Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: OnmfPLMErHE6xwjHHXU2FuelUd/z55ajgB2braJ4//w=
Subject key identifier: C5:5F:47:C5:81:C8:17:52:B1:3C:16:9A:49:12:96:D4:D4:9E:5A:FB
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019D39408F62A99675E1CE135B04CAD218A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: AQXF3Wu1mtjNZdEnz2cLJXOipwAwmKYklAv3QCivOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8f:62:a9:96:75:e1:ce:13:5b:04:ca:d2:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=c55f47c581c81752b13c169a491296d4d49e5afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:90:16:bb:50:b9:79:2c:1e:59:66:df:39:
e1:d5:0c:8f:39:1a:39:d6:84:b1:97:7a:1e:d3:00:
7f:27:38:89:14:5c:77:2b:ec:da:f1:89:7a:f9:cd:
3a:cf:9b:ee:59:b4:92:7e:a3:87:be:c2:a1:91:70:
86:85:60:20:3f:e5:e0:92:76:fc:db:cc:65:10:21:
32:54:70:7b:3a:ce:18:9d:a5:d6:17:68:04:c7:4e:
2a:72:53:1e:41:f7:52:12:02:7b:ea:eb:51:44:f1:
cb:86:ce:f3:d2:28:42:f7:48:68:ee:40:08:37:90:
18:81:66:8a:c8:0a:81:1a:e5:73:b0:91:b2:8a:9c:
e6:0e:19:2c:00:f2:02:4e:c4:df:ce:3e:cb:55:2b:
10:47:aa:ff:01:87:c0:97:3d:24:3f:79:92:df:29:
b7:48:f6:ee:91:41:8f:da:8a:f8:76:90:4c:cd:fb:
cb:6a:68:e3:ba:cb:da:50:d8:f8:41:41:f5:2a:d1:
53:f2:b0:c7:88:f1:29:70:0a:93:73:f6:0f:11:3f:
74:24:f8:97:df:6a:25:91:b6:02:87:23:f4:c6:d2:
c3:47:ca:56:54:c0:ea:17:aa:1c:81:7f:de:5d:0c:
fb:72:98:0c:f4:88:05:52:59:49:05:39:6b:36:c3:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:47:C5:81:C8:17:52:B1:3C:16:9A:49:12:96:D4:D4:9E:5A:FB
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:56:f8:a0:e6:8e:23:38:c3:78:92:0e:c6:37:89:88:1a:4a:
a3:db:dd:67:91:c0:78:97:1d:6d:f0:2c:79:b6:7d:af:d1:a8:
aa:b1:6a:f5:92:86:a1:4e:c2:e3:44:b1:ed:55:3e:9a:0a:40:
1c:2f:88:8b:0f:8d:0a:1f:99:ae:16:32:c4:f2:3e:27:c9:45:
ff:c2:77:90:75:68:ff:aa:5d:61:4a:e8:13:ab:70:b9:57:29:
54:2d:c8:e1:cb:4b:a3:03:5b:c2:41:18:e2:cc:dc:cd:06:1a:
87:3f:31:33:e6:84:2d:52:b1:43:f3:b8:1e:6d:5b:cd:34:75:
38:32:6b:73:31:16:ad:03:80:1c:3c:0f:ed:22:f7:a3:e3:97:
1a:53:a7:6c:64:79:bc:ca:60:79:fa:6b:bf:13:fc:d8:7d:f2:
ce:cf:42:2d:f6:d5:a1:c8:be:c3:69:25:ae:97:70:5e:d3:be:
73:34:9d:5d:29:ea:1b:cb:b7:1b:c9:86:d3:59:61:aa:51:68:
99:3a:c8:50:ca:f8:26:82:f9:4a:b8:db:52:d6:f3:68:b5:27:
62:b1:5c:bc:2c:6b:02:1d:b1:58:cc:d6:90:2b:2c:ca:18:50:
25:66:29:3c:23:9f:88:2d:05:ca:65:c4:7c:93:ed:dc:13:af:
40:4d:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:07 2026 by rpki-client