:dd:c3:c6:e3:22:7e:2e:cc:21:d2:e9:
4e:92:1d:1b:40:76:7c:82:cf:6b:6f:6b:ad:68:36:
21:63:2c:c7:e2:a9:b2:35:c5:68:6f:e7:fb:48:36:
1e:21:9d:43:c1:4a:9d:33:3b:41:69:33:3e:e4:e5:
61:ed:23:67:1d:00:a8:24:fb:33:86:77:c3:ef:a2:
49:33:24:9e:e3:c4:dd:fc:96:73:80:51:00:81:5d:
9d:18:a8:fd:aa:d3:f4:da:b9:1b:55:b5:e3:ce:da:
b3:1c:1d:6b:e8:14:79:b3:b5:3a:fb:ae:26:5c:b3:
70:08:a9:1b:42:24:51:36:b3:f4:0c:d8:49:f1:b4:
df:cf:fa:80:a7:c4:87:bd:85:99:e1:e2:1b:b7:36:
b2:cb:6f:ab:1a:c8:2f:d8:f1:f1:f5:68:87:e6:40:
10:82:12:82:d9:12:5b:4a:ab:8c:b1:bb:1f:a4:94:
61:70:68:75:78:75:bb:80:f1:a7:fc:30:5f:db:85:
b5:25:49:8e:0f:9c:a2:ac:75:6e:ac:43:42:fc:a8:
c7:b7:9f:5c:a6:cb:46:fc:b2:d9:33:48:bf:3e:b4:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:92:45:76:D3:01:D2:C9:92:0C:8F:D3:67:BE:0C:BF:45:E4:F6
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:65:42:19:bb:f5:04:96:03:2e:d2:87:67:3e:14:3c:a1:72:
c9:2c:dc:d9:dd:e4:bf:df:b0:af:9c:f4:e9:e8:6b:1a:f6:47:
88:a0:4a:4f:90:54:5c:09:fd:cc:64:93:41:8b:e8:4e:f3:54:
d8:d2:58:65:80:91:ac:6e:cb:8d:81:63:4b:e8:c2:1b:23:be:
d6:c0:23:bf:13:8d:53:b7:de:a8:cf:d8:1a:ce:e9:32:3c:65:
3e:94:f8:68:30:9f:84:23:ed:b3:0e:99:23:14:b5:38:64:32:
9a:3c:2a:08:f9:d2:93:9f:f2:77:a4:7a:64:41:b0:cf:6d:17:
5b:f0:1d:ff:91:21:c0:1c:6d:3a:77:12:42:12:60:20:65:68:
dd:fc:48:90:05:02:3a:fa:13:65:f1:f7:d1:1c:10:56:8c:5f:
91:2f:25:4d:a1:42:6b:53:42:96:87:96:30:a3:26:96:da:fb:
ca:fb:66:0d:a6:2a:a1:e0:7d:6e:d7:52:95:4b:f4:32:e4:3c:
8e:0e:2c:f7:6d:99:59:86:47:bb:f8:da:16:b9:c3:72:90:5f:
94:c3:be:c2:a6:8c:de:0b:5d:87:70:7b:4b:5e:10:c9:2a:c2:
dd:90:2a:d4:bb:8e:21:a2:8a:94:24:41:a3:6f:3f:6d:58:64:
ac:d1:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:24 2026 by rpki-client