Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: ehyVeWddBTdb1jBVmsVqw0YJa+JlPRZ6MBuriaew13I=
Subject key identifier: 80:4B:51:1A:D3:1C:1D:84:FC:85:E6:35:97:3B:A6:16:3B:C8:06:A7
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019F9248A73D814CB81BFA234E267DDDCC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 04:01:02 +0000
Manifest this update: Fri 24 Jul 2026 04:01:02 +0000
Manifest next update: Sat 25 Jul 2026 04:01:02 +0000
Files and hashes: 1: NloTUsOLqpfTu8IkwsLGe53OKiM.roa (hash: Txhri0SKfqPnlod2zhIYj6wgCSRlDYus6zsHb7gohlo=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: D+w4JG8y/DWmXeLQKaByxJqw5FBgGNKAkdn/EpbdkiI=)
3: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (hash: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:a7:3d:81:4c:b8:1b:fa:23:4e:26:7d:dd:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jul 24 04:01:02 2026 GMT
Not After : Jul 25 04:01:02 2026 GMT
Subject: CN=804b511ad31c1d84fc85e635973ba6163bc806a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:d4:be:1d:41:e9:20:7a:36:4f:50:c0:50:
58:73:33:97:03:a4:10:e0:0a:cb:ae:8c:7f:f3:8d:
58:6b:52:9f:92:82:01:9e:97:c2:bb:63:e6:c0:7b:
b6:56:3e:34:2c:79:bc:ba:c9:30:9b:db:ae:70:ff:
9f:9a:95:f4:fa:4e:1e:4d:51:f3:02:71:19:0c:c0:
27:76:32:90:93:12:ec:f6:71:d2:b1:b7:fa:a5:c6:
24:87:73:09:c8:10:a3:c5:f3:05:59:59:a8:1b:a7:
c0:7c:38:6b:9b:1c:5f:0e:18:89:14:e5:9a:a2:ac:
f5:c2:69:9d:bb:4b:3a:be:77:de:1b:98:c8:8b:6a:
d8:9f:b5:f4:75:fd:ee:7f:37:0c:96:8b:b2:74:2b:
92:33:c6:63:ff:3d:14:48:d1:af:8b:13:d1:33:08:
4b:aa:e1:ad:14:19:22:26:a9:b6:a3:df:e3:09:5b:
d9:46:44:02:4f:9d:d3:e1:80:ad:d4:b8:1a:28:3a:
b1:a6:d2:be:45:3d:f3:df:4a:d4:69:cb:64:a4:73:
ab:25:3c:4a:3f:f7:2e:77:20:a0:b7:f3:a0:21:f7:
8a:10:89:ab:ff:92:5a:41:b4:12:e9:1e:a0:ea:c6:
b5:27:71:6d:a8:38:b8:86:46:51:61:45:9b:28:9f:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:51:1A:D3:1C:1D:84:FC:85:E6:35:97:3B:A6:16:3B:C8:06:A7
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:0a:ba:95:5e:9a:ce:c7:23:bc:91:08:44:56:58:a4:43:
06:1e:a9:31:38:f9:62:29:e1:56:7c:f5:90:7f:68:f9:56:9a:
db:53:fa:f7:f0:34:6b:f1:c2:08:fe:82:45:01:66:8c:b2:d8:
7e:3a:3a:31:1e:10:d1:ff:d6:77:e2:6d:d3:50:83:40:3c:c5:
17:31:ec:85:17:8e:3b:cf:d3:d4:19:1d:dd:dd:a2:bf:e1:99:
50:f0:77:ae:05:ff:f6:76:d5:a2:23:c6:a1:96:f2:bc:9f:66:
3c:22:27:7f:e2:e5:b5:93:7e:c9:7c:5f:86:e0:66:ec:37:55:
10:b3:09:c1:ba:57:45:98:1a:d9:dc:68:da:70:dc:54:d6:df:
ea:75:b0:73:e0:1f:23:8d:b9:c4:2d:4a:f6:f9:f3:d0:38:5e:
bb:e4:1d:0a:6e:e1:83:aa:ee:c4:f4:24:82:ca:3f:d5:74:31:
ea:28:44:61:8a:bd:bb:26:6b:09:0e:d2:8a:79:07:c9:78:80:
f4:1b:80:c0:90:f5:48:0a:29:4b:2a:16:a0:65:31:68:a0:d8:
b9:57:f3:f3:c0:2d:11:5b:c1:87:05:d7:f7:d2:a1:9b:34:8b:
90:0b:65:34:f1:d6:d8:99:9e:8c:f8:e7:6c:9d:f9:75:ce:d9:
90:82:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:14 2026 by rpki-client