Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: ticYSlWFwG3R7nxBsky50WJAtJKV4vg5UlPJKci3TzI=
Subject key identifier: 60:5F:55:29:37:A2:8A:A4:BB:F2:E5:9A:85:5B:AA:09:C8:2B:43:27
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 01A0408525E2425697B6B5223D602F95CA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 15D9
Signing time: Thu 27 Aug 2026 00:01:02 +0000
Manifest this update: Thu 27 Aug 2026 00:01:02 +0000
Manifest next update: Fri 28 Aug 2026 00:01:02 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: 35Cx3KQXrYJy8CpKIKkpcpK0WRftVcKC7gngBA9+QEw=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:25:e2:42:56:97:b6:b5:22:3d:60:2f:95:ca:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Aug 27 00:01:02 2026 GMT
Not After : Aug 28 00:01:02 2026 GMT
Subject: CN=605f552937a28aa4bbf2e59a855baa09c82b4327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:0d:79:76:13:32:22:75:e5:77:fa:e1:50:
63:01:38:eb:21:30:1a:2a:e2:86:f7:41:cd:02:0c:
64:13:c0:30:80:63:b3:2f:4e:51:79:61:83:86:31:
c0:4a:19:1e:f4:4b:0a:dc:4f:a9:68:8d:6c:f5:e7:
41:55:4f:f3:52:01:f3:bd:af:29:a2:80:41:c1:97:
7c:2d:d5:8c:7d:6a:7a:3c:bd:ba:e2:9b:a0:ad:33:
4b:91:62:83:38:0a:fa:7d:b3:73:33:1c:bc:0f:b0:
b3:92:52:f9:47:76:89:32:72:06:f7:e3:51:07:1e:
67:a3:b5:18:4a:11:b1:ff:90:24:ba:81:f5:9f:0e:
40:be:f3:a6:45:a9:2c:41:4c:94:e4:b2:1f:75:88:
9b:46:3c:00:33:3f:7e:dd:9a:c8:86:3c:30:fb:a7:
3f:bb:9c:a0:61:a4:f4:e8:6a:10:5a:ec:76:ba:f4:
ef:aa:81:58:80:9b:ca:2c:b3:9f:b1:29:35:cf:a7:
d0:22:07:6a:6d:d9:04:5b:41:64:f4:e9:c7:7d:bf:
e0:38:a2:0e:e2:41:9f:06:a4:a0:98:5d:44:e3:de:
6f:1d:7d:52:24:9b:63:48:72:22:21:3f:2b:7e:cb:
ad:6b:25:14:60:74:4c:42:1b:0f:ab:d4:e6:7d:2b:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:55:29:37:A2:8A:A4:BB:F2:E5:9A:85:5B:AA:09:C8:2B:43:27
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9c:b2:39:bf:b9:12:79:90:e2:a3:93:a0:ba:cd:46:24:34:
1e:98:6b:5a:8c:ae:86:59:51:6e:d8:79:5e:b8:88:67:ec:47:
69:90:6a:0e:0b:cc:28:55:57:c3:e1:92:88:54:b3:a9:36:49:
14:24:8a:cf:56:ad:8b:63:aa:36:a5:b7:1f:8a:11:07:e9:ad:
63:19:93:98:28:46:03:bb:52:9e:2d:bc:ac:ba:eb:ff:38:cb:
93:74:be:47:d1:c3:aa:37:e2:d0:95:01:99:2b:d9:9e:a5:40:
83:8d:d1:09:ac:33:b5:bc:3d:0f:15:d4:8d:10:dd:86:aa:f0:
e2:2c:6f:b1:20:ea:d0:d2:16:2e:81:d4:a8:b4:70:9a:62:8d:
c0:07:dc:48:e4:2e:62:c5:bb:11:b1:b7:a3:ae:d6:50:ab:ff:
bc:1e:c4:38:a3:9d:08:2b:c1:15:91:6a:14:db:e8:a2:a5:50:
9f:23:51:f2:84:11:60:08:3f:eb:ba:55:c9:e8:73:23:9d:60:
09:e0:fe:f3:9d:6f:fe:e2:46:ef:7a:cd:8e:73:2e:8c:61:43:
2d:24:46:79:f3:29:27:52:f9:74:c6:ea:33:de:f6:37:36:73:
a0:0d:23:89:49:22:eb:16:c6:4b:a1:74:01:3e:b2:fd:8a:1b:
b1:d2:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:22 2026 by rpki-client