Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File: JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier: O5jFOD+lAEWbHt25TIt+bOcYcOJhJkXBb81pqlGg3GI=
Subject key identifier: 61:C8:D2:11:43:90:D2:C8:A9:C8:13:AD:E5:08:9E:D5:33:3D:E3:BB
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 019EC0DB73D0FA688BD9FD43D74011516846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number: 1963
Signing time: Sat 13 Jun 2026 12:01:07 +0000
Manifest this update: Sat 13 Jun 2026 12:01:07 +0000
Manifest next update: Sun 14 Jun 2026 12:01:07 +0000
Files and hashes: 1: FAvWr-t5qLAm6NFSiSaeHXBJNkk.roa (hash: oCnAzbJIAxh+ZmVGXJVHG080J5H06zSvYh/DS9c83V0=)
2: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: hr4WpBQ/PrgFQInZZdzlSmx6szDIsOrX8p9fnrwnujM=)
3: QpY8GlKdyrv404vf69KUdzbntpg.roa (hash: F5JQWwCO6Am+cythijf0Eh/pb3RRurkykgfuv0NLjjk=)
4: bNA2kutP2fcn6EKqxM5e-6bce04.roa (hash: FT27XBA0Rid5SDCvkNKz8jqlEy+d/zyDgdNMOV+EHDg=)
5: bhGF4U1uOTR_d637z55lpBNamlM.roa (hash: IKmQahA4tp55y4ynk0Z+qjyDHvn9Skrfi+yfx+Eq1uw=)
6: dqIMVQtES41sQVRwnUTr8rX4pPk.roa (hash: 0lWlGGH3qwTUbHSx/AhpVPNTmibHBfbhdn/QehKZoOw=)
7: g0I0kU5MJHKsYF8n6XBnqA0rorw.roa (hash: 0uUsQ8/3tfk0T+PJCNuxoHMkCUWUET0shiGdo7yowwA=)
8: sWc0x8xdprid2J0LIhsIpRR0BBk.roa (hash: MM549Xitzolq2k3RRgaWuIzqMTH1U55wOE7cKGGNAZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:73:d0:fa:68:8b:d9:fd:43:d7:40:11:51:68:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jun 13 12:01:07 2026 GMT
Not After : Jun 14 12:01:07 2026 GMT
Subject: CN=61c8d2114390d2c8a9c813ade5089ed5333de3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:c4:0b:39:ad:94:77:ef:ec:bf:d6:24:ac:
b8:0f:db:7c:4d:c3:47:ba:ed:c8:06:b6:47:fb:8a:
a3:3d:9e:32:11:f1:7f:2a:68:13:e9:4b:fa:7d:4e:
36:e5:cc:ad:c8:33:ba:9e:5c:5d:58:80:2d:09:40:
89:26:bd:36:52:ee:af:ba:3b:7f:34:50:f3:d5:71:
06:21:9d:c1:10:68:37:e0:43:26:70:83:02:2a:54:
e9:75:9e:dd:14:e5:0a:b6:f1:95:65:a5:0d:ac:fc:
98:a3:42:af:57:d6:20:0a:79:31:85:a8:b3:44:20:
b8:eb:f3:06:2e:7f:60:a5:70:38:68:81:8c:d5:50:
e4:fb:ee:79:16:e6:66:3f:ed:1f:8c:d3:e2:56:9a:
00:4c:4f:85:37:22:1e:45:0c:74:dc:cc:00:1f:35:
e9:b1:eb:08:a4:ec:18:56:ea:d1:a0:91:6d:53:0f:
78:ad:9f:1f:f5:77:b8:c0:ca:fc:14:47:8a:48:05:
e2:7f:3f:1a:16:e0:9d:45:0d:ff:f7:65:0f:19:8a:
e4:66:d5:78:37:15:bb:07:4b:7b:91:ca:2c:83:ec:
59:ff:6c:b5:9c:89:5b:30:61:96:1a:9b:2e:1b:61:
2c:11:5b:4d:ce:98:7f:e8:b9:75:05:b0:fa:9b:70:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C8:D2:11:43:90:D2:C8:A9:C8:13:AD:E5:08:9E:D5:33:3D:E3:BB
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:ae:40:99:0e:c4:58:95:38:99:8a:bd:03:fb:86:6a:f2:
1c:25:7b:05:15:87:80:1d:fd:17:6d:64:93:4a:5d:01:69:87:
0f:82:fb:c3:32:53:34:ac:f4:b9:f2:ae:65:1f:02:ea:99:28:
67:16:87:84:d4:40:cf:0e:38:f1:dc:27:17:9f:eb:e3:90:47:
e3:21:58:77:96:70:38:0d:d0:98:4e:45:05:b4:69:77:1e:ae:
45:4e:7f:c5:64:35:7b:19:ff:3c:ac:60:52:66:85:da:50:ec:
11:aa:99:f2:a2:ae:c7:1d:0c:f7:c9:98:81:e7:1f:66:61:49:
f8:f0:92:ea:b4:2e:cf:13:6e:d3:da:e6:d7:a3:3a:cb:df:2e:
e0:d2:fc:56:fb:bb:5b:5b:d8:8a:f7:02:01:22:96:8d:b4:98:
b5:49:70:e9:57:2e:f5:16:d6:23:d2:10:5e:72:9f:31:6f:cc:
92:28:64:05:f4:37:b0:7b:fd:dc:fc:d3:a5:04:ae:8d:57:32:
9f:46:33:51:27:ba:e9:33:44:a5:91:b6:df:3b:c5:7c:ce:3a:
4d:96:18:d5:ae:4a:eb:0f:30:f9:47:5e:50:f3:e7:9e:d7:36:
0e:68:d3:ce:97:22:87:79:e4:08:7b:88:6b:29:8a:23:8e:ba:
69:24:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:08:25 2026 by rpki-client