Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: s5RkRXj6eTRZsfYWVawqr8dtixUVZ6FhwZgGWclvRDo=
Subject key identifier: 2C:BB:0B:4B:A3:A3:AC:09:CC:D5:21:27:A9:FD:F0:50:8F:65:42:88
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019D2BBC3A655307E3934D79589E45D700FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 20:00:49 +0000
Manifest this update: Thu 26 Mar 2026 20:00:49 +0000
Manifest next update: Fri 27 Mar 2026 20:00:49 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: bQdRzLMS8msjkjfaus+jJf/PW7raRCNyjmxWEd+Ow0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:3a:65:53:07:e3:93:4d:79:58:9e:45:d7:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Mar 26 20:00:49 2026 GMT
Not After : Mar 27 20:00:49 2026 GMT
Subject: CN=2cbb0b4ba3a3ac09ccd52127a9fdf0508f654288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:20:ae:87:b0:54:26:19:51:7d:9a:ef:26:
b5:cd:94:6f:7c:26:75:03:23:6a:fe:4e:f3:05:94:
31:ed:21:94:00:85:01:bf:1c:53:36:af:57:1b:b5:
d3:5c:e1:ff:7a:cb:e7:99:99:f2:31:5c:7d:50:9a:
41:24:d5:53:a4:54:f5:b8:1d:55:3a:3c:67:66:cf:
48:f7:8b:3d:00:90:87:5e:fe:ac:6c:9e:78:7b:c7:
6b:3e:2a:a3:5e:c0:b4:1d:f5:01:32:ed:e7:1b:ad:
37:94:4f:a4:6d:06:cd:77:ba:0b:e6:8b:38:76:cc:
69:6e:ac:13:2b:37:9b:2e:5b:91:5d:a7:e0:8b:f9:
22:b1:56:c7:83:82:ed:db:79:c9:fc:33:ba:82:97:
ba:15:e6:0c:c4:e7:05:0e:b6:47:87:7f:c2:74:45:
8a:03:f3:21:a9:ce:6c:e7:2d:7d:1d:c1:7c:56:52:
85:74:48:47:c2:fd:de:7f:dc:35:70:44:b7:1d:44:
78:62:bb:a5:2f:83:03:e2:58:7d:f7:28:b0:df:bc:
5d:70:e4:a0:a4:2a:ab:f2:23:53:f9:d2:b1:05:7a:
e1:82:d4:94:8e:9a:92:35:11:6b:16:36:12:c6:da:
20:a8:22:9b:8d:7e:66:c0:ac:d4:27:1a:f2:5d:37:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:0B:4B:A3:A3:AC:09:CC:D5:21:27:A9:FD:F0:50:8F:65:42:88
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2d:06:ec:4e:7e:f9:83:3b:2b:9e:3a:90:64:74:20:08:cb:
2e:27:67:60:99:26:40:68:aa:3c:19:a7:68:0f:15:cd:34:71:
54:1d:3d:2b:5b:ec:b0:70:b5:7e:a6:8b:27:f7:37:bf:ab:1e:
4d:ec:b9:be:ad:c8:ac:1d:ea:6d:fa:2a:83:7b:e5:79:88:d0:
88:c7:27:03:15:07:94:3c:85:39:ac:c1:ad:97:f3:0d:1e:0f:
61:cf:c7:bc:c1:91:c6:69:23:98:d6:83:c6:a0:06:74:4f:5f:
d4:3b:64:09:d2:cd:f4:a0:a9:ef:a4:c2:ee:2e:99:3f:0a:38:
00:09:0a:a3:ee:b8:d7:bc:f4:ab:81:65:f1:a5:ed:1e:27:2d:
9e:8a:ef:d2:4e:76:09:40:b0:f4:20:8a:44:b4:53:a6:bc:7f:
69:5a:43:71:5e:76:70:28:a1:ae:00:fd:3f:ff:e7:ec:cd:19:
b5:66:1e:fc:e5:61:d3:7f:32:3d:11:73:2d:66:eb:9f:1d:17:
c6:e8:7f:93:62:6a:d2:11:2a:d4:3d:49:56:5b:3a:2e:9e:b5:
06:e3:9f:d3:66:01:97:76:e6:a3:25:e5:37:ec:f2:d4:fd:16:
ba:6b:5c:be:d0:cd:cb:ed:6e:b2:f9:3b:13:66:d5:7d:66:cd:
a0:ae:a3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:40:54 2026 by rpki-client