Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: Mh9C2vPCO8uQmIoN+7QASAYKZQ2Mqp2+KaPZfpXrZk8=
Subject key identifier: F5:44:05:B6:56:E0:00:54:05:3C:25:4B:5C:7F:72:79:A5:0A:8E:15
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019CAAC6272061BBC698AAB2A6A24DD5BECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 14DB
Signing time: Sun 01 Mar 2026 19:00:38 +0000
Manifest this update: Sun 01 Mar 2026 19:00:38 +0000
Manifest next update: Mon 02 Mar 2026 19:00:38 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: W8RTMcRACXupQcTcCf6QeiNSWtzt95lSWipZgiqjG7c=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:27:20:61:bb:c6:98:aa:b2:a6:a2:4d:d5:be:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Mar 1 19:00:38 2026 GMT
Not After : Mar 2 19:00:38 2026 GMT
Subject: CN=f54405b656e00054053c254b5c7f7279a50a8e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:fa:ad:31:01:e8:5b:4c:d9:b2:b4:26:3b:
ab:c5:76:10:91:a0:6d:41:fa:6d:b5:2d:5c:7d:19:
65:75:66:b3:87:64:fd:de:4b:55:e2:50:6d:b2:a9:
0d:1b:99:a7:7c:c0:24:9b:e3:37:56:d6:28:f4:09:
a3:c5:d3:f4:e0:4c:79:6d:6d:f4:47:69:c8:26:ae:
8e:46:7c:84:43:01:3e:45:bb:65:30:3a:7f:e7:8b:
0d:e4:40:f2:80:de:72:b7:87:09:15:bf:f8:95:e4:
ca:fa:6c:c4:12:d8:09:d9:71:a8:cb:52:33:c5:62:
77:80:a2:83:42:6a:9a:c9:d5:14:43:4d:c1:fb:f5:
62:e2:a0:9f:83:02:0b:df:7b:07:a9:43:8e:2f:c6:
bc:f1:fb:f0:4b:3b:0d:9f:1a:fb:ca:5c:c0:6b:bb:
fd:14:0b:23:83:3e:ca:d0:4c:62:ce:db:bf:0f:6e:
35:7e:d3:34:53:e9:75:0b:df:8b:e5:4b:34:18:60:
f9:39:bb:29:07:70:22:84:b2:05:1d:20:78:51:03:
68:cf:e5:0e:6e:fe:df:68:66:ba:9c:94:44:a2:63:
3c:2d:a7:4d:fe:52:27:c3:d4:6f:73:ab:89:23:58:
11:0c:d6:78:4c:3f:3d:38:b7:d7:b0:b4:24:18:10:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:05:B6:56:E0:00:54:05:3C:25:4B:5C:7F:72:79:A5:0A:8E:15
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:3f:27:23:d6:d0:d8:5c:35:db:7e:a8:3b:8c:20:62:7b:
f7:97:73:47:c4:54:4e:35:8f:19:1d:37:06:ae:af:c9:22:04:
df:d5:7c:8b:57:0c:6a:61:af:59:11:d8:12:4c:07:bf:22:78:
53:f3:49:e1:06:b5:13:fe:0f:ed:ce:68:77:ee:3b:16:3b:27:
9a:1d:1d:b7:21:6e:d4:92:17:d6:f2:e4:d2:7f:9e:b5:ef:0a:
f7:2f:4a:e2:ef:92:9a:33:f0:77:aa:50:f7:c8:9a:60:65:11:
b3:24:9f:d4:04:7a:94:ff:6d:90:58:0d:45:9e:d1:26:dd:2e:
8b:22:56:bc:79:eb:a8:44:1c:c5:2c:f0:44:d5:74:e8:4a:d5:
7f:53:c9:f8:f9:a0:c3:61:2b:d3:dc:7f:3e:9a:09:92:3f:20:
ee:7e:d8:c9:2f:91:52:e2:98:98:80:90:c9:2a:80:1a:b4:06:
eb:94:b5:3d:b2:32:cf:7b:1b:22:6e:c6:38:08:c0:9d:a1:f5:
13:25:9c:a6:84:61:ac:36:17:1d:07:74:1a:d6:74:a4:14:b0:
67:59:ec:9f:3f:e5:8d:43:20:55:38:5d:8e:b8:41:91:6f:69:
0e:64:3b:ad:7f:d9:8b:ca:1c:41:4c:a3:88:d3:7f:47:34:b4:
5d:14:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:24 2026 by rpki-client