Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: b00RtvqJXoLc7fSPI4GVLzX90kJuzVhDVprn2t8tdxc=
Subject key identifier: 74:8D:92:03:63:38:08:89:BF:0D:B9:68:F7:BE:EE:AF:F2:0C:85:F1
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 01A1859B3EBB909B9B7F597019C964D88D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1AC7
Signing time: Thu 29 Oct 2026 03:01:46 +0000
Manifest this update: Thu 29 Oct 2026 03:01:46 +0000
Manifest next update: Fri 30 Oct 2026 03:01:46 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: bFMi8qhbOxR0I0nRWU+VAATvydpb8jQKy6dcuoLoTcM=)
2: Z7mqkIqdlU3VDKLWA2pLlLldZVY.roa (hash: AulnqlMbCQ8itaRqVZyz6vFmxmiNQwbZYh/gOD25KBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:3e:bb:90:9b:9b:7f:59:70:19:c9:64:d8:8d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Oct 29 03:01:46 2026 GMT
Not After : Oct 30 03:01:46 2026 GMT
Subject: CN=748d920363380889bf0db968f7beeeaff20c85f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:bd:ec:d5:00:0f:23:01:19:57:fe:24:18:
28:2d:38:9a:46:7d:f9:84:91:4e:15:5d:24:8b:f6:
74:6d:4b:d2:95:1a:ea:b6:67:ce:85:2b:f0:a5:0d:
8c:52:8b:51:f4:85:2b:a0:50:9a:c7:75:87:b7:12:
31:6b:15:01:c7:4e:d0:d2:d4:00:51:4a:a9:f5:d6:
9a:ca:c8:4c:b4:30:f3:30:c0:6f:de:90:81:d1:dd:
e8:d2:1c:49:31:10:7e:4f:24:ec:bc:4d:c9:a5:77:
86:69:76:d6:2e:8e:5f:45:9d:aa:3b:b2:12:b2:e9:
74:43:a8:f2:9c:c2:a2:2e:56:6b:ea:9e:7d:f4:e0:
d7:be:54:ab:ab:2a:3b:0d:04:f2:42:62:bb:d4:2b:
ca:d6:c4:c6:5a:73:df:d9:84:e2:58:53:88:e9:3a:
95:8e:50:d2:e4:ec:3f:e7:e0:71:22:79:00:02:64:
75:db:0c:4d:ae:49:e4:05:f2:76:24:a0:26:fe:c1:
b0:6c:ca:d6:74:06:37:a7:42:e0:02:6d:5a:ee:a0:
95:95:c4:73:2a:2f:80:ee:16:19:ee:c9:70:90:37:
d4:8c:e3:1b:f8:f1:59:cb:01:6b:74:8c:94:ff:d5:
2d:59:ac:54:10:53:e6:20:2e:f1:d3:b4:d8:c0:0f:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8D:92:03:63:38:08:89:BF:0D:B9:68:F7:BE:EE:AF:F2:0C:85:F1
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:cd:6c:34:60:3b:bf:08:d4:64:f6:f3:3d:1a:06:0a:2a:
f3:07:bb:c4:c9:4b:9c:3f:61:79:04:3a:45:ac:ad:47:10:13:
66:29:03:0b:9c:bc:c2:bf:ff:0d:95:a7:7d:11:0d:42:64:14:
b1:92:59:35:ae:21:31:ff:73:1c:ae:82:41:60:7f:0f:4e:2e:
b6:64:40:b4:ee:b7:3f:b7:22:69:ad:7d:f6:f2:93:d9:7c:93:
8b:e7:79:04:ed:46:37:48:4c:94:19:57:14:50:bb:a1:98:fe:
dd:f9:c5:e2:3e:d4:17:1b:cc:b8:de:7c:f7:f8:bd:65:53:77:
df:67:a2:60:90:db:1f:c4:26:64:b9:b2:65:7c:14:69:cd:ed:
ed:8e:ab:14:ce:4f:2c:6d:97:00:fd:1a:73:4b:7f:9a:32:bb:
41:ec:2b:00:9c:12:fc:b6:a8:24:a2:1e:e5:0d:fc:45:d7:5e:
d1:e2:f6:13:df:4a:77:69:91:da:8d:38:9f:d1:2d:ad:83:0b:
70:fe:df:81:ae:f7:e3:2f:50:c5:98:bd:82:1e:49:63:29:6d:
20:fd:43:f3:80:ba:3c:c3:9a:29:5d:d2:d2:8b:f5:98:64:d2:
7a:12:4e:dc:a3:bb:02:7e:d5:33:b5:bb:eb:4d:75:dc:52:5c:
c5:6d:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:55:47 2026 by rpki-client