Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
File: jBOLI8HTvcTBqTzpLed7PHyDWD8.mft (raw, json)
Hash identifier: IjaWcMQgjFBxe5SC4pSAPbILb8O28ntXE1QHtNdhJvo=
Subject key identifier: 2C:73:80:B3:97:1E:55:CE:12:BD:66:5F:97:63:9B:0B:CF:45:CB:BB
Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Certificate serial: 01A0CBC75BFEE40C041CD50097CE6CD0E1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
Manifest number: 0281
Signing time: Wed 23 Sep 2026 01:00:35 +0000
Manifest this update: Wed 23 Sep 2026 01:00:35 +0000
Manifest next update: Thu 24 Sep 2026 01:00:35 +0000
Files and hashes: 1: JeyyXekrP9-O0pqFzDG-ct1765w.roa (hash: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8=)
2: jBOLI8HTvcTBqTzpLed7PHyDWD8.crl (hash: YikqkE/JcBOk7ZYijO/CPNLJSGvzZxIKhNfpQva0MfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:5b:fe:e4:0c:04:1c:d5:00:97:ce:6c:d0:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Validity
Not Before: Sep 23 01:00:35 2026 GMT
Not After : Sep 24 01:00:35 2026 GMT
Subject: CN=2c7380b3971e55ce12bd665f97639b0bcf45cbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:26:57:f6:f2:9c:1d:0e:5a:c3:9a:12:f1:
d9:f7:6d:22:f1:b5:d7:57:97:f9:6c:0f:a4:d9:f2:
30:f9:10:5a:74:00:f0:3f:9e:8b:48:19:a7:8c:37:
f2:54:58:e0:b5:19:c5:11:85:2d:42:73:cb:eb:b3:
f7:60:50:28:64:1e:58:e9:af:99:61:3b:62:9b:04:
53:43:48:bd:5a:34:5c:29:72:b1:a7:ce:3c:e1:c7:
e8:6f:53:9d:00:21:b1:89:55:27:51:d3:1b:c8:0b:
93:75:fe:ec:c2:7d:9f:83:1f:0d:d8:98:99:4e:16:
79:bd:c2:b3:31:8b:35:f3:a0:6c:c2:69:c5:e2:38:
d9:a5:4c:8f:b9:3c:5e:23:d9:e0:21:0b:8a:c6:e2:
9f:1b:d6:35:1b:c0:15:51:f1:e8:fb:62:f6:0a:b3:
1c:8d:50:14:79:d3:0b:2d:ef:85:cb:fb:a8:8b:e9:
74:50:64:e0:3f:24:56:31:fb:e9:e8:d5:39:2a:5b:
af:b8:44:c5:34:9d:48:cd:b0:3a:e8:88:9b:48:36:
c4:27:b5:37:73:34:41:ff:93:84:73:91:26:30:d1:
0c:4f:dd:e6:0c:58:ab:26:d2:7b:ef:c4:d6:db:7e:
ba:4a:d4:c6:ec:63:96:69:56:80:cf:03:2b:60:be:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:80:B3:97:1E:55:CE:12:BD:66:5F:97:63:9B:0B:CF:45:CB:BB
X509v3 Authority Key Identifier:
keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cb:d9:1e:c9:59:a5:89:b7:b5:5e:f8:0d:2f:c8:04:27:e9:
dd:a0:a6:a4:c2:67:59:bb:2f:84:eb:08:b5:cd:a2:fc:6d:63:
6d:c6:a1:61:b2:e7:08:4e:d6:7d:d4:6c:bc:c7:dc:15:08:79:
af:c9:17:83:31:f5:b1:bd:8a:48:24:23:db:f2:65:85:08:ad:
94:17:39:d2:50:5d:2c:b6:86:3d:68:d6:ea:4d:28:6f:af:05:
3e:92:f5:c0:f0:8b:d6:20:7c:15:3a:2a:7d:c6:45:a1:ca:d8:
b0:70:fa:c0:ce:42:ed:f8:0c:8b:b7:2c:d0:91:20:fc:97:60:
c7:86:63:24:54:dc:ac:8b:65:f0:8b:e7:c1:07:a2:dc:bf:c9:
54:ca:ed:40:b9:ad:5e:f1:68:cc:57:8e:2b:56:c0:cb:3d:16:
01:de:5a:dd:ff:7e:0b:6e:97:64:b4:d2:4f:35:ad:1a:b6:ca:
f1:05:1a:3e:0f:ca:b6:ce:1f:18:cc:4e:f8:b7:f4:4e:5a:77:
ed:81:8a:9e:f9:28:0d:3e:00:3e:94:1d:79:4f:48:d6:a7:71:
67:48:0d:5f:dc:be:c1:fd:51:33:f7:a7:c1:21:5f:d6:ba:f9:
4f:d8:9a:15:c6:9d:84:94:5e:e8:48:99:a1:ad:97:f3:29:72:
c4:c4:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:26:10 2026 by rpki-client