Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
File: JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft (raw, json)
Hash identifier: zHzrS0oZ7QDwWNMTm0LvFAP74wcikvadJ+aRcR3HmU0=
Subject key identifier: 71:77:D3:54:9C:19:31:71:EB:02:45:CB:40:32:31:22:F0:51:A5:76
Authority key identifier: 24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
Certificate issuer: /CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Certificate serial: 01A1310FBA342073B0C97236FF18E0668A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
Manifest number: 1AA2
Signing time: Mon 12 Oct 2026 17:01:16 +0000
Manifest this update: Mon 12 Oct 2026 17:01:16 +0000
Manifest next update: Tue 13 Oct 2026 17:01:16 +0000
Files and hashes: 1: 0mDwy4DKdVs5iksvVK2u0fmE0VM.roa (hash: 42ochTPPLElp6JzoHsOU9NRyygx3w8EW8T3u57lomWM=)
2: JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl (hash: 1ZMIM31wG6TwK0kER5Ntiu3oe8W6pT7b2aLxWQB6Pco=)
3: uzptKv36wCl9I3p_HmnIng2-M2Y.roa (hash: nJ31r+1SBr6YL93ZrkMI2dA3ct3JCGquyUu584RRW6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:ba:34:20:73:b0:c9:72:36:ff:18:e0:66:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Validity
Not Before: Oct 12 17:01:16 2026 GMT
Not After : Oct 13 17:01:16 2026 GMT
Subject: CN=7177d3549c193171eb0245cb40323122f051a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:4f:e2:f8:64:c4:e0:f9:45:af:cf:19:53:
29:34:b6:25:a8:bc:d7:7d:ed:d4:94:e0:ca:86:d1:
71:11:9e:d0:8c:9f:7a:32:1a:26:63:1f:60:5e:fd:
05:78:fd:18:4f:41:e4:5b:31:7a:cf:65:3a:ee:c2:
6b:09:bf:b4:88:7b:bc:6d:19:fc:64:d0:07:c9:a0:
7b:bb:9f:6a:95:9e:75:d7:a2:61:71:0a:bd:a4:8c:
a2:01:4d:66:47:98:1f:92:07:7e:c1:29:43:9e:78:
65:af:99:75:86:fd:74:71:4b:a8:f9:25:74:18:1d:
75:80:0e:3e:f4:7d:21:fe:ed:fd:e1:56:ad:07:b5:
72:89:81:c7:f8:33:dd:9c:9e:c4:f0:8a:fa:21:f4:
4c:7e:2b:4d:09:38:f1:16:c3:28:fd:6d:f0:1e:cc:
89:a9:a5:d7:e8:4d:4d:d3:3e:94:97:c3:61:40:a6:
28:74:cc:dc:21:8e:1a:b6:de:f7:9a:a2:b1:b2:1c:
26:1b:24:61:09:08:f7:dc:72:89:f8:fb:a2:a0:2c:
3b:ca:15:0c:e7:12:00:24:16:c0:67:88:e2:90:dc:
14:4d:72:92:f6:2e:39:e2:4f:9b:ba:1b:ae:e4:7e:
9e:bf:d2:0f:65:b1:8c:44:6a:ac:13:38:25:3b:47:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:D3:54:9C:19:31:71:EB:02:45:CB:40:32:31:22:F0:51:A5:76
X509v3 Authority Key Identifier:
keyid:24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:96:89:23:da:e3:b9:f1:bd:eb:e4:50:c7:94:0d:46:08:
75:49:6a:99:7f:43:c3:b5:4b:59:1f:4f:dc:b3:7a:ad:6c:7e:
ce:85:18:12:dd:da:c5:aa:6e:ad:54:0a:ff:bc:35:0a:ac:0d:
87:ae:c4:88:16:ba:f5:2b:61:26:cc:43:e3:40:83:1d:fa:2e:
37:fc:d8:8a:20:b7:33:78:c1:6e:ba:81:f5:94:ae:74:b2:11:
18:c7:1a:66:16:eb:ee:be:ec:32:fa:3d:b4:b5:4d:e9:d6:97:
2c:18:3c:e8:67:d1:2e:e5:29:d5:0f:fb:cb:d8:9d:e8:a5:12:
ad:cb:7b:4a:e8:cd:12:b5:a7:75:d7:aa:17:26:26:8a:84:d0:
3f:f7:a5:fa:42:2e:e6:1c:a9:07:a1:7c:ce:f2:83:37:87:e0:
40:f4:5b:9f:c1:82:7b:a1:74:ea:5d:21:22:0a:9e:a1:5f:c0:
5a:08:5e:04:e8:ad:df:48:0d:d8:ac:f6:88:0b:1a:3a:cc:13:
8f:86:96:4d:93:06:c1:ae:55:27:04:07:12:27:8b:6c:7a:84:
ae:a4:ea:6e:f4:ad:4e:e6:20:ee:75:05:62:ac:c9:3d:25:02:
a4:ad:98:c4:32:b0:b9:a7:6b:75:79:75:ca:2d:42:38:6b:58:
4c:ea:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:18 2026 by rpki-client