Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
File: Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft (raw, json)
Hash identifier: d2elIEuRtGc5zEH+CXXhrPjmo0O2TYAgBD/d+BJvFIE=
Subject key identifier: 6A:0A:76:C6:97:DB:00:CB:5E:02:1B:50:65:27:04:C3:5A:3D:EF:A8
Authority key identifier: 25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
Certificate issuer: /CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Certificate serial: 01A12FC643DDBA092383750D568F9D848AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
Manifest number: 0172
Signing time: Mon 12 Oct 2026 11:01:24 +0000
Manifest this update: Mon 12 Oct 2026 11:01:24 +0000
Manifest next update: Tue 13 Oct 2026 11:01:24 +0000
Files and hashes: 1: Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl (hash: XOVwdV+bsbS4Ac+BTzyrSesaVsJo1nQ2QFSdyWgxZWw=)
2: wzD-Y1XRaC-02kl2ZMaS3E6fGFs.roa (hash: J6QWqMXaVC1M4duQaZv5ICVDFegW9Ncnya/aGNgLbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:43:dd:ba:09:23:83:75:0d:56:8f:9d:84:8a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Validity
Not Before: Oct 12 11:01:24 2026 GMT
Not After : Oct 13 11:01:24 2026 GMT
Subject: CN=6a0a76c697db00cb5e021b50652704c35a3defa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:f0:21:b1:01:87:ca:40:8a:6f:71:6a:83:
aa:a0:53:b1:4f:01:15:f1:b0:60:a8:32:97:13:58:
89:ca:29:a3:a5:bd:c4:50:da:da:3f:f0:b0:43:3e:
69:19:73:54:e7:f5:25:48:48:e8:cb:8b:db:41:ee:
57:9f:5d:c9:0f:c2:d0:fc:0c:d6:09:65:b9:bb:9f:
55:86:b6:19:0c:51:da:a9:5b:af:e9:db:00:27:60:
25:13:82:5e:09:3c:9e:a5:d0:32:d2:4a:31:fe:83:
07:02:c7:9b:7e:48:e1:5b:83:96:6a:93:30:98:d0:
49:82:e8:85:51:60:06:51:19:10:38:68:50:83:02:
0c:1e:33:47:28:c6:42:d1:74:34:18:ab:4c:2c:66:
aa:d9:d4:50:02:2a:ef:c2:da:ed:1d:25:af:35:bd:
de:3f:59:42:42:a9:c9:66:ad:14:96:0c:14:77:56:
1f:9c:6f:88:0e:17:4c:d5:34:92:b3:8a:24:29:bf:
3e:63:b0:a4:4a:83:f8:2f:39:9c:76:a5:1a:27:30:
4a:da:92:13:e8:47:f4:66:79:f1:ff:d3:22:92:60:
eb:1b:d7:c7:d4:99:72:9c:b2:88:b1:13:70:53:07:
9f:a4:50:d5:3e:54:3d:70:d4:00:e2:1b:0b:7f:03:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:76:C6:97:DB:00:CB:5E:02:1B:50:65:27:04:C3:5A:3D:EF:A8
X509v3 Authority Key Identifier:
keyid:25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d6:0c:e3:52:70:bc:c9:d6:6d:ca:e2:e0:a4:47:25:60:35:
61:8b:34:82:15:05:2a:3f:13:cd:99:4b:99:9f:77:81:59:97:
05:ed:37:08:e9:86:55:73:17:8c:6c:03:49:7e:14:f0:e7:02:
89:f0:5d:2a:33:47:55:dd:b7:c3:14:5a:a2:39:b6:d0:a5:bd:
79:f4:54:9a:5b:9b:94:c3:58:f6:c9:0c:ed:74:e5:87:18:15:
a9:55:2b:10:1d:f5:f0:d3:1f:26:53:10:df:aa:61:ff:5c:2f:
f1:ec:61:7f:ae:03:5c:93:8f:5f:bf:39:05:66:9c:08:b6:50:
3b:bf:d3:64:cf:1c:7e:87:66:d2:4b:ca:74:d7:16:19:87:d0:
eb:99:d0:df:13:00:8b:99:82:dd:62:36:de:b3:0f:76:f7:cb:
66:e8:73:c2:eb:d8:6a:6b:10:f2:d1:15:05:6f:f1:78:4b:cf:
77:0a:f1:85:93:12:4d:c8:39:87:af:37:96:0c:92:f8:72:2d:
a6:00:d0:61:bf:1a:dd:c5:40:e3:33:f0:e4:d7:6e:0f:a8:02:
8b:3e:5a:f3:3f:c4:4f:db:31:96:3d:89:35:54:c2:e6:cd:89:
a2:ce:09:47:d3:29:f7:45:02:f7:58:2d:26:68:6c:51:78:a4:
5a:de:6d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvxkPdugkjg3UNVo+dhIrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWZhYTFlZmIyOWZmYTU2ZTZmNWQ0MjA2MjJkZmYwNjk3
ZmE2MjcwHhcNMjYxMDEyMTEwMTI0WhcNMjYxMDEzMTEwMTI0WjAzMTEwLwYDVQQD
Eyg2YTBhNzZjNjk3ZGIwMGNiNWUwMjFiNTA2NTI3MDRjMzVhM2RlZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i3wIbEBh8pAim9xaoOqoFOxTwEV
8bBgqDKXE1iJyimjpb3EUNraP/CwQz5pGXNU5/UlSEjoy4vbQe5Xn13JD8LQ/AzW
CWW5u59VhrYZDFHaqVuv6dsAJ2AlE4JeCTyepdAy0kox/oMHAsebfkjhW4OWapMw
mNBJguiFUWAGURkQOGhQgwIMHjNHKMZC0XQ0GKtMLGaq2dRQAirvwtrtHSWvNb3e
P1lCQqnJZq0UlgwUd1YfnG+IDhdM1TSSs4okKb8+Y7CkSoP4LzmcdqUaJzBK2pIT
6Ef0Znnx/9MikmDrG9fH1JlynLKIsRNwUwefpFDVPlQ9cNQA4hsLfwMx3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoKdsaX2wDLXgIbUGUnBMNaPe+oMB8GA1UdIwQY
MBaAFCWvqh77Kf+lbm9dQgYi3/Bpf6YnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmEtcUh2c3BfNlZ1YjExQ0JpTGY4R2xfcGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xOTE0NTEtMTgzNi00YmY4LWFkMWIt
YmE1Y2NjODg3MDQ3LzEvSmEtcUh2c3BfNlZ1YjExQ0JpTGY4R2xfcGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8xOTE0NTEtMTgzNi00YmY4LWFkMWItYmE1Y2NjODg3MDQ3
LzEvSmEtcUh2c3BfNlZ1YjExQ0JpTGY4R2xfcGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNYM41Jw
vMnWbcri4KRHJWA1YYs0ghUFKj8TzZlLmZ93gVmXBe03COmGVXMXjGwDSX4U8OcC
ifBdKjNHVd23wxRaojm20KW9efRUmlublMNY9skM7XTlhxgVqVUrEB318NMfJlMQ
36ph/1wv8exhf64DXJOPX785BWacCLZQO7/TZM8cfodm0kvKdNcWGYfQ65nQ3xMA
i5mC3WI23rMPdvfLZuhzwuvYamsQ8tEVBW/xeEvPdwrxhZMSTcg5h683lgyS+HIt
pgDQYb8a3cVA4zPw5NduD6gCiz5a8z/ET9sxlj2JNVTC5s2Jos4JR9Mp90UC91gt
JmhsUXikWt5toA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:15:42 2026 by rpki-client