Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: SXFf+PJfUIhgewpDpqsoIV69vXgTAw/QroshuPbbOEM=
Subject key identifier: 8F:EC:C3:CA:5E:D7:26:F3:D9:D8:59:2D:9C:35:D9:99:4B:5D:B8:A1
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019D9AAC1B63D85FC6C56B61BB7297AA0827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 147A
Signing time: Fri 17 Apr 2026 09:01:03 +0000
Manifest this update: Fri 17 Apr 2026 09:01:03 +0000
Manifest next update: Sat 18 Apr 2026 09:01:03 +0000
Files and hashes: 1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: wSmmsA1c/3MMLKfeOCNDC5JMdpS+GBsQ6qdw7KQGfx8=)
3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1b:63:d8:5f:c6:c5:6b:61:bb:72:97:aa:08:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Apr 17 09:01:03 2026 GMT
Not After : Apr 18 09:01:03 2026 GMT
Subject: CN=8fecc3ca5ed726f3d9d8592d9c35d9994b5db8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:85:01:83:08:c9:7e:b3:d7:89:01:2c:80:
6b:13:86:b3:96:d8:db:0d:dc:46:af:41:0e:82:af:
78:f0:fb:3c:44:b6:12:d8:97:2f:47:d3:12:14:e5:
dd:7f:6f:cb:08:26:91:69:15:26:3f:11:1e:e9:bd:
47:1f:d0:a5:95:cb:42:23:3d:55:21:48:43:aa:5f:
26:00:a0:29:57:87:0e:40:bc:db:57:14:5c:48:02:
b4:e6:39:92:d3:90:81:22:6e:f8:2e:a6:84:78:14:
c5:37:d5:a9:90:7d:8e:49:12:6a:ae:a5:a4:bc:fa:
07:17:cc:74:26:92:0d:7c:d0:75:31:96:cf:2c:eb:
ae:c9:57:b5:2b:65:bd:09:ec:f1:27:5d:04:3c:db:
b4:25:1f:ec:a9:45:59:4a:30:4e:09:4e:4b:9b:b8:
f3:d3:c0:d3:68:bd:18:42:85:02:e2:8e:ff:8b:d5:
e3:c8:1a:01:06:f7:af:42:d0:bf:d8:70:4f:8d:70:
bc:b2:f8:f6:cb:4f:cc:d8:c6:ee:e5:8e:48:1a:eb:
07:d5:b0:26:12:54:8b:09:36:3b:a9:2f:c7:8b:3f:
a6:40:36:b3:34:5c:37:5e:4f:97:79:7b:9c:c8:46:
47:67:4a:c3:a5:7a:48:ca:2c:ca:c0:72:7b:8e:20:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EC:C3:CA:5E:D7:26:F3:D9:D8:59:2D:9C:35:D9:99:4B:5D:B8:A1
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a2:05:65:e3:4d:15:45:a4:fc:8d:f9:5b:af:84:af:4c:8e:
d6:fb:19:2a:15:d7:9d:23:88:ea:0a:53:1d:f1:f2:10:7a:8b:
36:75:e3:63:20:c3:ec:06:c4:c6:ed:e3:2a:4c:96:29:9d:6a:
a2:e6:a4:9c:10:93:6d:2e:01:63:d4:44:ad:12:43:46:ef:91:
85:70:fd:85:c1:9d:dc:0f:3c:68:13:4b:ec:2c:c7:f3:3a:d0:
ba:dc:0a:8e:5f:7a:19:63:4a:32:e0:be:04:22:8b:7f:ae:65:
d5:be:a7:7c:c3:7c:0e:60:7a:bd:c8:28:90:2b:09:4c:1d:f4:
bd:b3:a0:b5:36:5b:a9:9c:9a:e8:72:80:17:17:75:66:e7:27:
92:08:88:84:a0:5b:66:62:ab:94:6d:0d:01:49:46:be:a9:79:
dc:7e:9a:09:b4:75:91:99:db:32:78:5e:ea:7e:bb:d4:f4:8d:
3f:2d:20:ad:5b:e5:9e:70:6a:7c:d0:20:1d:21:ea:cf:7d:a0:
6c:ab:44:43:9c:af:26:88:29:34:8f:5a:8a:af:6b:32:99:2d:
9d:83:46:55:54:8c:7e:a7:a8:d8:fa:43:e3:b1:6d:d2:61:61:
6b:af:4c:dd:d0:8d:94:36:ad:6f:79:24:a6:cf:74:a6:b3:3c:
49:45:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:06 2026 by rpki-client