Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: EvGkUDyrepfxtgxMdq8UwxpEI6eN6LCrINpIoC7AyEw=
Subject key identifier: 5C:CB:70:C0:B0:45:36:A8:53:2E:2A:77:C0:87:1E:7D:EC:28:61:58
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 01A18299A350F34AFC5B9FC48E9876AC524E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 097F
Signing time: Wed 28 Oct 2026 13:01:09 +0000
Manifest this update: Wed 28 Oct 2026 13:01:09 +0000
Manifest next update: Thu 29 Oct 2026 13:01:09 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: oJvkItiLJLFNy/PzPI/UdjKZa3tnI+jqjyhDSTPfmdU=)
2: wQM8PsfLXNDfnBUjBFOp6hyCGrQ.roa (hash: d3o4lSseIgZGKcysxDl44ESu+XXxyOc/mIb2gK0UDHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:a3:50:f3:4a:fc:5b:9f:c4:8e:98:76:ac:52:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Oct 28 13:01:09 2026 GMT
Not After : Oct 29 13:01:09 2026 GMT
Subject: CN=5ccb70c0b04536a8532e2a77c0871e7dec286158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:f8:f0:00:10:68:11:e6:a0:39:a2:5a:cd:
df:6d:66:b3:0b:30:c1:88:56:18:b4:20:fb:ca:29:
ef:6a:59:a1:ad:c9:38:7c:e4:e0:48:d6:c2:9c:ff:
9d:2d:6d:6e:54:18:53:8a:9d:3d:f2:f9:14:b4:c8:
02:34:5f:68:72:1a:ee:06:32:c9:7c:2e:02:07:40:
47:31:76:14:bd:a9:6d:64:41:a8:b3:5d:24:b7:7d:
72:3e:74:b4:01:12:39:51:32:c0:83:d9:36:e7:18:
07:f4:9b:a4:d5:c7:ce:5f:72:0a:33:de:ee:63:b5:
d0:6e:74:c3:17:d0:b9:a2:06:29:d8:c1:5b:1c:27:
85:46:2c:1e:c9:2b:82:9b:ba:de:43:18:5e:35:78:
20:bc:d0:d0:08:83:a9:62:7c:a9:81:ed:c5:42:56:
23:73:64:3f:e7:2d:60:01:84:63:5d:05:5d:08:7a:
61:06:77:d8:78:27:f3:d4:9b:11:86:c4:8b:f5:81:
97:4e:19:3f:0a:68:e7:6f:3b:aa:a9:5e:6b:93:bb:
7b:37:cc:26:fe:5c:18:7c:44:8d:19:1c:4e:47:8b:
ae:51:fd:1d:d7:d4:8e:e1:69:22:35:3b:52:de:a2:
36:7a:b0:f4:a0:5f:cb:57:b9:ae:5a:c8:3b:c5:5c:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:70:C0:B0:45:36:A8:53:2E:2A:77:C0:87:1E:7D:EC:28:61:58
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3d:3d:f1:76:e3:47:85:ba:17:a7:c1:6b:2b:fb:ed:f0:cf:
79:a7:eb:43:77:86:56:ed:7d:92:c2:0a:cf:dc:d9:47:be:e3:
0e:cf:f3:55:60:db:11:a3:d0:2c:e6:98:e6:ac:5f:56:f2:16:
21:d7:0f:02:75:9a:07:c0:37:42:6e:99:08:3c:ee:15:17:6c:
47:d0:a5:40:ec:28:9d:48:c8:af:08:a0:aa:4f:0c:16:7f:f5:
02:9d:2c:88:55:b0:e6:8e:8c:9a:9c:e5:3d:bf:98:a9:cf:bb:
c7:78:af:e8:9d:e8:df:c4:54:d6:2f:94:fd:5d:7c:54:a0:10:
34:6d:ea:c2:09:e7:e2:bb:e2:8a:ed:21:b4:bb:40:86:dd:e6:
f4:29:5f:2d:b5:72:a0:82:c1:30:57:28:fa:71:31:29:06:01:
70:19:bf:02:10:70:d7:be:2a:dd:9f:bb:ff:be:89:70:d2:73:
ba:c1:2b:bf:15:bf:22:c3:c4:23:fa:fa:a8:97:45:d4:07:87:
4a:2d:a3:64:fa:34:72:fb:b3:9d:83:77:86:4e:a5:97:44:4c:
1f:60:85:be:65:59:e1:43:da:06:30:b7:f7:7d:e1:da:09:cc:
93:cd:1d:f1:fe:bd:18:ae:da:af:53:5c:69:12:53:b7:b6:e1:
7c:7a:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:27:42 2026 by rpki-client