Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: 31pznGmjmQrWInciyAJzfJOE+tqinxTf2ySk5h2jnm0=
Subject key identifier: 64:1D:46:21:20:DA:7F:88:F1:FB:F3:6C:FD:DA:5E:BF:0A:5B:5A:DE
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 01A11CAC5BBD4F259057181788ED626A4A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 164B
Signing time: Thu 08 Oct 2026 18:00:19 +0000
Manifest this update: Thu 08 Oct 2026 18:00:19 +0000
Manifest next update: Fri 09 Oct 2026 18:00:19 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: zI6p1VBpNYHj+GVEzgWxELJAj9dtSitMnO9Vfyy0GEE=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:5b:bd:4f:25:90:57:18:17:88:ed:62:6a:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Oct 8 18:00:19 2026 GMT
Not After : Oct 9 18:00:19 2026 GMT
Subject: CN=641d462120da7f88f1fbf36cfdda5ebf0a5b5ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7b:51:53:90:98:ec:f2:c1:cf:26:b9:99:40:
18:d7:85:64:de:c3:e5:78:da:69:75:9a:45:21:57:
75:3b:4b:8d:67:2c:11:21:60:ec:21:08:8a:11:d1:
30:39:2b:ea:01:38:6c:80:e0:aa:6a:be:e0:80:28:
b0:e9:10:14:92:d6:22:cf:93:cb:c2:e3:77:55:b2:
b8:ca:8e:1f:6d:dd:43:e3:96:59:d2:cd:d0:d9:34:
23:d6:f3:97:97:51:7a:5d:8a:09:01:2c:58:c6:dd:
fc:9f:05:bf:8b:61:22:a2:97:4e:c0:83:9c:b3:c5:
d7:16:b5:8d:23:76:9f:ed:cd:fa:6d:f1:d4:a8:b6:
cb:fb:5a:59:21:46:19:70:15:12:2b:66:77:b8:bd:
bb:60:92:77:50:e7:ea:b0:eb:f4:d3:25:3a:67:cf:
34:ac:05:aa:af:20:93:db:7a:08:38:16:82:9c:fb:
48:07:e3:79:9b:b8:d1:dd:95:a6:60:36:62:de:c4:
79:1b:27:0f:ec:ff:15:6a:46:50:6b:db:52:cf:c5:
10:3d:80:1a:6d:89:ac:bf:ed:61:26:81:26:e4:71:
50:0e:fa:fd:25:11:a9:7e:68:e4:90:6c:b8:fc:89:
06:80:92:7d:71:d5:78:41:65:c4:4c:fc:2f:84:f8:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:46:21:20:DA:7F:88:F1:FB:F3:6C:FD:DA:5E:BF:0A:5B:5A:DE
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d1:88:99:44:de:55:d8:4a:ae:70:f1:c1:3a:4d:c3:4e:8b:
3b:e9:6b:cb:5f:d4:6c:26:bb:2a:c7:60:0a:db:44:a9:a9:35:
9b:5d:73:b9:dc:bb:a2:95:c6:6f:4b:4b:64:9a:39:f2:58:c6:
4c:61:00:48:98:10:e2:91:70:07:bf:84:39:d8:fe:85:7f:5b:
0b:8b:10:34:b2:ed:bb:92:9e:4b:66:c7:db:aa:da:99:b8:92:
e6:80:11:27:53:1a:5c:5d:66:2e:ab:a7:68:1b:a0:47:30:6c:
37:59:42:12:4a:46:55:fb:08:8a:7e:e0:e6:23:68:2c:6c:04:
94:63:f2:2d:d4:5d:15:c0:2c:cc:27:8e:bd:62:1c:4c:cd:dc:
c4:0a:a9:aa:32:d6:47:64:3e:59:68:36:48:12:ae:6c:aa:fd:
39:87:57:97:19:da:fd:2f:68:c7:6f:f6:02:53:a2:f1:66:98:
f5:2c:1e:23:3e:1c:5b:a4:08:0b:20:5d:a6:77:8f:ad:a6:fd:
51:e3:ad:93:73:9d:e3:5d:52:97:41:77:a2:21:5c:be:17:94:
dd:72:e3:5b:40:39:8a:7e:35:23:ba:74:cc:9d:a9:84:c2:00:
8c:a5:cf:40:fe:08:ce:9c:61:43:be:60:49:76:a8:76:8f:f2:
cc:92:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:28:36 2026 by rpki-client