Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: iWVxCUa0CLifxsyA84BHv8RA/hg/WfUl87UTfqgejaE=
Subject key identifier: F6:C3:67:CF:AC:78:75:5B:03:23:C9:29:4C:7D:CC:CF:9D:68:6A:84
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019D9DACEE270E0D5E824C9CDF18141A4F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 23:00:49 +0000
Manifest this update: Fri 17 Apr 2026 23:00:49 +0000
Manifest next update: Sat 18 Apr 2026 23:00:49 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: 5WHQU2nfX+LMnUQPbqSTm+Teb+0OsS9ZOXY3x7y/SoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:ee:27:0e:0d:5e:82:4c:9c:df:18:14:1a:4f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Apr 17 23:00:49 2026 GMT
Not After : Apr 18 23:00:49 2026 GMT
Subject: CN=f6c367cfac78755b0323c9294c7dcccf9d686a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:2e:1f:2a:56:ae:6b:95:02:b2:05:65:03:
b3:81:e7:d9:d7:76:c1:f0:f4:ea:df:50:25:f4:e9:
23:3a:4f:69:34:43:cc:d9:b9:ac:2d:ac:f0:28:93:
f9:a5:3b:fd:8f:c3:a6:fc:a9:71:25:bc:d6:a4:a7:
96:11:22:4d:d3:3f:48:b0:e9:f9:61:9a:21:8f:6f:
09:27:ad:0e:5b:aa:4a:2b:c0:35:64:85:5c:26:97:
15:2c:28:7c:34:3b:5d:53:08:f8:28:b6:84:90:a6:
88:85:65:1a:9e:08:c0:d3:d8:7a:ea:4d:a7:0a:5f:
c9:83:62:13:1f:64:8b:cd:d7:10:d5:72:43:42:20:
53:c5:69:cb:76:6c:dd:e2:dd:49:0f:bb:e7:ea:54:
d1:bc:f4:ca:d5:55:3e:b7:0c:eb:e2:2c:fb:2f:8d:
62:ec:12:09:1b:32:73:67:8c:8a:98:52:04:4f:e1:
11:2c:16:f9:5e:9d:0a:7a:fd:2d:bc:54:2b:51:18:
06:67:7f:77:2b:3f:46:9b:2d:05:7a:f1:c6:61:aa:
15:f1:63:81:36:9c:19:06:a3:64:75:32:8a:42:8a:
f3:a7:42:50:16:11:73:8a:09:d8:08:eb:b1:64:c5:
67:c4:c1:8a:09:96:77:e0:9f:7a:1f:83:0d:25:7b:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:67:CF:AC:78:75:5B:03:23:C9:29:4C:7D:CC:CF:9D:68:6A:84
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:30:86:7e:09:ec:01:27:5d:a1:9d:41:3d:b5:f1:04:bd:e3:
73:64:f0:99:67:ef:a5:97:9c:55:36:41:ab:49:b5:78:ab:48:
64:55:53:82:f1:66:8c:1c:d0:37:81:39:9b:1b:84:42:cd:64:
33:3a:b7:f7:2d:f5:08:d3:5c:58:64:c2:62:26:09:16:40:d1:
1f:04:7e:e1:9d:57:51:8f:33:69:57:f7:59:6d:22:b9:54:84:
02:74:7a:5e:75:ba:e7:59:c5:36:d5:00:3b:4c:cc:06:48:0c:
bc:b8:84:13:8b:6a:7e:96:63:9e:87:a4:9d:99:2c:be:2c:35:
08:c2:68:9d:29:be:8c:a5:f4:76:84:cb:34:36:dd:4d:92:7a:
49:b2:aa:58:2a:a5:e8:bd:61:9c:18:e3:7a:e4:61:1b:f6:aa:
6b:6f:86:c3:8b:c9:13:5b:78:d4:e5:12:d2:1e:43:ad:ad:eb:
2f:60:85:f7:25:50:80:73:1b:e2:dd:02:c0:c0:28:58:ac:03:
cc:96:aa:d7:2e:f2:44:ab:52:fb:bd:76:2d:b5:44:bf:77:e4:
c4:b5:be:ca:64:41:a1:99:59:44:62:33:89:9a:d3:53:c6:2b:
87:eb:7b:5f:bf:3a:c8:ee:d3:ee:78:90:29:1a:7d:49:a3:7d:
76:3f:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:38:40 2026 by rpki-client