Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
File: Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft (raw, json)
Hash identifier: fJFUDdAkQVOi6envKUFMrLBLHae9OkqtJ7GjO8pnZfE=
Subject key identifier: 25:A0:BE:97:EA:01:2A:32:0D:F1:FA:31:D4:BF:01:A3:39:11:25:AF
Authority key identifier: 25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
Certificate issuer: /CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Certificate serial: 01A196205013DFBEB7D454225DA3092D7258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
Manifest number: 01A7
Signing time: Sun 01 Nov 2026 08:01:02 +0000
Manifest this update: Sun 01 Nov 2026 08:01:02 +0000
Manifest next update: Mon 02 Nov 2026 08:01:02 +0000
Files and hashes: 1: Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl (hash: o4F/rmOHToBnOl9qlSMqs4SUd8pBhGhPHj3rpMqijE8=)
2: wzD-Y1XRaC-02kl2ZMaS3E6fGFs.roa (hash: J6QWqMXaVC1M4duQaZv5ICVDFegW9Ncnya/aGNgLbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:20:50:13:df:be:b7:d4:54:22:5d:a3:09:2d:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Validity
Not Before: Nov 1 08:01:02 2026 GMT
Not After : Nov 2 08:01:02 2026 GMT
Subject: CN=25a0be97ea012a320df1fa31d4bf01a3391125af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:5a:6d:cd:91:46:0e:5b:27:99:38:48:c0:
e0:2a:9e:c5:e3:3b:ec:68:d9:37:34:b2:45:99:11:
0f:7a:1c:dd:19:ce:06:59:59:5c:a0:75:b6:29:48:
45:ff:df:33:8e:8f:c7:4d:af:5f:c9:7c:b4:fd:de:
5c:0c:c0:90:31:d7:88:82:9d:cd:15:71:9f:38:d2:
3b:46:56:1d:0d:e6:58:5c:18:ab:a3:22:1f:59:5c:
3e:23:9b:49:34:fb:0f:02:15:5d:5c:8f:a6:c4:9b:
96:01:14:08:82:c7:35:1e:bc:23:46:50:ca:22:08:
70:8f:78:15:3d:a7:ff:66:ba:aa:f5:33:af:97:15:
29:3d:fd:28:04:36:ac:14:ec:64:f6:38:9d:66:5c:
8a:b5:5c:7d:9f:ab:ee:c0:ca:42:f7:7e:f6:cf:38:
76:ac:7a:2a:15:6b:62:f3:62:bf:3b:bf:4b:c4:74:
ef:96:a7:16:de:db:38:6d:08:b0:09:dc:2a:53:02:
16:8c:62:04:5a:e0:a7:47:d7:04:66:98:29:2c:6d:
7a:c5:4d:ff:79:58:e9:b2:69:a5:44:ad:11:a8:f6:
17:1b:c3:fd:89:69:f8:52:9e:2d:18:6e:82:bd:e1:
79:b7:99:ed:83:4d:71:4f:dc:fd:98:df:53:2c:b2:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:BE:97:EA:01:2A:32:0D:F1:FA:31:D4:BF:01:A3:39:11:25:AF
X509v3 Authority Key Identifier:
keyid:25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:cc:89:c9:e4:3c:97:d4:e7:aa:80:48:9a:26:b6:d3:28:
4d:59:44:33:81:b6:33:ad:64:60:8a:cc:64:07:39:83:a3:09:
59:75:fe:9d:43:4e:47:e1:29:0a:8c:73:90:3b:55:e1:f8:ac:
f4:ac:61:d2:a3:7e:78:53:09:75:1e:e0:34:8f:e9:83:38:0e:
97:25:e1:04:b7:b7:78:7a:27:c6:78:05:7a:ef:ed:7c:8e:4f:
eb:3d:30:51:ac:18:01:4a:3a:de:f5:33:ba:2f:03:8f:fb:8b:
8b:90:6a:8b:8b:a2:38:e7:11:58:1a:12:0a:a4:6c:5f:50:80:
95:1c:ee:2a:8e:90:5a:bd:d9:c4:d9:9f:a4:a2:1f:2e:c0:e1:
13:48:e9:96:01:ed:58:2a:e1:87:46:f7:6c:6a:d1:5c:e1:02:
b9:d9:1f:c6:01:00:7f:1a:9b:ae:35:95:e4:76:af:4c:46:e4:
f8:e3:01:a0:ab:6c:6b:2b:1e:8a:97:22:dd:ab:53:ba:d9:f5:
3d:4b:0f:f0:86:6c:bb:a5:48:ff:58:f0:73:11:82:6e:6f:ad:
a7:55:21:16:5f:12:8a:71:bd:20:ca:f1:8e:aa:f9:e9:97:02:
39:73:6d:60:42:78:24:88:88:0c:f0:1f:e8:b3:57:16:0d:1a:
47:ec:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:37:24 2026 by rpki-client