Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: dle6zEayRZnm9zkA9fFaABLJO5SrTljTkivBY+CbEfU=
Subject key identifier: 8C:B0:06:4B:FB:5E:65:B0:E4:EB:C9:4E:1C:C9:51:A5:3D:84:44:CC
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019E1FECFCB72C124A43A8EEEE2556974F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 14BF
Signing time: Wed 13 May 2026 06:01:25 +0000
Manifest this update: Wed 13 May 2026 06:01:25 +0000
Manifest next update: Thu 14 May 2026 06:01:25 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: Okqwi7bwd0j56ZwWrSJQC08KAeKNkPWJdwNoGfB2z9M=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:fc:b7:2c:12:4a:43:a8:ee:ee:25:56:97:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: May 13 06:01:25 2026 GMT
Not After : May 14 06:01:25 2026 GMT
Subject: CN=8cb0064bfb5e65b0e4ebc94e1cc951a53d8444cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:6c:3e:bd:02:4c:8f:b4:42:fd:fd:e0:83:
7b:b0:6a:ad:2b:e6:4f:11:e2:ee:7f:69:23:fc:9d:
b8:dc:72:91:e7:74:90:84:04:61:39:e4:73:fc:ec:
fc:0c:5d:02:00:a0:8a:1d:e3:78:fb:a7:05:df:07:
ad:b8:80:2e:a0:ed:93:dd:0d:13:56:26:51:39:79:
61:d6:c8:67:56:3e:4e:ea:25:da:89:61:96:de:5d:
65:42:5c:90:34:10:d5:14:c4:46:a6:22:86:97:3b:
d0:ea:fb:a4:71:c2:9c:1e:ce:f2:fb:33:f9:79:07:
0f:8e:0e:02:58:85:3b:13:ea:ff:0b:f6:0d:f3:6e:
10:30:0d:29:29:1e:57:1d:99:8e:a1:0a:23:04:73:
45:ae:0b:27:91:7d:22:99:f8:1b:b7:78:aa:03:0f:
08:f1:09:cf:66:3f:0f:ed:c1:7e:c7:f4:af:ce:fd:
30:81:11:4c:8a:c5:7b:c7:52:5d:66:be:ff:77:07:
1f:76:3c:ae:cc:c3:9d:e8:24:17:7b:6a:96:c9:f8:
38:68:6c:39:dc:1e:c3:4a:88:77:b4:61:06:1f:d7:
50:9f:b4:32:1d:48:e1:44:d3:45:2e:2c:4f:48:cc:
28:dd:39:9f:d6:86:6a:1e:8d:b8:08:f4:a5:80:50:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:06:4B:FB:5E:65:B0:E4:EB:C9:4E:1C:C9:51:A5:3D:84:44:CC
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:77:7b:dd:d5:9f:28:df:10:8a:3e:ec:55:c1:94:2d:5b:2d:
85:4c:25:bd:a6:93:2a:cd:a4:37:d7:db:a4:87:ce:97:e9:49:
ec:10:9f:5e:95:56:ea:cb:4e:91:fa:be:f0:a9:37:48:3b:8a:
52:98:44:24:d1:2e:a8:b4:2f:65:19:49:ac:2c:f7:1f:31:0d:
6f:5b:16:4e:cd:b4:89:70:50:b1:29:a2:d3:4f:b9:14:60:a8:
4e:75:d4:45:c5:76:2f:ac:20:9f:53:73:81:cb:54:ad:96:81:
ca:ee:6d:a2:c4:5e:49:0e:34:8f:ce:2d:55:fc:3e:07:92:f5:
21:2a:77:1c:68:21:d4:b2:98:9c:9a:1c:95:c0:4a:eb:93:8f:
d7:58:a7:b5:7e:64:fe:45:1c:2f:25:92:6e:fc:01:34:93:99:
7b:17:2b:06:41:2e:42:ed:19:0d:a1:45:b4:43:3b:96:40:c1:
3b:55:e7:c5:26:76:5c:26:7d:2b:1e:27:87:9c:24:83:97:3b:
38:5e:48:b1:d7:4f:9a:b0:4a:00:f8:f6:f5:66:bd:04:5e:47:
67:f2:3e:07:f3:a8:22:c0:3c:76:ab:87:0d:1c:88:a8:a8:5d:
06:b4:ff:b0:03:8f:d1:db:f7:e3:5d:1d:ff:7e:fb:85:3d:be:
a8:ec:fa:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7Py3LBJKQ6ju7iVWl09/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw
MWRmNzAwHhcNMjYwNTEzMDYwMTI1WhcNMjYwNTE0MDYwMTI1WjAzMTEwLwYDVQQD
Eyg4Y2IwMDY0YmZiNWU2NWIwZTRlYmM5NGUxY2M5NTFhNTNkODQ0NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+lsPr0CTI+0Qv394IN7sGqtK+ZP
EeLuf2kj/J243HKR53SQhARhOeRz/Oz8DF0CAKCKHeN4+6cF3wetuIAuoO2T3Q0T
ViZROXlh1shnVj5O6iXaiWGW3l1lQlyQNBDVFMRGpiKGlzvQ6vukccKcHs7y+zP5
eQcPjg4CWIU7E+r/C/YN824QMA0pKR5XHZmOoQojBHNFrgsnkX0imfgbt3iqAw8I
8QnPZj8P7cF+x/Svzv0wgRFMisV7x1JdZr7/dwcfdjyuzMOd6CQXe2qWyfg4aGw5
3B7DSoh3tGEGH9dQn7QyHUjhRNNFLixPSMwo3Tmf1oZqHo24CPSlgFCx8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIywBkv7XmWw5OvJThzJUaU9hETMMB8GA1UdIwQY
MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt
OTk1NTMxODYyNDE5LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5
LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnd73dWf
KN8Qij7sVcGULVsthUwlvaaTKs2kN9fbpIfOl+lJ7BCfXpVW6stOkfq+8Kk3SDuK
UphEJNEuqLQvZRlJrCz3HzENb1sWTs20iXBQsSmi00+5FGCoTnXURcV2L6wgn1Nz
gctUrZaByu5tosReSQ40j84tVfw+B5L1ISp3HGgh1LKYnJoclcBK65OP11intX5k
/kUcLyWSbvwBNJOZexcrBkEuQu0ZDaFFtEM7lkDBO1XnxSZ2XCZ9Kx4nh5wkg5c7
OF5IsddPmrBKAPj29Wa9BF5HZ/I+B/OoIsA8dquHDRyIqKhdBrT/sAOP0dv3410d
/377hT2+qOz6lg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:41:22 2026 by rpki-client