Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: bDCuz4diVEosI0HWUjVe+k4MomJccDC7fKVok02d7ro=
Subject key identifier: B7:D8:AD:AB:F3:D6:FD:9E:EC:16:40:1B:27:03:79:9F:76:C2:32:7F
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 01A15B1DDD259FD97082A393BDFC9E9E33DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 0DE7
Signing time: Tue 20 Oct 2026 21:00:46 +0000
Manifest this update: Tue 20 Oct 2026 21:00:46 +0000
Manifest next update: Wed 21 Oct 2026 21:00:46 +0000
Files and hashes: 1: Du-XM-c7cfjHmKd00CKR9makRlg.roa (hash: bZdNBjpYg86yMRtuooKH77vDZynRPwu50M4bVcyHluQ=)
2: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: hkXo8ECTJ53P8x7selk1kgWIAfVPaLT35PugPte5N90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1d:dd:25:9f:d9:70:82:a3:93:bd:fc:9e:9e:33:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Oct 20 21:00:46 2026 GMT
Not After : Oct 21 21:00:46 2026 GMT
Subject: CN=b7d8adabf3d6fd9eec16401b2703799f76c2327f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:b0:d4:f8:5a:e3:0a:90:f9:79:6d:61:ff:
5a:9c:c8:77:33:87:2d:ce:ec:f6:7a:cf:04:b9:d5:
8c:dc:72:66:e7:f8:15:24:cb:7d:18:03:2d:b6:33:
52:a6:03:5b:03:bf:e0:55:d2:42:a1:19:05:11:7f:
39:ce:b6:64:3d:23:e0:d1:60:26:08:9b:e6:7f:d0:
12:fb:e6:c9:64:9d:b0:26:b1:b7:61:bb:b3:87:3d:
0a:1f:6f:c8:f9:fc:74:51:c4:ed:e7:7e:98:87:31:
a6:5a:6d:62:b0:6d:86:4f:e3:00:59:63:b8:d8:a3:
70:34:99:b5:98:21:04:6c:8e:7e:b8:c6:7a:db:76:
b2:9a:63:bc:35:19:e7:b1:74:0b:b9:03:8e:24:d7:
6f:dc:8a:94:f3:8b:03:67:ce:93:02:68:28:3d:ec:
01:a1:f7:e4:6a:e1:1b:2f:54:ed:bd:19:b2:bf:4e:
a9:3e:7c:14:b0:39:97:35:50:b5:87:a3:4b:fc:79:
f7:5c:be:68:c6:78:0d:6d:c0:d2:b3:d2:06:77:d2:
c1:ea:f2:36:e3:7b:13:fe:54:bc:28:17:c8:e4:c0:
2f:52:f6:1d:0d:05:45:28:e3:6f:12:d1:ad:97:0b:
e5:f2:89:cc:16:c2:d3:29:8f:a5:d1:c2:0a:eb:7d:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:AD:AB:F3:D6:FD:9E:EC:16:40:1B:27:03:79:9F:76:C2:32:7F
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:de:ec:ee:b9:94:ff:f4:32:ce:93:2f:e2:d0:d1:39:81:98:
09:10:4e:1f:e1:a2:44:35:e5:bf:69:24:15:15:82:55:97:23:
4a:84:c0:17:5b:94:7d:ce:12:63:10:a6:03:ed:41:ac:a1:b2:
f6:b6:cb:bd:04:28:ca:59:7a:a1:b4:1b:9d:94:7a:ef:d2:42:
e5:3d:0e:dc:df:01:e7:01:48:7a:d2:5d:0a:d2:17:c0:0d:5c:
36:79:96:94:95:d3:eb:50:44:7c:3f:ee:eb:4e:91:04:fd:72:
d2:33:e9:3b:5d:4b:b8:56:08:fe:78:fa:3e:d6:72:98:ff:76:
9a:33:ae:b0:6d:01:cd:b4:93:ac:2d:3a:c2:65:dc:6e:14:18:
f8:73:96:30:b1:33:f0:82:63:b2:f1:02:7c:54:df:73:68:1e:
01:63:0b:14:e3:e4:c0:22:21:5a:68:18:ae:5c:bc:96:7d:b4:
61:16:7a:4c:6c:3f:77:ed:47:c6:95:55:99:e6:99:98:ae:b8:
b2:50:cd:b9:8f:a0:0a:49:eb:4b:5b:be:c5:35:40:84:2b:e0:
12:ab:99:f3:28:25:6d:28:1e:ab:5e:f9:25:0b:60:de:14:ec:
f3:b2:55:4d:bd:e0:da:d8:50:5a:ac:cf:04:1d:8c:44:07:b0:
e9:52:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:37:30 2026 by rpki-client