Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: yAxHJ/VQTimQmjiyOlwAcmM1viPQJmUnDsRsQo1F4Pc=
Subject key identifier: 51:72:12:EF:52:E6:F1:7E:21:C2:A0:92:24:C9:9A:03:31:F0:F7:52
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019EBDD9CABDEA632D97FC2C5D09F88B5077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 15EE
Signing time: Fri 12 Jun 2026 22:00:27 +0000
Manifest this update: Fri 12 Jun 2026 22:00:27 +0000
Manifest next update: Sat 13 Jun 2026 22:00:27 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: 8W3t+prSJgmeSJzZFYwe0eFeOB/T17rsqCwVkWoAHIc=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:ca:bd:ea:63:2d:97:fc:2c:5d:09:f8:8b:50:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Jun 12 22:00:27 2026 GMT
Not After : Jun 13 22:00:27 2026 GMT
Subject: CN=517212ef52e6f17e21c2a09224c99a0331f0f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:c0:fe:87:20:1b:8b:13:b2:11:f8:4b:87:
03:09:8b:58:d7:bb:51:6a:de:2f:55:53:e7:66:aa:
5e:19:22:7a:c7:2a:3a:8b:fc:d4:9c:14:11:1f:a8:
e5:2a:60:ad:53:60:10:e2:37:97:7e:c8:33:ca:04:
5f:11:d7:1f:d3:3e:97:a9:37:01:16:5a:56:98:4f:
af:b5:6b:b1:83:73:bb:09:e6:19:c0:86:aa:e8:41:
ee:25:f0:b3:9d:3a:44:0a:22:2b:23:7e:2e:db:ee:
35:de:91:ec:9d:14:ba:7b:6c:dd:0c:dd:ce:d7:f7:
23:6f:48:70:f0:60:13:e4:fa:bf:c2:41:32:b3:6b:
f9:d4:a6:71:52:d5:af:69:5f:21:85:85:0e:d7:e5:
f3:a3:36:c0:7e:0f:6f:15:6f:6c:06:84:99:6c:ff:
27:f5:73:11:d9:ac:02:3f:b4:24:9c:c2:48:75:ee:
9c:36:44:0d:f2:60:96:e3:83:f9:c9:6a:0d:1d:e6:
a5:4e:e3:6d:3d:6c:d6:ea:69:23:c1:21:a8:80:c7:
53:b3:89:d8:ed:0e:88:74:15:65:fb:5e:70:96:d8:
8b:3a:dc:33:72:03:03:b6:01:2c:80:06:79:e5:ba:
94:ea:f4:ab:84:9d:c6:5d:a2:08:26:44:51:cd:14:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:72:12:EF:52:E6:F1:7E:21:C2:A0:92:24:C9:9A:03:31:F0:F7:52
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bd:9a:81:e4:9b:b7:90:a8:1b:d6:0d:5e:a0:d7:06:20:78:
30:f5:46:3c:a5:9f:96:33:ad:22:c0:b6:4d:6f:3e:c6:8c:7e:
6b:ee:ca:ea:50:78:1f:1b:9a:c0:b3:c8:c0:63:e6:c6:9f:82:
5c:f5:2f:89:44:42:10:21:61:70:33:4d:9a:68:b8:6f:1f:8c:
71:8c:31:50:c7:5f:6f:71:00:6a:70:f9:ed:6c:d1:22:44:75:
55:5c:75:7a:d2:1e:7b:a3:93:af:8d:7c:f7:a9:7b:35:d6:a3:
c7:4b:f4:14:03:be:b3:65:8a:c6:7c:7a:19:d8:28:88:30:41:
67:ee:0a:2d:d8:32:01:0d:fb:83:77:4a:0e:6a:db:86:4f:23:
ee:21:dc:3d:82:1d:25:ef:e8:34:4a:9f:f6:8d:fe:a9:52:30:
95:7c:48:83:8b:1b:39:5b:25:d4:45:a9:e8:4b:3c:97:0e:ee:
6a:6f:ef:29:6a:41:22:1b:ad:18:c7:bb:a2:0b:13:72:d7:b2:
49:10:42:61:7c:62:73:d1:78:4e:36:1d:ca:43:29:75:f4:7a:
9e:95:ae:3e:9b:99:b6:ba:d1:61:84:22:f0:de:6c:07:95:61:
39:8f:b0:fd:51:55:9a:e7:19:ca:4a:b7:cd:93:1c:56:a1:5b:
79:f5:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:42 2026 by rpki-client