Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: lyOouVOrvEk17C28wPQYo5fR7CR3UcZpgkDN4tFykGs=
Subject key identifier: AF:E7:72:C1:A9:BC:36:8A:44:A1:6E:D4:B4:D0:4D:62:65:2F:39:DF
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019FABD158B0B34D8892F9A4484542D43496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 158C
Signing time: Wed 29 Jul 2026 03:00:51 +0000
Manifest this update: Wed 29 Jul 2026 03:00:51 +0000
Manifest next update: Thu 30 Jul 2026 03:00:51 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: 3Y+8OV859WspLelGKgzoORGTyATpoYY6q5/m6ozUk2E=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:58:b0:b3:4d:88:92:f9:a4:48:45:42:d4:34:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jul 29 03:00:51 2026 GMT
Not After : Jul 30 03:00:51 2026 GMT
Subject: CN=afe772c1a9bc368a44a16ed4b4d04d62652f39df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:04:09:cd:54:88:62:98:71:a4:f6:1d:f0:
e9:d4:16:34:c8:7f:c3:f3:11:d5:a6:00:07:64:5b:
67:a7:bd:93:af:a6:9c:87:d5:04:15:dd:3e:c8:df:
de:9a:7f:39:77:ec:29:a3:ff:5f:d6:ab:cb:9a:09:
fd:6d:4b:a7:75:63:62:8c:4a:74:7e:89:77:7f:cf:
83:2d:78:50:b4:6c:2d:04:e7:88:f6:ae:0d:d2:15:
56:46:3b:68:14:b4:3d:f0:c3:c3:c7:72:39:a6:18:
1b:2d:39:31:89:3d:12:6c:0d:8d:a0:5e:54:de:9a:
39:f0:d6:04:43:dd:83:b7:d6:1c:ad:7d:7d:60:a3:
41:73:5a:c8:e3:99:00:f1:96:71:0b:92:e6:82:9c:
ae:6b:2e:80:20:a5:c2:c3:a8:04:01:25:f3:36:1f:
59:42:c4:85:88:ad:c4:43:8b:9e:30:8a:fe:b2:f2:
27:73:93:cb:c6:b8:c0:75:95:5f:cc:3f:74:5a:7f:
67:1a:ce:e6:1f:8d:eb:42:d9:17:b6:ea:86:b7:fc:
10:d6:69:5d:c0:ce:c5:2b:2b:b3:8a:7d:9a:86:6b:
7e:0c:cc:0a:18:69:e7:b9:50:60:18:aa:79:f0:9a:
a5:97:09:87:8f:a8:41:b2:cd:b1:10:cf:f8:ba:5e:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:72:C1:A9:BC:36:8A:44:A1:6E:D4:B4:D0:4D:62:65:2F:39:DF
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:1f:70:d2:d9:5c:ca:05:47:85:ba:22:a6:c8:b2:99:a2:
e6:8c:75:ef:85:47:78:6b:88:3c:0d:8f:f9:06:ab:07:6d:d3:
96:02:85:04:b2:48:62:ab:fa:01:5c:63:7f:36:1e:5f:08:2f:
c1:e8:ea:fd:7d:37:29:5d:c3:16:81:62:73:72:36:f3:ed:cb:
a0:50:87:6b:bd:26:5b:70:07:22:ba:df:5f:e6:58:55:3d:d6:
39:f3:32:e4:82:ed:d1:dc:e9:12:a9:80:fb:49:dc:7a:b4:98:
80:e6:92:2c:84:25:59:67:67:91:4f:46:61:e8:f4:03:79:bc:
af:bb:bb:68:48:27:ab:27:80:86:35:1e:5d:bc:c5:cf:50:cb:
97:ce:c3:57:62:60:81:31:04:4f:ec:40:d3:1a:52:52:47:27:
91:c0:3d:d6:ad:dc:b0:2a:ff:84:a3:2f:12:a7:f7:90:dc:1d:
ab:ac:b1:9f:e4:e8:b7:8c:4d:83:eb:b2:8a:16:e7:09:ad:c5:
e2:e5:d8:0f:97:29:80:e7:3b:3b:c3:33:0c:72:bf:e2:9e:ea:
2e:e0:88:6c:76:3b:60:47:ed:23:41:02:71:b0:ba:f2:90:ff:
8e:d1:34:10:4b:9f:3f:94:c3:fa:52:65:a3:53:de:7e:d9:4c:
2a:fa:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:15 2026 by rpki-client