Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: NGmU9Y3PjqArsPiAF+f3Fek5S4ZydVq/MaEIeSzOAWI=
Subject key identifier: FB:C6:25:98:06:B4:14:79:DF:3B:46:4C:F9:98:38:59:16:E7:83:D6
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019F1341083A998646303BE3BD40FB7D7E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 153D
Signing time: Mon 29 Jun 2026 12:00:56 +0000
Manifest this update: Mon 29 Jun 2026 12:00:56 +0000
Manifest next update: Tue 30 Jun 2026 12:00:56 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: nzuXgFozjPcCVChpTcDgUJMvL3L077tbR8r5/XxdXzc=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:08:3a:99:86:46:30:3b:e3:bd:40:fb:7d:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jun 29 12:00:56 2026 GMT
Not After : Jun 30 12:00:56 2026 GMT
Subject: CN=fbc6259806b41479df3b464cf998385916e783d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:ec:44:70:66:d3:70:3f:50:20:be:cf:2e:
89:40:5d:d0:2b:22:6c:04:0d:47:12:26:e6:41:69:
c5:a1:f7:a4:b9:3b:7b:1b:e8:19:0a:36:fe:fe:59:
4a:f9:b1:47:e5:65:4e:2f:c5:db:df:75:92:bf:73:
62:a9:e0:a1:01:37:3c:23:07:1d:01:f6:7f:76:ac:
a6:88:86:3d:5c:9b:e3:c9:be:8e:b0:1b:49:88:db:
81:f5:af:78:df:64:6d:c1:93:bb:3d:a0:f3:bf:5b:
d2:16:04:f1:cf:7e:76:12:2c:67:9f:8e:09:6e:60:
d9:6e:1e:af:fa:05:7e:05:4d:77:26:0a:50:ea:0a:
16:d8:13:e6:da:bd:d5:ff:6f:b5:49:f4:94:1f:11:
34:ea:9d:54:8d:ce:ed:a6:2b:8c:41:f3:39:29:61:
45:53:a1:82:4c:85:55:86:6f:5e:6e:f8:c6:e2:b1:
94:b9:c5:fc:5f:5e:42:fd:3d:bd:57:bf:1c:b6:91:
71:82:0e:5b:11:37:bf:6c:a8:39:20:69:51:9f:1e:
94:0c:c6:db:cc:06:3c:63:6a:2a:10:0e:3f:3f:b9:
a5:bf:b7:77:c5:b4:47:bc:af:0a:57:0d:5f:ca:be:
14:ce:82:ef:54:ca:42:0f:24:69:21:ad:18:16:d1:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:25:98:06:B4:14:79:DF:3B:46:4C:F9:98:38:59:16:E7:83:D6
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:74:4a:b6:45:d9:ef:e3:53:50:b5:e8:2c:82:57:25:9b:c0:
f3:e7:8c:e7:00:59:4c:d2:9c:e9:da:97:b2:9e:c3:e4:ed:04:
fe:65:66:e3:59:24:a1:d6:dd:e0:bd:82:bd:0b:3f:c7:0e:9e:
b5:8d:56:fb:68:95:dc:0f:df:19:3b:22:52:dd:61:fc:ba:0c:
e9:69:e5:d5:2d:aa:2b:95:aa:40:11:60:df:aa:78:d0:ff:f4:
24:a2:48:af:03:a3:5e:22:3e:94:cb:6e:3e:a9:52:53:07:8d:
2d:a0:af:07:c9:52:8e:ab:73:d0:0c:e8:f0:61:5e:04:19:c4:
82:3d:2b:a4:b9:f0:39:6e:64:4c:44:8e:17:0f:c5:86:50:b8:
a3:ce:2e:6f:2e:e7:d1:3c:18:ec:40:4c:72:5e:87:e9:a6:70:
f8:3a:0e:e1:f2:62:84:dc:f3:4b:88:ae:34:2b:7f:80:93:32:
bb:3a:1d:72:65:aa:4e:08:b7:2a:fc:29:b3:b8:77:7d:b4:ce:
16:ce:01:2b:37:29:e9:43:8e:f2:76:2a:25:bd:b2:7b:3b:0c:
21:c0:35:f5:2f:23:55:b5:de:c6:1c:a1:89:84:b3:6e:0f:79:
53:92:55:05:57:15:11:75:9c:8e:ea:98:dc:b9:cd:49:cd:83:
d3:5a:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:41:29 2026 by rpki-client