Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: RIxgw45kSChvz1pFi4HLJ9KSuqnGo8RitCyNNW3wiOU=
Subject key identifier: 42:C8:47:E6:5A:56:27:1B:D8:81:FD:5B:8F:6B:93:99:F3:3D:B8:0F
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 01A12B43F3F4FE4DB767D26003B011F47DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1A98
Signing time: Sun 11 Oct 2026 14:00:35 +0000
Manifest this update: Sun 11 Oct 2026 14:00:35 +0000
Manifest next update: Mon 12 Oct 2026 14:00:35 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: AlzF2M1knAZMuXgLeGK0CDG9oxO4fA6qwDylapuaQfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:43:f3:f4:fe:4d:b7:67:d2:60:03:b0:11:f4:7d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Oct 11 14:00:35 2026 GMT
Not After : Oct 12 14:00:35 2026 GMT
Subject: CN=42c847e65a56271bd881fd5b8f6b9399f33db80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:87:4c:85:80:49:6a:08:34:03:fa:48:7e:
cd:2c:10:72:86:31:c1:ba:cd:13:80:93:3c:db:9c:
9b:e3:93:e2:19:be:e0:d1:54:43:1f:e7:75:9f:1b:
a0:28:a5:1b:9a:0d:62:d7:df:c2:16:f9:23:e6:9a:
de:d6:73:05:c8:93:15:10:32:fc:22:c5:d1:27:93:
8a:e4:0e:80:05:14:b9:41:cd:16:e8:25:2a:e9:1a:
af:b0:18:b8:88:60:5f:2c:8e:6c:eb:31:90:55:83:
91:c7:2f:bb:1f:41:1a:86:08:23:85:06:8a:f0:45:
6c:88:c0:a1:95:1a:fb:25:f7:e4:17:d6:87:66:23:
18:d6:51:9b:ef:8b:42:5d:8c:66:36:c5:b2:df:cb:
07:14:0a:c7:81:ce:9c:83:42:58:d6:8c:b5:69:1e:
fb:30:8d:4e:63:7d:8b:64:dc:23:40:7c:18:46:60:
74:02:53:fa:d7:3d:6a:2a:1d:16:c9:12:26:8c:dc:
a2:49:cc:c2:44:86:4c:7f:9d:da:a2:f3:83:43:e3:
ac:b0:fb:b8:c1:0b:fd:12:18:38:e4:83:9b:d2:a0:
62:64:a7:23:c2:14:88:0e:95:40:94:77:f1:33:9f:
42:91:1f:ac:e7:55:6c:af:28:44:e4:28:45:95:bf:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:47:E6:5A:56:27:1B:D8:81:FD:5B:8F:6B:93:99:F3:3D:B8:0F
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9d:e6:73:7c:9d:4f:d5:88:7b:dc:3b:20:92:55:3c:3e:89:
33:aa:54:20:bf:41:d2:f5:4f:24:a4:30:da:6b:d9:b2:75:d1:
50:f5:4a:dc:a8:71:b9:69:89:d1:cc:cf:05:dc:5a:52:6f:fb:
fc:8c:0b:9e:13:aa:03:6d:ce:3e:3a:fb:6b:17:68:31:07:49:
8a:01:59:62:b9:18:0b:97:fc:29:44:f8:66:79:98:6a:69:ac:
96:d8:89:db:95:5e:65:eb:cf:d6:91:92:63:e5:82:80:32:12:
c7:8e:08:95:83:ad:fa:a5:e8:8f:01:39:85:85:b2:02:7c:79:
c5:fc:aa:bb:48:cf:cb:3b:97:9c:f2:96:e7:a5:a1:b9:9d:f1:
4b:4e:02:78:42:01:26:07:ac:51:2d:f1:a6:34:48:b7:35:a8:
33:2a:3b:88:06:be:a6:33:96:f0:80:bf:b6:7a:da:cf:ec:a5:
a6:89:47:23:90:04:8b:37:72:89:7a:48:f8:79:2d:25:3e:4a:
e3:9e:c3:8b:e4:44:99:f5:89:04:b7:61:17:40:c2:3b:3f:bf:
36:3d:7f:c7:58:ea:a6:c4:cd:21:83:07:20:4a:ad:d6:44:df:
d5:c0:1d:e0:18:89:d7:8e:32:40:be:8a:10:12:71:6c:d6:91:
c6:e7:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:12:18 2026 by rpki-client