Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: OaaKTBB005YHBPk9yK/E3Wqq0MN+9vXnh29NdqStAJs=
Subject key identifier: 03:EC:02:31:CB:3D:E2:64:0F:07:E0:28:5B:75:C4:B9:67:B1:94:CB
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019F93C8F01E9144C95C181EAEF7CBA4305A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 11:00:47 +0000
Manifest this update: Fri 24 Jul 2026 11:00:47 +0000
Manifest next update: Sat 25 Jul 2026 11:00:47 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: 3/CJ8kRmCMj0p/Hq0FP7oTLNpXtX04zvMl+qS5IfvOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f0:1e:91:44:c9:5c:18:1e:ae:f7:cb:a4:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Jul 24 11:00:47 2026 GMT
Not After : Jul 25 11:00:47 2026 GMT
Subject: CN=03ec0231cb3de2640f07e0285b75c4b967b194cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:1a:b4:84:97:27:5f:dd:0e:11:b4:ef:12:
d3:ec:a5:d5:ff:f4:ca:12:ce:9e:65:23:95:42:b3:
0d:11:6c:d6:c9:a5:06:72:cd:0c:e2:cb:76:d0:6e:
23:fb:24:4b:87:bf:92:43:f6:10:36:77:1e:27:d1:
22:14:70:a2:15:e1:9a:8f:4d:bd:80:89:d0:27:a4:
e5:32:a0:11:d6:d0:91:62:08:06:d0:84:c7:cf:9f:
b8:e5:7d:f4:a3:93:36:a0:b1:76:47:3d:06:80:52:
2f:31:97:b5:6f:76:b7:51:f6:9b:b7:ce:32:2a:97:
78:7d:e3:e2:8b:3f:71:bf:ed:67:cd:02:94:2c:3a:
fa:c4:24:b4:35:8b:9d:f0:8c:c5:06:b4:98:82:de:
c4:36:44:8e:02:2c:a8:b9:61:ee:9b:d3:14:a6:dc:
47:79:68:cf:56:17:cb:f0:77:5f:94:12:f8:fc:4e:
19:4e:77:85:51:df:9d:4a:fb:89:2f:26:97:f3:2f:
fd:40:3b:3f:ba:a1:dc:84:5d:44:8b:c8:61:e2:7d:
b2:b9:8c:db:f6:dc:b9:df:14:70:ab:4d:1c:03:b0:
2e:59:c2:f7:4d:1d:6f:ad:7f:0e:5c:0f:eb:49:99:
96:01:e4:76:81:aa:13:e9:13:1d:8d:bc:6d:2d:65:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:02:31:CB:3D:E2:64:0F:07:E0:28:5B:75:C4:B9:67:B1:94:CB
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c1:59:35:ac:92:e8:8a:8c:47:1b:51:a1:9b:65:15:5a:04:
63:70:ad:b3:e0:2b:6d:ba:3f:26:de:91:ed:40:fd:0a:08:41:
52:d0:b0:44:e8:9b:e4:38:89:5e:6e:14:91:b2:ed:2b:96:ba:
fe:bd:21:84:89:8f:c3:7d:2c:69:9f:e0:db:bd:31:50:a3:3f:
32:d2:54:96:85:24:89:2b:17:f4:c5:3d:a5:55:d1:78:4f:51:
ba:a0:c9:d7:c4:65:c3:05:28:03:46:60:01:76:a1:58:e5:81:
6a:a8:50:22:56:d0:de:a0:c1:c9:b9:df:cb:70:aa:cb:b6:10:
92:e7:a8:8f:06:7e:94:af:ab:e8:cf:44:3c:ca:b2:cd:91:53:
8f:d1:ad:66:8b:90:a8:10:93:ab:a1:49:3a:98:9f:34:96:0d:
72:ee:22:c8:60:a9:b9:6b:6f:a6:67:ae:c8:6b:74:f9:f9:24:
71:2b:99:58:37:b9:a0:b9:d1:b7:c1:21:ee:18:58:10:ea:5c:
39:a1:34:c2:a6:eb:e7:8b:2f:04:07:56:49:f9:a4:f2:a6:48:
83:e4:8b:77:aa:79:39:9c:17:36:14:53:43:e3:92:52:56:45:
64:3e:3b:91:79:44:b1:ca:d6:e1:9a:3d:c7:19:7f:65:74:c2:
55:a3:e7:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyPAekUTJXBgervfLpDBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjYwNzI0MTEwMDQ3WhcNMjYwNzI1MTEwMDQ3WjAzMTEwLwYDVQQD
EygwM2VjMDIzMWNiM2RlMjY0MGYwN2UwMjg1Yjc1YzRiOTY3YjE5NGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FoatISXJ1/dDhG07xLT7KXV//TK
Es6eZSOVQrMNEWzWyaUGcs0M4st20G4j+yRLh7+SQ/YQNnceJ9EiFHCiFeGaj029
gInQJ6TlMqAR1tCRYggG0ITHz5+45X30o5M2oLF2Rz0GgFIvMZe1b3a3Ufabt84y
Kpd4fePiiz9xv+1nzQKULDr6xCS0NYud8IzFBrSYgt7ENkSOAiyouWHum9MUptxH
eWjPVhfL8HdflBL4/E4ZTneFUd+dSvuJLyaX8y/9QDs/uqHchF1Ei8hh4n2yuYzb
9ty53xRwq00cA7AuWcL3TR1vrX8OXA/rSZmWAeR2gaoT6RMdjbxtLWXIAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPsAjHLPeJkDwfgKFt1xLlnsZTLMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMFZNayS
6IqMRxtRoZtlFVoEY3Cts+Arbbo/Jt6R7UD9CghBUtCwROib5DiJXm4UkbLtK5a6
/r0hhImPw30saZ/g270xUKM/MtJUloUkiSsX9MU9pVXReE9RuqDJ18RlwwUoA0Zg
AXahWOWBaqhQIlbQ3qDBybnfy3Cqy7YQkueojwZ+lK+r6M9EPMqyzZFTj9GtZouQ
qBCTq6FJOpifNJYNcu4iyGCpuWtvpmeuyGt0+fkkcSuZWDe5oLnRt8Eh7hhYEOpc
OaE0wqbr54svBAdWSfmk8qZIg+SLd6p5OZwXNhRTQ+OSUlZFZD47kXlEscrW4Zo9
xxl/ZXTCVaPnnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:59:15 2026 by rpki-client