Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: RECxKmLMKZGHaxy5egD+mwIu4//A6Y4DOUxjIi6rD8s=
Subject key identifier: 7B:15:8D:4F:75:E0:1A:0E:7A:C7:DD:53:3B:B7:E4:44:0D:A0:60:42
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019D30744424EC83F2F92C193DD195A7779D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 1443
Signing time: Fri 27 Mar 2026 18:00:19 +0000
Manifest this update: Fri 27 Mar 2026 18:00:19 +0000
Manifest next update: Sat 28 Mar 2026 18:00:19 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: rboE2etf2NE04AJeSD85eFK+EtYuvOeBamap4sOexdU=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:74:44:24:ec:83:f2:f9:2c:19:3d:d1:95:a7:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Mar 27 18:00:19 2026 GMT
Not After : Mar 28 18:00:19 2026 GMT
Subject: CN=7b158d4f75e01a0e7ac7dd533bb7e4440da06042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:c3:b0:6d:7f:82:ba:37:93:8d:d6:2a:01:
b0:da:7f:cc:5c:b2:6d:51:87:e9:df:7f:ee:03:a1:
17:b7:c6:51:0d:c8:70:b3:26:63:f0:48:18:c4:95:
de:41:6a:f9:56:42:a5:61:e0:85:34:3f:39:00:e7:
1d:d1:31:a5:67:3c:ff:2f:8c:fc:8a:ae:1d:77:a5:
a2:b2:fb:6a:2a:e4:8a:05:5e:11:2f:b6:8c:59:4a:
df:a5:b8:c7:5d:ed:4c:f3:14:b2:e4:a9:6b:cd:3a:
34:d8:e3:14:b2:b3:91:5e:6b:f9:61:4b:cc:90:43:
0f:22:a0:9f:29:63:81:7d:60:14:d5:f2:6f:94:50:
ee:1e:d1:c1:91:44:ec:68:53:4b:44:7c:6b:bd:95:
cc:be:c3:cc:72:40:ad:af:79:01:9b:8c:73:0a:98:
69:84:88:fa:86:3d:38:c1:5a:ed:6e:5e:2d:59:5a:
43:40:09:8d:99:f2:4f:59:9a:41:82:b4:d1:7e:8e:
1c:a5:53:45:46:05:01:d9:f3:ca:eb:92:67:ac:fd:
c5:23:de:c8:e1:e5:7c:c3:c4:55:25:cd:9d:fe:2d:
00:d3:f7:1d:75:1f:a2:b5:7c:fa:11:a3:13:20:9a:
e9:b5:10:d1:50:a1:21:7e:d1:8f:f0:2e:0d:e5:70:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:8D:4F:75:E0:1A:0E:7A:C7:DD:53:3B:B7:E4:44:0D:A0:60:42
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a1:37:b4:30:67:93:3e:87:15:f7:b0:85:fc:bb:db:37:58:
82:1f:fb:a3:84:b1:2e:21:5e:d0:b1:02:13:35:09:23:3f:6c:
df:3f:18:1d:b5:96:0b:c8:93:34:21:8a:99:b2:b4:00:8b:7e:
10:0f:8b:b7:4e:59:96:1d:8d:b6:21:57:ef:43:e8:43:d3:7c:
0b:1e:00:fa:52:f4:18:ec:94:a8:16:1d:36:7b:e4:f3:dd:27:
14:7a:19:4f:f2:2c:78:26:49:b1:a4:53:0f:33:a4:3d:36:1d:
83:5e:4d:b2:08:92:f2:d6:bc:29:03:7d:41:c6:7b:c0:a5:e9:
df:2a:2c:16:68:d9:24:44:89:eb:16:54:36:b9:48:9c:61:59:
20:aa:27:1e:68:60:6c:a8:1e:21:5a:b8:a1:77:ec:3f:4d:7b:
9e:bf:e6:e0:fa:d2:1f:8d:44:f0:f0:34:36:1e:b3:df:3e:65:
b1:2f:0a:8e:f5:0b:80:db:88:10:70:db:a7:65:f1:1f:01:2a:
e8:51:8a:2c:dc:ef:fd:40:65:0c:a4:47:36:df:09:8c:ab:93:
a2:b1:43:50:75:13:ae:fb:d2:c2:f5:ba:f8:ac:45:4d:a7:a6:
29:70:e3:38:93:14:21:ec:3a:5a:1e:f4:41:e8:19:fc:99:e5:
2f:fb:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:25:46 2026 by rpki-client