Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: tZ4w9KiPlsPvD0pV+xbqPve2SM/q4ex/o4wSHoRR1Ds=
Subject key identifier: 0D:93:D2:CC:81:5C:04:66:97:63:52:72:39:DD:03:33:7E:22:E0:0A
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019FA14DEEB46C15C683C97C75FDE0A9FC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 19CC
Signing time: Mon 27 Jul 2026 02:01:06 +0000
Manifest this update: Mon 27 Jul 2026 02:01:06 +0000
Manifest next update: Tue 28 Jul 2026 02:01:06 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: ajyi/kYpL3jkeIHpfoOb/EqHHxJwh9DOiyED8k8tEOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ee:b4:6c:15:c6:83:c9:7c:75:fd:e0:a9:fc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Jul 27 02:01:06 2026 GMT
Not After : Jul 28 02:01:06 2026 GMT
Subject: CN=0d93d2cc815c04669763527239dd03337e22e00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:56:c3:e3:47:86:a6:1f:3c:ab:3d:da:e3:
ba:37:57:17:ae:83:b1:0d:55:52:14:78:25:1c:84:
9d:0a:6a:9e:16:16:62:6c:10:6e:b0:74:06:33:c6:
26:49:14:02:bc:cb:e7:fd:38:24:3a:fe:5f:d4:11:
14:82:f7:08:57:49:31:80:6b:82:6a:18:0b:c0:37:
ce:a1:dd:63:78:c1:11:a5:af:77:7b:f4:10:1a:f9:
83:d6:9e:6a:1a:44:4f:4a:47:10:3e:a0:2d:b0:61:
b9:b0:6c:c7:89:45:e1:15:00:ea:c6:93:2d:ab:ff:
94:5f:10:d4:46:70:9d:cb:79:5d:43:bd:b0:ea:a3:
14:e8:a2:e8:cf:c2:ce:9e:36:c1:77:3f:04:63:90:
e7:36:c0:9e:0b:dc:5f:6e:7a:de:e6:34:1b:4a:6d:
50:d9:bf:ab:3c:a4:18:3d:c3:2b:55:df:44:e6:38:
a3:d4:f3:5c:e6:27:d3:e2:2c:2d:bc:42:44:5f:74:
2f:42:d8:4e:85:19:a8:02:48:5e:07:dd:ea:cd:44:
f2:c0:30:ee:07:bf:19:b3:a4:45:45:8e:19:4c:8a:
66:3a:62:fc:c7:d4:15:a9:bf:a8:6d:e2:9f:8e:6d:
58:15:9b:a8:32:3f:1c:62:0b:09:0e:9a:37:7e:66:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:93:D2:CC:81:5C:04:66:97:63:52:72:39:DD:03:33:7E:22:E0:0A
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:5c:65:ef:f2:97:c1:0a:6f:b9:e3:64:f5:ad:55:a6:9f:
19:d8:10:89:1c:38:75:00:cf:c2:da:14:b5:f8:25:23:62:dd:
57:c8:52:1a:fa:64:77:db:dd:6f:46:10:2a:75:c4:9f:d4:a6:
02:fd:34:d1:a8:8b:00:a3:de:a5:9c:a1:84:5a:81:58:0c:2f:
40:2a:92:49:27:1e:21:0a:97:e6:49:e6:69:fc:c5:68:42:a9:
5c:b6:d0:cd:89:8c:32:e2:e0:a8:10:3e:64:fe:44:d0:b5:51:
60:c5:14:11:ae:80:7e:92:73:09:b7:4d:ec:a5:e0:70:b5:b8:
be:96:56:cf:b1:1f:fa:58:d6:c6:0b:db:65:44:aa:7e:a9:a9:
ae:b6:d7:8c:72:5f:a1:b4:e0:57:3a:cc:ef:b6:24:67:60:34:
97:76:fc:46:69:01:43:d1:07:42:32:4f:9a:74:29:56:95:7b:
f3:ec:7b:47:88:6d:0d:fc:31:9c:4f:5b:4e:fe:85:16:88:10:
39:4c:e1:34:7b:b2:39:2e:dc:b6:8d:a3:ff:3b:24:47:74:5e:
86:f5:e2:95:e2:5c:be:28:ef:ee:2e:8c:bc:b7:e2:d4:06:a3:
7f:d9:f1:c7:58:de:41:59:80:79:76:05:46:77:c8:3f:6a:67:
d3:d5:da:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTe60bBXGg8l8df3gqfxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjYwNzI3MDIwMTA2WhcNMjYwNzI4MDIwMTA2WjAzMTEwLwYDVQQD
EygwZDkzZDJjYzgxNWMwNDY2OTc2MzUyNzIzOWRkMDMzMzdlMjJlMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZBWw+NHhqYfPKs92uO6N1cXroOx
DVVSFHglHISdCmqeFhZibBBusHQGM8YmSRQCvMvn/TgkOv5f1BEUgvcIV0kxgGuC
ahgLwDfOod1jeMERpa93e/QQGvmD1p5qGkRPSkcQPqAtsGG5sGzHiUXhFQDqxpMt
q/+UXxDURnCdy3ldQ72w6qMU6KLoz8LOnjbBdz8EY5DnNsCeC9xfbnre5jQbSm1Q
2b+rPKQYPcMrVd9E5jij1PNc5ifT4iwtvEJEX3QvQthOhRmoAkheB93qzUTywDDu
B78Zs6RFRY4ZTIpmOmL8x9QVqb+obeKfjm1YFZuoMj8cYgsJDpo3fmZYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2T0syBXARml2NScjndAzN+IuAKMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP1cZe/y
l8EKb7njZPWtVaafGdgQiRw4dQDPwtoUtfglI2LdV8hSGvpkd9vdb0YQKnXEn9Sm
Av000aiLAKPepZyhhFqBWAwvQCqSSSceIQqX5knmafzFaEKpXLbQzYmMMuLgqBA+
ZP5E0LVRYMUUEa6AfpJzCbdN7KXgcLW4vpZWz7Ef+ljWxgvbZUSqfqmprrbXjHJf
obTgVzrM77YkZ2A0l3b8RmkBQ9EHQjJPmnQpVpV78+x7R4htDfwxnE9bTv6FFogQ
OUzhNHuyOS7cto2j/zskR3RehvXileJcvijv7i6MvLfi1Aajf9nxx1jeQVmAeXYF
RnfIP2pn09Xaww==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:20 2026 by rpki-client