Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: rnJRL4jC7g+cOx8Mpbuk0c8S7XbZK2kyX3f0JIwgzSk=
Subject key identifier: C5:F4:D4:17:D3:30:E9:D9:9D:DA:3C:9A:28:A3:82:16:1E:4C:20:7C
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 01A0F7FBF1AFEDE649CC9F5E73EDFACD1636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 1638
Signing time: Thu 01 Oct 2026 15:01:18 +0000
Manifest this update: Thu 01 Oct 2026 15:01:18 +0000
Manifest next update: Fri 02 Oct 2026 15:01:18 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: 5zbqRDanR47ByW9zQeReBm0zW6ZqIB62zwPg0Jjoxmc=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fb:f1:af:ed:e6:49:cc:9f:5e:73:ed:fa:cd:16:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Oct 1 15:01:18 2026 GMT
Not After : Oct 2 15:01:18 2026 GMT
Subject: CN=c5f4d417d330e9d99dda3c9a28a382161e4c207c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:44:7e:f0:94:c9:41:90:42:48:9f:37:8c:23:
47:6a:d6:75:5a:19:20:a3:cb:69:1a:ed:c0:70:d8:
6c:5d:28:7f:a0:e0:1e:0f:df:38:1e:d8:f1:84:98:
ae:9a:86:5c:68:08:2a:bb:b2:9d:29:49:a2:b0:24:
a9:ef:8c:6f:56:b0:08:ad:2b:5d:09:da:7a:f0:8e:
48:f3:b1:27:68:94:11:ac:7e:8c:84:59:dd:a6:93:
19:c9:a6:c4:99:f3:d8:2e:d9:73:c7:69:c9:a8:12:
2a:cb:a2:cd:99:cc:6b:a8:a9:64:35:28:28:93:d6:
e6:4f:ce:bb:45:57:45:1a:ca:cd:63:47:51:6a:05:
8a:50:aa:ea:23:3f:4f:37:1a:1c:74:57:d6:6d:ac:
61:81:1b:ce:10:01:d1:86:38:b0:87:a3:48:b0:1d:
c3:94:03:5c:76:d8:8e:3f:83:d0:cf:28:4e:b8:c2:
f6:29:c6:20:95:61:dd:42:69:a7:52:2f:77:8d:3e:
c3:ef:85:20:39:c2:38:35:02:ac:10:ae:f4:b6:78:
21:ec:08:4b:91:11:3f:e3:25:ac:85:e0:4d:d9:6d:
cb:03:be:fe:a3:54:c7:f8:c3:e5:ef:9c:72:db:5b:
f7:dc:94:20:e4:ad:63:ab:41:3a:83:6d:a7:9d:ff:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F4:D4:17:D3:30:E9:D9:9D:DA:3C:9A:28:A3:82:16:1E:4C:20:7C
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:8e:de:e6:a4:f7:58:fd:42:16:51:36:ef:35:fc:1d:f9:
c9:dc:73:8b:88:ef:12:cc:d5:84:7d:00:8e:50:74:9d:b5:ed:
28:83:46:0e:9e:77:ef:57:b6:9d:9c:ee:3a:40:05:fa:32:8f:
d1:3f:49:ed:77:fa:2d:cc:3f:a9:e2:32:e7:38:d3:60:5e:92:
e0:49:d8:6c:89:88:0f:42:e9:fa:a0:7b:12:5c:8e:4f:bf:9e:
d9:58:f4:b7:bf:37:01:4c:37:ad:ba:09:91:07:e0:84:13:aa:
3d:af:4b:5d:e5:5e:13:2b:64:d1:33:cf:27:40:c1:a8:e5:11:
ce:ae:d4:84:b6:b2:7c:2a:9c:f2:55:cf:71:61:e4:a6:8e:51:
9b:a9:0f:60:67:33:88:21:9a:28:57:fc:d2:d7:f3:de:b6:4a:
be:b2:ba:96:67:67:54:1c:4d:42:cf:5d:b9:6a:cd:28:2c:cb:
8a:36:f3:61:a3:29:d0:d6:f2:a1:63:3a:fb:fc:37:ad:f9:21:
b0:da:6c:67:2a:dd:35:95:ca:a8:aa:6e:40:62:0e:f1:55:ff:
e7:82:84:91:86:cc:7c:96:2f:bb:c6:fc:62:8e:32:b8:e7:35:
38:f2:0c:d8:6e:a4:7d:94:08:8a:17:c0:0d:7e:cd:b0:de:dd:
f4:a5:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 00:25:07 2026 by rpki-client