Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: v6pV3wxXWIegVLZ1rv6C3DqJ+sWlnyfSK3AsF+z34KQ=
Subject key identifier: 7E:C2:55:80:3B:70:91:C8:FD:16:1D:11:02:BB:7F:E3:3C:8C:3F:A2
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 019D36E4BF90E4CC2E89EC77FDAFBB591896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 0BC2
Signing time: Sun 29 Mar 2026 00:00:53 +0000
Manifest this update: Sun 29 Mar 2026 00:00:53 +0000
Manifest next update: Mon 30 Mar 2026 00:00:53 +0000
Files and hashes: 1: Du-XM-c7cfjHmKd00CKR9makRlg.roa (hash: bZdNBjpYg86yMRtuooKH77vDZynRPwu50M4bVcyHluQ=)
2: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: +FyN5wg8p+vWIoxguVb3yRoC2lEeYkDASnfHZl4CSuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:bf:90:e4:cc:2e:89:ec:77:fd:af:bb:59:18:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Mar 29 00:00:53 2026 GMT
Not After : Mar 30 00:00:53 2026 GMT
Subject: CN=7ec255803b7091c8fd161d1102bb7fe33c8c3fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:a0:2d:cc:35:20:78:a7:cf:b7:83:da:cd:
09:a8:19:d4:b8:6e:62:1f:54:c4:5f:57:39:04:32:
77:54:2f:ac:46:cc:7d:34:a0:65:73:cc:e8:2c:55:
49:35:59:83:0d:c2:0f:b3:f2:5f:2c:4c:d7:8c:1b:
6b:fc:c6:1d:f8:0f:00:db:64:fe:cb:13:f1:5c:3d:
fc:d4:1d:a2:f0:42:f5:59:3e:7e:fb:c8:ed:9b:2e:
94:e6:12:13:48:1b:1d:80:04:5b:37:a0:c8:d9:f5:
87:35:81:c9:c4:8c:84:89:d5:ea:53:2f:a8:ce:4c:
d5:46:2f:72:1d:59:4d:73:4e:2c:21:c6:95:d9:7c:
7e:91:7f:7c:b3:31:a8:b4:bb:bd:b7:72:77:f4:e7:
48:ae:cd:08:69:a1:4d:0e:87:77:94:e0:ec:f2:5b:
0a:70:0d:14:c0:94:3b:3d:1d:ee:a9:1e:2f:d3:71:
c7:de:dc:d6:ce:26:41:ff:10:c4:4f:38:5f:14:86:
cd:23:b2:d5:b6:54:d9:3c:55:32:4f:69:88:cf:e3:
08:3f:d0:c6:da:b1:f2:22:9d:b7:5c:b0:85:31:cb:
38:77:2b:1c:e0:b4:8c:68:d5:42:e8:0a:a2:a0:a1:
66:43:35:05:53:27:91:87:12:d0:4d:f2:53:e8:ec:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:55:80:3B:70:91:C8:FD:16:1D:11:02:BB:7F:E3:3C:8C:3F:A2
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:97:40:59:66:9a:70:01:ad:6c:74:6a:00:b5:0c:b4:71:8e:
7b:54:bd:89:fc:7f:67:b3:76:65:da:39:3b:b7:fd:db:92:20:
27:14:40:19:45:95:30:4a:77:0a:9d:4c:75:e5:70:e8:45:d6:
f1:45:78:e8:b7:ad:fe:78:ac:24:19:92:50:35:39:fa:48:6f:
8d:70:c8:0f:87:c9:64:9b:f3:4a:9b:cf:d8:97:9e:48:f3:5d:
71:ba:7f:c3:3b:cd:ee:fb:04:5a:fe:91:47:25:9d:1f:ae:e8:
48:8d:00:e7:24:f7:33:8b:ae:0a:7b:a1:d9:a5:8e:30:dd:6a:
d0:b8:1a:52:06:46:dd:25:49:47:7a:ad:f8:53:3d:22:6c:54:
b4:10:1c:46:c5:4d:70:d0:45:5c:46:69:aa:42:86:c8:7b:65:
57:f5:ce:dc:d7:bb:66:bf:9c:2f:01:fe:84:28:6a:55:6a:0b:
bb:98:39:2c:b3:8f:ec:26:a3:fe:0f:60:d0:da:22:4f:29:39:
2c:c5:20:b4:34:68:71:81:1d:72:86:45:1c:40:80:55:2a:0c:
c5:c7:60:d6:74:f5:b0:0a:ac:3a:5d:b1:2d:96:bc:6f:b6:ed:
52:e4:1c:19:d0:ff:50:2b:ea:2d:78:c9:90:88:cf:a4:82:ec:
e8:f7:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:04 2026 by rpki-client