Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: /A2OJz04Gd8WjF2E6/c6Q7WHdUn3bhC0qvvD1o6tkDU=
Subject key identifier: 03:49:0D:96:26:0D:F8:68:C9:CE:60:BB:60:5A:29:0D:D3:83:DC:F9
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019D26CCB6D33B063EB8DE1F3D832566B712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 143E
Signing time: Wed 25 Mar 2026 21:00:43 +0000
Manifest this update: Wed 25 Mar 2026 21:00:43 +0000
Manifest next update: Thu 26 Mar 2026 21:00:43 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: 7rL43VkRwVIh5fZPrYX5cmO0jsAMxNO8TONhSTPZml0=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b6:d3:3b:06:3e:b8:de:1f:3d:83:25:66:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Mar 25 21:00:43 2026 GMT
Not After : Mar 26 21:00:43 2026 GMT
Subject: CN=03490d96260df868c9ce60bb605a290dd383dcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:fb:da:7b:88:32:24:39:e0:82:7b:47:a1:
53:62:75:fa:be:bd:75:84:da:9a:62:9a:a8:b3:28:
80:c1:5b:04:38:82:ce:3a:9d:34:81:38:3d:89:d9:
eb:ae:e6:7e:e7:31:b0:04:20:17:38:a7:ab:ea:2e:
ea:ce:6c:bd:8c:13:ff:57:67:eb:e5:fb:5c:b4:6f:
de:62:90:c5:74:b2:8c:55:e2:83:30:b2:fc:e2:67:
4a:f2:70:04:95:b2:48:07:81:6c:bd:30:2a:76:90:
8a:75:42:b0:42:1a:44:61:1b:e5:6e:89:2c:7a:79:
ec:b4:f4:2d:e2:86:f7:b1:09:2e:c3:bb:39:4d:20:
48:e5:9c:48:25:1d:08:b8:ea:56:48:97:ab:5c:a6:
c3:05:54:e6:88:8c:40:8c:c2:0e:0b:0f:92:01:93:
1e:05:a3:cb:9f:eb:17:84:dd:ba:c2:cb:c9:af:6d:
0c:49:74:3e:d4:5b:e3:a3:2b:ad:67:31:2e:e6:39:
37:a4:db:da:78:34:bf:38:69:88:b8:5f:da:8c:28:
4b:77:1b:85:91:a2:10:4b:d5:ae:c0:66:21:80:5a:
67:f9:f6:4b:46:40:ad:2d:6b:dd:69:5e:c5:37:5a:
55:8f:d7:05:7b:55:ff:cf:1c:ac:57:89:83:42:70:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:0D:96:26:0D:F8:68:C9:CE:60:BB:60:5A:29:0D:D3:83:DC:F9
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a8:4b:08:a4:42:9c:9d:f5:5d:29:d9:52:13:c5:e9:b1:dd:
2c:a2:16:d1:58:db:9f:88:1f:d2:97:e5:ee:9a:45:5c:ea:9d:
8c:fd:60:e6:93:14:e5:36:27:ec:fe:13:6d:ae:64:ee:ed:96:
5e:c1:70:19:90:23:6c:89:e6:8b:be:85:bd:e9:60:be:a9:77:
07:00:9d:37:0d:7e:f7:9d:fe:ec:66:f9:18:40:7c:78:fe:6e:
2a:d9:51:b6:85:6a:79:5e:86:67:22:93:8a:51:f0:e8:29:ff:
e4:3e:d3:dc:5e:ff:df:76:eb:ae:0f:f4:bd:c9:1c:ab:df:98:
01:5f:2c:94:d8:ba:07:51:ac:c7:60:89:a4:f7:5a:f6:b5:d2:
3b:a1:58:9b:0f:3e:9c:5b:f8:11:c5:31:b5:f1:76:cf:c2:b4:
63:97:3f:19:2f:eb:55:c7:81:9c:f3:47:57:34:fd:a1:2f:1b:
50:bf:e8:cf:0f:54:1d:f0:50:2f:ee:5b:96:ed:56:81:44:d2:
34:0f:47:66:8e:f1:17:85:de:e0:73:2f:0e:86:16:df:2c:8b:
95:95:ff:d3:dd:5c:7d:55:01:d6:2d:b1:3d:9d:56:77:5b:d1:
bc:7a:5a:22:8b:a6:e1:22:29:91:b9:c1:94:b2:ed:24:68:9a:
06:3b:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:32 2026 by rpki-client