Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: SSqbWxk2hvXU5fZpfuDkLeQ4TapRmBJgdpapY6lDdu0=
Subject key identifier: 57:B6:2B:F7:56:36:1C:91:C7:BD:73:88:01:78:FF:A5:6F:03:86:16
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019CAB3479F152297321CC56DC2C6580AF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 13FE
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: nhwKas+y57j41GvM2fMWWy4oVsD+ybjOlpGWnOQ3Vtg=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:79:f1:52:29:73:21:cc:56:dc:2c:65:80:af:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=57b62bf756361c91c7bd73880178ffa56f038616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:7c:18:3e:fd:60:85:37:5c:e6:07:ee:41:
cb:17:5c:23:5f:56:df:dd:43:f4:e5:b4:97:67:da:
bb:17:d5:d2:63:10:03:8c:01:f7:7a:bd:37:99:8d:
23:ca:39:a7:ea:68:73:01:77:cd:2f:e5:b8:08:d8:
d0:48:a0:44:da:b2:41:96:0b:c6:a4:be:19:0f:81:
7e:c7:7a:41:f5:02:88:54:5e:bf:09:b1:9e:b7:89:
11:a6:99:80:04:42:be:8d:45:c0:ed:6c:3c:46:55:
29:c5:16:fc:fe:c3:0e:f2:29:bc:e9:a8:72:75:bd:
4e:96:53:0d:7c:6e:97:b3:d0:47:a9:f0:72:95:3d:
df:a3:ca:10:5f:f9:3a:55:61:15:35:46:93:5f:17:
be:44:c2:84:e7:18:09:6f:c0:95:b4:5b:d9:71:e4:
46:89:54:ba:5f:b0:b6:05:24:96:b0:d3:18:cf:2f:
cb:8e:e4:b1:d2:27:40:ac:43:b3:67:c9:c0:e8:9b:
ae:40:03:4b:c5:cc:99:5c:cb:21:01:5c:49:1e:8d:
2d:21:3c:f8:bd:39:16:25:b7:12:83:0a:23:5c:b9:
f3:56:62:4a:35:66:5b:e9:b6:57:a0:31:3e:4f:fc:
21:00:48:63:7c:17:a5:2e:0b:2b:f1:bd:6d:8e:d3:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:2B:F7:56:36:1C:91:C7:BD:73:88:01:78:FF:A5:6F:03:86:16
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:af:d4:83:57:14:9c:cd:2a:aa:b2:88:8e:8e:59:a3:35:e4:
90:87:1a:64:0b:d3:8c:a3:2f:9d:6a:88:02:1b:e4:0f:fc:54:
ae:7f:95:15:e0:94:7c:ad:be:13:fb:e0:7f:0c:8d:5a:d0:98:
97:ca:2b:77:98:c6:29:aa:ac:70:81:04:bf:34:c7:65:96:67:
80:6d:8a:00:35:7e:9e:e4:4b:fb:7f:86:21:92:2f:ef:4e:5b:
1b:c9:7c:ec:53:6d:d9:cd:31:e4:2b:bb:bd:7b:b8:a0:23:11:
f2:4a:16:64:21:eb:9e:3c:ae:82:82:91:8f:04:6b:62:03:06:
c3:99:e7:cb:61:a6:87:25:8e:b0:91:4b:be:cd:6c:39:22:4b:
01:34:dc:28:32:0f:26:b8:4e:f3:32:c5:b3:cd:90:3c:df:15:
9c:be:c5:3d:7d:ef:35:d8:11:91:f4:d6:56:b4:23:01:50:b2:
9d:81:44:4a:ac:3d:e5:d8:df:dc:61:7c:89:0e:ba:40:a2:c0:
f0:6c:77:d0:01:68:d7:20:a8:21:6b:c9:d4:4f:c7:cb:b7:49:
92:41:e7:cf:9d:49:83:18:98:c7:3e:1c:50:3b:55:46:11:1f:
86:49:5b:ac:f6:a6:2d:d4:9a:13:c6:c7:d8:25:57:1f:4e:f9:
14:5b:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:25 2026 by rpki-client