Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: VlsLoMvEtCLF1JQ5hqX6eAkvVIyaheGQuLgiHvsIGd8=
Subject key identifier: FD:30:AC:E8:38:37:06:99:7E:06:FA:66:4B:40:A3:31:34:9F:EC:1E
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019E2994F6745CAADD14347446452365604D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 14C4
Signing time: Fri 15 May 2026 03:01:28 +0000
Manifest this update: Fri 15 May 2026 03:01:28 +0000
Manifest next update: Sat 16 May 2026 03:01:28 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: zE5ZtKQQvcUUzq//HDAcr/mMohdfG5LfZf8ZO7zfDSo=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:f6:74:5c:aa:dd:14:34:74:46:45:23:65:60:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: May 15 03:01:28 2026 GMT
Not After : May 16 03:01:28 2026 GMT
Subject: CN=fd30ace8383706997e06fa664b40a331349fec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:97:ae:76:61:4b:59:c0:64:d1:ad:bf:a5:
2f:0b:8e:05:a5:1c:51:05:39:54:c9:53:9c:ee:ef:
ed:9d:88:83:38:ee:54:45:f3:52:50:78:47:c8:e2:
3e:a2:2b:ed:e8:8f:54:85:f2:64:0a:02:21:e4:ef:
4e:81:1d:6f:ab:bb:ff:7f:62:83:11:a1:86:ab:89:
b7:97:ab:86:96:6d:f6:1f:51:e5:17:37:9f:39:51:
4d:8b:36:da:92:67:c4:39:9c:08:6a:c5:a8:08:53:
a9:91:ec:5a:3d:23:38:33:bd:21:89:83:38:8d:64:
c3:4c:a9:fe:c3:34:ca:83:98:98:89:ed:2e:aa:f6:
62:e0:57:a5:fa:bc:23:1d:c1:1a:0e:2c:90:0a:d5:
31:70:38:96:bc:8c:28:8f:12:6b:14:46:5f:49:9f:
22:dd:c1:88:43:ba:59:d4:e7:5c:e0:56:6a:72:a5:
c7:ed:e0:2d:ad:0f:e5:d0:d7:8c:db:57:ae:a7:da:
e4:fd:d8:cd:62:67:38:6e:67:87:67:2d:2e:73:78:
85:20:8f:e5:8a:a2:a7:bf:74:ef:85:da:e8:0a:ad:
3b:2e:11:b9:73:33:ec:1c:8e:07:2e:af:5e:2f:e8:
c0:be:06:92:04:6d:f9:b6:f1:1c:5b:35:f0:9d:72:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:30:AC:E8:38:37:06:99:7E:06:FA:66:4B:40:A3:31:34:9F:EC:1E
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:80:d8:48:ac:24:9b:c8:17:d5:21:c1:f6:08:c9:80:a2:07:
5c:95:fe:36:2a:0c:28:e9:0f:e6:76:e8:97:00:55:e6:29:de:
ca:21:a4:f4:e1:3f:b0:f5:d5:b2:53:c2:2d:5d:a2:b9:80:13:
7b:32:d2:91:6e:fd:26:61:2f:e6:3b:c0:f3:00:83:6e:e0:6d:
3f:cb:7a:8a:89:8f:1a:55:dc:23:1c:37:ac:8d:8f:fb:5a:11:
75:60:83:bc:a4:9d:62:dd:a0:3d:6d:07:ef:05:3a:84:f6:c7:
83:c8:2a:ae:f3:51:39:0c:df:59:33:7d:be:f0:32:bc:20:e6:
fc:db:7c:bd:59:32:07:9c:59:38:f0:ef:9a:21:43:61:11:36:
dc:3a:b5:56:57:e8:50:0d:29:97:58:e0:77:a5:46:17:46:73:
32:19:2b:06:ef:b8:e9:ab:a9:a7:b1:54:82:1b:2e:86:17:16:
c5:48:5f:47:d3:96:bf:e7:ff:66:37:2d:7c:ee:87:90:07:99:
0a:00:69:fa:13:48:ee:d0:4d:6e:1a:23:f1:d9:59:a1:58:42:
bc:06:5d:99:d9:fb:df:ee:da:56:14:0f:7c:46:e4:b9:05:c9:
46:d5:73:84:9a:1e:be:c1:8b:d8:12:af:79:5f:65:6e:a5:dd:
10:47:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:18:23 2026 by rpki-client