Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: q8LpDhYa/Zfujz4CErOs4bcJXDRwYe+5nT+kCsPCAww=
Subject key identifier: EB:36:17:55:DA:9B:A3:70:80:77:36:7F:FA:9C:2E:74:DA:BD:B0:8D
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 01A08CE8C1AD59394243D1F7128509CDC704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 20:00:59 +0000
Manifest this update: Thu 10 Sep 2026 20:00:59 +0000
Manifest next update: Fri 11 Sep 2026 20:00:59 +0000
Files and hashes: 1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: tJIhI7CAisT7Wb6/ScuIlU6MOKzQfVJZ0bn7uGA4Eck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:c1:ad:59:39:42:43:d1:f7:12:85:09:cd:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Sep 10 20:00:59 2026 GMT
Not After : Sep 11 20:00:59 2026 GMT
Subject: CN=eb361755da9ba3708077367ffa9c2e74dabdb08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:ee:af:7a:64:2a:02:5d:40:52:d2:ae:31:
00:b6:fe:06:c2:2f:4b:eb:7d:2c:66:19:91:c2:5d:
77:c4:69:15:2e:a7:7c:bc:f4:67:d8:28:fd:05:c3:
b7:7e:8e:2a:73:59:9a:6b:01:96:08:04:d5:7b:76:
dd:5a:b0:09:7f:9b:8a:5b:14:02:78:77:01:47:31:
2d:2d:ba:22:1f:a9:36:c9:a2:27:85:60:76:94:ea:
8b:32:c4:70:60:7f:9a:5f:23:28:64:f3:85:07:6d:
8b:84:68:59:3c:5e:b2:a1:a9:d5:a1:b8:16:31:e3:
19:40:86:72:f8:f5:70:95:f6:9e:d3:81:a5:c4:a7:
b0:16:e1:87:5a:2d:d2:b6:60:39:dd:e9:a6:8f:8f:
a0:f8:67:a9:03:3e:18:3f:25:55:ec:b2:5a:5f:7c:
3d:98:ba:93:0a:92:f0:7f:cc:f3:db:10:d0:8a:10:
ae:b3:03:65:bf:5c:50:19:69:7c:f6:2e:c8:62:b0:
3d:bf:3e:75:4c:64:4e:73:3c:96:b4:99:93:82:e9:
2f:37:38:5e:fb:5d:7f:e8:cb:af:07:e1:89:bc:ae:
dd:38:12:77:38:0d:95:cf:f1:95:b5:ca:2f:27:75:
5a:ef:2b:24:64:86:18:db:ec:d3:cf:a2:47:87:6b:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:17:55:DA:9B:A3:70:80:77:36:7F:FA:9C:2E:74:DA:BD:B0:8D
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:07:7d:60:e3:bd:db:e9:0c:d8:84:66:d8:3f:a1:62:46:dc:
c1:ef:0a:12:4a:d3:b6:bd:9f:39:db:e6:43:bf:e1:f4:17:ea:
49:80:c6:1c:20:51:09:f5:a1:e7:cc:1e:2c:2f:57:8f:e5:f9:
94:bd:83:9d:4a:81:97:0d:33:6b:15:82:b9:c1:c7:48:da:99:
43:a0:1a:e1:cd:76:4f:be:7e:b9:99:84:d8:fc:ae:dd:76:c3:
55:af:2e:c6:da:44:66:f0:aa:cb:d5:07:fd:7c:cc:88:a3:7c:
8e:0f:76:aa:b3:88:a8:0d:e4:04:a8:ee:6e:d5:eb:45:1b:5a:
6b:1b:01:d0:e3:f8:5e:c8:b4:05:d2:29:58:16:fa:1b:a1:bb:
a8:24:a4:25:74:d8:4a:77:cb:a8:ef:26:d8:e6:f5:9b:e6:2d:
ff:fd:e9:60:19:41:36:3f:12:85:2e:85:cb:4e:30:80:72:0b:
e2:e9:ab:f2:99:7e:f6:c6:0f:2a:28:fc:1c:b8:00:b6:3d:15:
67:ca:62:2b:26:29:0d:95:35:07:40:e6:98:93:e2:9f:b7:25:
b7:c7:3a:00:5e:c4:1e:43:90:94:42:13:fe:79:4d:c2:b3:ad:
3f:35:07:e1:ff:df:e4:87:27:5f:74:a7:17:1c:2c:e0:a2:cf:
50:9e:4b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6MGtWTlCQ9H3EoUJzccEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjYwOTEwMjAwMDU5WhcNMjYwOTExMjAwMDU5WjAzMTEwLwYDVQQD
EyhlYjM2MTc1NWRhOWJhMzcwODA3NzM2N2ZmYTljMmU3NGRhYmRiMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxDur3pkKgJdQFLSrjEAtv4Gwi9L
630sZhmRwl13xGkVLqd8vPRn2Cj9BcO3fo4qc1maawGWCATVe3bdWrAJf5uKWxQC
eHcBRzEtLboiH6k2yaInhWB2lOqLMsRwYH+aXyMoZPOFB22LhGhZPF6yoanVobgW
MeMZQIZy+PVwlfae04GlxKewFuGHWi3StmA53emmj4+g+GepAz4YPyVV7LJaX3w9
mLqTCpLwf8zz2xDQihCuswNlv1xQGWl89i7IYrA9vz51TGROczyWtJmTgukvNzhe
+11/6MuvB+GJvK7dOBJ3OA2Vz/GVtcovJ3Va7yskZIYY2+zTz6JHh2stZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs2F1Xam6NwgHc2f/qcLnTavbCNMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAd9YOO9
2+kM2IRm2D+hYkbcwe8KEkrTtr2fOdvmQ7/h9BfqSYDGHCBRCfWh58weLC9Xj+X5
lL2DnUqBlw0zaxWCucHHSNqZQ6Aa4c12T75+uZmE2Pyu3XbDVa8uxtpEZvCqy9UH
/XzMiKN8jg92qrOIqA3kBKjubtXrRRtaaxsB0OP4Xsi0BdIpWBb6G6G7qCSkJXTY
SnfLqO8m2Ob1m+Yt//3pYBlBNj8ShS6Fy04wgHIL4umr8pl+9sYPKij8HLgAtj0V
Z8piKyYpDZU1B0DmmJPin7clt8c6AF7EHkOQlEIT/nlNwrOtPzUH4f/f5IcnX3Sn
Fxws4KLPUJ5Lgg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:00:28 2026 by rpki-client