Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: Fj/z5o8ehCEADn7GHExc5Stdth/aa2qTEqEh5c0PoeU=
Subject key identifier: 84:85:A6:27:4B:08:B7:AF:31:B7:31:32:26:E3:91:0C:27:F4:A0:1D
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019CAE3501285CEDFBEE7778A132E3C146B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 11:00:35 +0000
Manifest this update: Mon 02 Mar 2026 11:00:35 +0000
Manifest next update: Tue 03 Mar 2026 11:00:35 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: lhL1nc10he3LsxhnJStqMlcQmfHQcudoJuVbvC9lBBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:01:28:5c:ed:fb:ee:77:78:a1:32:e3:c1:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Mar 2 11:00:35 2026 GMT
Not After : Mar 3 11:00:35 2026 GMT
Subject: CN=8485a6274b08b7af31b7313226e3910c27f4a01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:38:16:7f:ac:b9:a6:8d:a0:52:bb:9d:ee:
75:20:3b:a8:27:c6:0f:29:9f:fb:72:64:0b:dd:7e:
05:ef:2a:4b:0a:34:0a:21:92:ec:18:7f:a1:a0:1f:
85:49:25:8e:1f:01:21:43:f9:c7:b1:23:29:b0:45:
73:56:9a:47:25:95:b3:5d:2c:b2:97:f2:97:a2:58:
20:6b:a9:eb:54:8e:cc:f7:38:b8:46:93:dd:8f:30:
6f:ad:9c:9a:ea:24:60:92:2c:55:a2:f3:41:ff:e1:
92:96:24:39:5f:44:b3:a9:a7:b9:b9:eb:e6:46:87:
bb:a8:9a:d0:2d:7c:dc:db:de:4a:6f:49:4a:00:9a:
34:df:36:79:58:61:3b:42:1e:98:65:c0:66:aa:60:
c6:8f:65:bd:62:2c:4c:2a:3c:b4:fc:30:d3:b5:ce:
31:ad:fc:6e:1b:f1:32:55:75:94:e6:90:40:d0:d7:
41:9f:20:e1:46:14:fb:4d:f8:d3:02:f1:44:91:c5:
ce:a8:c7:f5:92:0d:36:54:86:d3:5b:2b:e8:b7:5e:
a7:72:7f:e1:79:db:c9:73:07:4c:9b:e6:20:a4:0f:
ab:13:7e:0f:81:24:3c:86:16:06:48:a0:65:8a:9e:
92:4c:d2:67:b0:26:b5:47:64:ba:30:b1:13:9e:25:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:85:A6:27:4B:08:B7:AF:31:B7:31:32:26:E3:91:0C:27:F4:A0:1D
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3b:ae:27:a1:fb:49:1f:86:72:e3:99:e1:49:6a:55:3a:29:
fd:72:2b:67:7a:28:8e:07:f0:2e:4c:e5:fd:10:8b:1d:2c:89:
13:8e:f7:df:62:0f:90:07:6a:3b:72:9f:d7:01:cf:55:42:bc:
a0:c1:d0:b8:70:50:f7:ed:e5:b0:3a:01:0a:4d:85:bb:97:37:
02:28:7a:c5:8c:25:64:4f:0d:80:76:92:d6:67:ed:93:19:a2:
8b:dd:02:f2:0a:b0:f4:77:5b:9e:31:23:9f:8c:78:dd:79:ba:
b7:9a:42:2b:8a:b4:08:6f:9c:2f:9e:f6:83:f0:3e:68:82:8a:
59:51:fe:1f:e4:d8:6c:e6:67:de:68:8f:e6:30:69:2c:50:ff:
ab:d2:d5:29:ee:76:cd:d8:bd:d4:07:6c:b5:b5:8e:61:45:15:
d8:26:51:58:9f:91:09:fc:99:0e:91:b0:b1:36:b9:5e:18:62:
7e:16:1b:ef:e0:fa:2d:c8:99:99:e6:10:1d:4f:9c:1e:e8:56:
f4:21:eb:40:db:4f:d3:3b:1f:cc:38:7e:78:56:78:06:ef:c5:
cd:f0:0f:b5:94:db:55:2b:16:97:75:de:73:0e:ab:12:06:62:
e6:e7:4d:9a:33:ac:7d:71:2c:85:fc:66:49:76:8d:5f:b9:49:
31:63:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:12 2026 by rpki-client