Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.mft
File: JP35-50qJ0Ol2fCtMyj9cIn7maY.mft (raw, json)
Hash identifier: NKKvCFG2rPA+Em+BnOzIX20CApu/89cHn/eAyqazu7Q=
Subject key identifier: AC:18:0D:DC:40:28:A0:8B:AA:49:96:47:4C:DE:A4:14:5F:DE:AD:E0
Authority key identifier: 24:FD:F9:FB:9D:2A:27:43:A5:D9:F0:AD:33:28:FD:70:89:FB:99:A6
Certificate issuer: /CN=24fdf9fb9d2a2743a5d9f0ad3328fd7089fb99a6
Certificate serial: 01A1784C8EF02E416C70AB83645E2323A7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JP35-50qJ0Ol2fCtMyj9cIn7maY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.mft
Manifest number: 3A
Signing time: Mon 26 Oct 2026 13:00:45 +0000
Manifest this update: Mon 26 Oct 2026 13:00:45 +0000
Manifest next update: Tue 27 Oct 2026 13:00:45 +0000
Files and hashes: 1: JP35-50qJ0Ol2fCtMyj9cIn7maY.crl (hash: rTKY4g6yJmYUhOXigczms87MKFErbZM8Mle2ov+Usps=)
2: bH2EdrdocLzKysosG2fmC8KdVjA.roa (hash: UIYEZZqDP+nO5CgZrGOjI1cbEwfxi6gEkSxyPbpFct4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JP35-50qJ0Ol2fCtMyj9cIn7maY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:8e:f0:2e:41:6c:70:ab:83:64:5e:23:23:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fdf9fb9d2a2743a5d9f0ad3328fd7089fb99a6
Validity
Not Before: Oct 26 13:00:45 2026 GMT
Not After : Oct 27 13:00:45 2026 GMT
Subject: CN=ac180ddc4028a08baa4996474cdea4145fdeade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:a2:3f:42:f4:d4:55:05:9b:c0:b4:2a:81:
e0:61:ca:1f:3d:9d:4f:96:0e:67:df:04:28:a9:52:
dc:84:39:f3:89:a3:e8:50:5d:78:02:37:1e:65:fa:
19:70:21:2a:eb:77:84:34:e8:c6:c3:66:97:a7:dc:
b6:5b:f2:3e:2f:79:bc:be:a4:80:44:ab:5a:14:48:
7b:9a:fe:65:14:07:0d:70:a9:2e:71:7c:4f:18:b7:
cd:ed:05:01:2d:78:24:1b:f7:a8:5d:fe:cc:08:29:
6e:d6:1b:e8:65:cb:7c:2a:ed:e0:7b:4e:3e:36:e8:
71:41:04:b7:e6:31:3d:0b:7c:57:0f:e0:7c:32:cf:
11:80:d6:62:5b:23:79:1e:93:f7:e1:6e:c4:db:7d:
c7:4a:bc:c4:47:34:14:69:fb:3f:43:80:91:be:ff:
bc:14:e5:02:15:f1:44:23:f3:f1:c9:ed:5f:4f:e7:
f4:d2:2b:ce:ef:2b:48:2c:c6:6c:f8:37:fa:89:c4:
05:1f:ae:94:87:80:40:38:7a:24:89:37:5a:ef:f3:
39:8f:99:af:96:98:78:8a:ac:af:8c:12:bd:c8:51:
b1:07:af:0b:93:04:32:a3:4b:10:7b:e2:b1:17:f6:
80:ed:6d:51:14:87:01:5b:60:26:11:ac:58:41:ff:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:0D:DC:40:28:A0:8B:AA:49:96:47:4C:DE:A4:14:5F:DE:AD:E0
X509v3 Authority Key Identifier:
keyid:24:FD:F9:FB:9D:2A:27:43:A5:D9:F0:AD:33:28:FD:70:89:FB:99:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JP35-50qJ0Ol2fCtMyj9cIn7maY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0e:5c:ad:d4:1d:17:bc:8f:a9:82:1a:40:01:02:ef:d9:ee:
46:f4:65:51:92:42:6a:fa:cc:a2:8d:f4:75:6a:24:3f:46:2f:
86:70:48:3b:09:86:a5:27:77:9a:2e:04:02:8d:dd:1a:cd:09:
df:d2:d2:e2:4e:55:ee:84:ce:78:3d:8b:29:8a:33:5f:a2:32:
27:76:24:14:90:b3:3c:0e:8e:7a:45:2e:ac:ee:6b:8d:d1:e9:
05:67:ee:66:d5:26:3a:f9:94:c4:cc:fb:97:38:78:d1:dc:37:
de:61:3f:d5:d0:67:11:a0:35:20:1f:17:a1:a0:6b:24:8b:62:
f5:76:60:27:78:15:73:70:71:b1:81:b7:a8:cd:2f:29:94:60:
51:ee:48:4b:f5:03:5c:e1:d7:69:c8:5d:24:fa:15:6a:96:2b:
34:3f:3d:bd:c2:b9:4b:9c:c8:21:4b:e8:b4:5a:85:69:07:8c:
75:dc:92:eb:d5:17:79:e5:d0:c4:d5:e8:b8:15:ca:aa:1f:64:
34:9d:f4:17:1c:17:7c:9d:98:56:db:b8:c7:49:8f:21:b6:89:
ff:cf:99:e2:07:11:3d:8f:f2:0e:d8:c4:83:03:95:a2:3a:99:
f2:f2:69:a3:7b:5b:73:77:14:5b:c7:5f:8d:f7:2c:31:5a:f5:
f9:9b:52:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:48 2026 by rpki-client