Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: zvTAL9eLjlDtnw+B4qUmx/fyPFYry4S5JH4VFY+23w8=
Subject key identifier: A1:2A:43:39:E0:62:67:C4:9F:EA:58:06:AA:86:96:3A:A7:CE:A4:07
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019D9BBF304BE7981CA20A646368493C0D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 14:01:31 +0000
Manifest this update: Fri 17 Apr 2026 14:01:31 +0000
Manifest next update: Sat 18 Apr 2026 14:01:31 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: tzojKyfEsNU9AdyyhuOtJ1FfjxlKelTs5cC/Njv/Meo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:30:4b:e7:98:1c:a2:0a:64:63:68:49:3c:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Apr 17 14:01:31 2026 GMT
Not After : Apr 18 14:01:31 2026 GMT
Subject: CN=a12a4339e06267c49fea5806aa86963aa7cea407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:4a:57:0a:a4:6f:0f:18:b8:cc:54:5b:37:
a4:77:3b:d8:cd:18:f3:7c:92:68:79:65:31:da:b7:
46:f8:74:d6:1d:43:6a:12:4c:fe:0b:e7:35:c8:9f:
af:5a:d1:ee:6a:66:31:3e:d3:b4:40:90:11:44:87:
09:ab:74:43:15:7d:b8:48:67:fb:41:cf:b3:4d:4f:
43:ab:80:6f:bd:64:b5:16:ae:23:ad:31:1a:9e:59:
b5:98:0f:b0:18:c6:f2:03:22:4d:d4:14:59:d1:a5:
4c:eb:6f:8d:eb:c7:a9:f6:97:6e:a8:f9:46:d7:84:
42:89:22:c0:71:67:de:7f:de:00:04:ea:44:f2:fe:
45:2d:39:d8:2a:31:2f:e0:43:b8:16:91:e6:58:e0:
3f:6d:55:74:fa:ab:31:79:8f:e6:a4:83:f2:67:f0:
ee:6b:47:23:14:20:54:5e:e6:13:6e:e7:6c:ae:47:
e8:43:24:92:a1:58:7a:6a:b0:bf:c2:86:6b:86:8d:
76:0d:a4:31:69:8b:a6:33:f9:54:2a:83:a0:0d:88:
7c:86:d4:14:40:0d:d3:8f:e4:9b:29:fc:1a:61:4f:
7d:09:3a:42:88:35:8d:70:01:bd:61:76:ab:17:ae:
39:2e:6b:27:32:24:35:7c:cd:2c:4e:3f:eb:68:92:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:43:39:E0:62:67:C4:9F:EA:58:06:AA:86:96:3A:A7:CE:A4:07
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:82:6f:61:7a:70:d6:34:f2:9f:75:9d:72:8b:49:2a:f0:1e:
c3:5b:b3:ca:b3:16:b5:65:2e:cd:58:aa:e5:9e:1e:8d:8b:19:
09:e5:1e:76:67:0c:2e:ae:05:06:cb:1e:8d:f8:a8:28:ed:2d:
c4:6b:2a:81:2d:90:74:2b:d2:97:06:06:b2:98:7a:20:c2:be:
d0:52:85:2b:b3:df:08:10:71:0a:84:e1:46:99:34:4a:3e:a1:
6d:d7:cd:5c:8d:b2:fc:0d:98:d5:4d:1b:07:08:c5:a0:9d:ba:
1b:e1:26:a4:de:c3:e5:c8:24:98:88:1f:4e:f2:d5:ee:12:26:
b5:c9:6e:52:ed:b9:dd:47:41:16:6f:e5:a0:44:a4:4c:63:0b:
b0:10:d7:59:cb:ad:54:5f:f8:d7:eb:36:e2:8a:7a:e0:65:7a:
67:db:28:00:e9:79:67:56:ca:8f:14:cc:1c:d5:d8:41:15:4a:
67:6a:7b:ff:be:74:06:f2:f5:4c:25:a0:cf:b5:29:10:f2:e1:
41:94:de:31:5c:b6:47:2b:bd:35:b7:a4:98:d8:94:a9:2d:34:
f2:e7:d6:a3:8c:ea:6b:ef:66:49:c0:25:7c:f3:10:88:86:01:
f3:8e:80:41:4a:64:ab:80:49:f6:50:e9:d3:de:ad:3d:a1:e5:
57:94:99:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvzBL55gcogpkY2hJPA1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjYwNDE3MTQwMTMxWhcNMjYwNDE4MTQwMTMxWjAzMTEwLwYDVQQD
EyhhMTJhNDMzOWUwNjI2N2M0OWZlYTU4MDZhYTg2OTYzYWE3Y2VhNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj9KVwqkbw8YuMxUWzekdzvYzRjz
fJJoeWUx2rdG+HTWHUNqEkz+C+c1yJ+vWtHuamYxPtO0QJARRIcJq3RDFX24SGf7
Qc+zTU9Dq4BvvWS1Fq4jrTEanlm1mA+wGMbyAyJN1BRZ0aVM62+N68ep9pduqPlG
14RCiSLAcWfef94ABOpE8v5FLTnYKjEv4EO4FpHmWOA/bVV0+qsxeY/mpIPyZ/Du
a0cjFCBUXuYTbudsrkfoQySSoVh6arC/woZrho12DaQxaYumM/lUKoOgDYh8htQU
QA3Tj+SbKfwaYU99CTpCiDWNcAG9YXarF645LmsnMiQ1fM0sTj/raJKDZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEqQzngYmfEn+pYBqqGljqnzqQHMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoJvYXpw
1jTyn3WdcotJKvAew1uzyrMWtWUuzViq5Z4ejYsZCeUedmcMLq4FBssejfioKO0t
xGsqgS2QdCvSlwYGsph6IMK+0FKFK7PfCBBxCoThRpk0Sj6hbdfNXI2y/A2Y1U0b
BwjFoJ26G+EmpN7D5cgkmIgfTvLV7hImtcluUu253UdBFm/loESkTGMLsBDXWcut
VF/41+s24op64GV6Z9soAOl5Z1bKjxTMHNXYQRVKZ2p7/750BvL1TCWgz7UpEPLh
QZTeMVy2Ryu9NbekmNiUqS008ufWo4zqa+9mScAlfPMQiIYB846AQUpkq4BJ9lDp
096tPaHlV5SZFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:06:26 2026 by rpki-client