Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: bcjiKWKDRxJlN7dF67U/Y2Xq0J/yp+l/a2koYSTHzmw=
Subject key identifier: 53:5D:73:EF:07:40:0C:0B:1F:89:17:1C:4F:00:A1:13:6A:F5:2A:44
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 019D39407CA435BBA75BB9B7022D2AFF070D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 0746
Signing time: Sun 29 Mar 2026 11:00:20 +0000
Manifest this update: Sun 29 Mar 2026 11:00:20 +0000
Manifest next update: Mon 30 Mar 2026 11:00:20 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: 3avLatPz8WmZRYm/veP5DIfEEgOCViT2wj/jYstUimc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7c:a4:35:bb:a7:5b:b9:b7:02:2d:2a:ff:07:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Mar 29 11:00:20 2026 GMT
Not After : Mar 30 11:00:20 2026 GMT
Subject: CN=535d73ef07400c0b1f89171c4f00a1136af52a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:48:03:70:be:9a:64:16:78:b9:78:18:66:
26:58:b3:c1:fa:48:d7:b4:1f:17:e0:c2:83:96:f5:
52:55:cc:3f:f9:ee:d6:88:00:85:28:08:49:85:ba:
5b:97:30:db:bf:fd:4a:e0:1d:4a:73:b4:f8:00:66:
07:3b:5b:cf:7e:39:61:30:0d:1a:20:63:07:19:65:
37:cd:9b:e5:c6:b6:bf:50:49:cc:b2:21:c3:83:39:
11:96:fd:48:b9:9a:78:b3:52:9f:b8:ac:74:ca:89:
e0:c8:26:92:f7:3e:e1:b8:7d:81:0e:aa:76:cc:b3:
f1:33:f1:4c:92:f2:86:8a:08:c8:ed:7c:58:d9:ea:
3b:5a:73:a0:79:da:f3:35:8c:1c:83:68:70:fa:d7:
42:1e:7e:00:dc:db:73:c0:22:68:52:05:4a:92:e0:
d9:9c:63:d9:e4:fe:bb:5e:ff:eb:1d:17:aa:b0:95:
50:46:c7:c9:e1:af:1f:ec:74:04:c8:6f:27:8e:75:
8d:0f:0c:bd:e8:28:43:7d:a2:a3:30:0c:5f:62:31:
6b:02:62:7c:21:12:f9:b5:23:13:81:13:bc:97:77:
fa:e0:9a:20:8f:a5:24:54:19:3a:8b:59:13:d8:8a:
b1:2f:86:d9:6c:66:01:41:3b:a6:83:62:42:65:6c:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:73:EF:07:40:0C:0B:1F:89:17:1C:4F:00:A1:13:6A:F5:2A:44
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5b:65:77:55:bb:5e:6b:19:c4:d9:37:b3:9d:2c:fb:b6:19:
43:03:14:93:85:6d:c7:d7:e5:03:d8:99:4a:f9:2d:40:50:c4:
31:5c:06:f6:af:a7:32:28:d6:66:66:31:9c:04:44:92:ef:f8:
29:11:fa:65:8c:f9:6f:6f:99:92:98:f4:2c:bf:ca:c8:cd:76:
b1:2d:5b:34:f4:33:d1:cc:aa:a6:28:1f:6d:f5:4c:18:dd:a1:
bb:80:fe:b6:4b:ee:77:28:03:94:46:fc:6e:15:55:55:4e:78:
ae:b3:6f:83:d5:97:e6:0a:fa:3e:c0:a4:cd:d0:3d:25:3c:cc:
44:35:a3:60:47:5f:f6:e5:2c:c4:77:c6:18:c7:4b:09:d6:ef:
21:e7:f2:f1:12:60:53:80:7d:96:4d:bd:3b:74:81:2e:9b:6e:
3d:de:cc:6e:7d:5c:65:3b:15:86:c7:93:52:fb:69:01:68:81:
62:31:d2:cc:83:6e:73:75:a8:c6:57:8b:48:bd:ff:12:68:2b:
12:31:ad:b7:41:fb:b6:d1:df:cf:e2:9a:f9:69:c3:47:ef:9f:
35:cf:ac:c8:36:10:18:18:aa:0f:b4:f6:13:ae:6c:8b:c7:6e:
55:0c:1b:b3:a7:0f:5f:6a:b8:31:24:f3:1d:d3:5b:89:da:34:
73:22:8f:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHykNbunW7m3Ai0q/wcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTAwOGZmNjZkNDU2ZTQzZWZkYzExOTZiMTdkODQ0M2Qy
Mzk3ZjAwHhcNMjYwMzI5MTEwMDIwWhcNMjYwMzMwMTEwMDIwWjAzMTEwLwYDVQQD
Eyg1MzVkNzNlZjA3NDAwYzBiMWY4OTE3MWM0ZjAwYTExMzZhZjUyYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPtIA3C+mmQWeLl4GGYmWLPB+kjX
tB8X4MKDlvVSVcw/+e7WiACFKAhJhbpblzDbv/1K4B1Kc7T4AGYHO1vPfjlhMA0a
IGMHGWU3zZvlxra/UEnMsiHDgzkRlv1IuZp4s1KfuKx0yongyCaS9z7huH2BDqp2
zLPxM/FMkvKGigjI7XxY2eo7WnOgedrzNYwcg2hw+tdCHn4A3NtzwCJoUgVKkuDZ
nGPZ5P67Xv/rHReqsJVQRsfJ4a8f7HQEyG8njnWNDwy96ChDfaKjMAxfYjFrAmJ8
IRL5tSMTgRO8l3f64Jogj6UkVBk6i1kT2IqxL4bZbGYBQTumg2JCZWxQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNdc+8HQAwLH4kXHE8AoRNq9SpEMB8GA1UdIwQY
MBaAFCWgCP9m1FbkPv3BGWsX2EQ9I5fwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lM2I0ZDQtMjUwMS00YTVlLTlmMjQt
ZmJmZWY3NDYxMDEwLzEvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lM2I0ZDQtMjUwMS00YTVlLTlmMjQtZmJmZWY3NDYxMDEw
LzEvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVtld1W7
XmsZxNk3s50s+7YZQwMUk4Vtx9flA9iZSvktQFDEMVwG9q+nMijWZmYxnAREku/4
KRH6ZYz5b2+Zkpj0LL/KyM12sS1bNPQz0cyqpigfbfVMGN2hu4D+tkvudygDlEb8
bhVVVU54rrNvg9WX5gr6PsCkzdA9JTzMRDWjYEdf9uUsxHfGGMdLCdbvIefy8RJg
U4B9lk29O3SBLptuPd7Mbn1cZTsVhseTUvtpAWiBYjHSzINuc3WoxleLSL3/Emgr
EjGtt0H7ttHfz+Ka+WnDR++fNc+syDYQGBiqD7T2E65si8duVQwbs6cPX2q4MSTz
HdNbido0cyKPxw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:24 2026 by rpki-client