Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: JV8pi4zzvJVEug0aoak73WcqtPVX62QgkGpN5phM/ms=
Subject key identifier: D4:CB:3E:B4:CF:1B:62:56:D7:9B:F5:99:39:27:60:E6:ED:27:7E:30
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019FA97490BDA0C32C658498ABF17DD7BD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 1668
Signing time: Tue 28 Jul 2026 16:00:16 +0000
Manifest this update: Tue 28 Jul 2026 16:00:16 +0000
Manifest next update: Wed 29 Jul 2026 16:00:16 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: DMMTCo1dQQQNuAy13bxexRytFcwovmc1p0UwCoQl1d8=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:90:bd:a0:c3:2c:65:84:98:ab:f1:7d:d7:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Jul 28 16:00:16 2026 GMT
Not After : Jul 29 16:00:16 2026 GMT
Subject: CN=d4cb3eb4cf1b6256d79bf599392760e6ed277e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c3:b6:de:b0:3d:aa:ec:5e:db:f8:6a:6b:9f:
d0:84:41:c7:05:0a:af:41:08:b5:35:1e:5b:c8:d8:
57:2e:e6:9f:e4:92:a3:4e:5e:e8:0c:8c:c9:ae:41:
10:3c:d5:07:b9:92:b1:45:03:a6:63:d1:8a:a5:5a:
ca:ec:bc:08:fc:39:52:14:90:f8:52:36:66:cb:1a:
fe:a7:ed:57:3b:18:d1:14:f5:3a:03:4f:26:59:e4:
e2:0c:16:88:09:d1:f1:e5:be:e3:8a:8d:11:f2:bf:
af:35:22:0c:26:3a:46:3c:13:65:10:4e:e4:df:fb:
11:ce:b0:51:ab:e7:44:19:8c:1c:ab:d6:22:62:70:
94:95:64:2a:bd:7a:c5:f3:1c:e2:27:1f:ea:1b:ef:
25:37:f4:f7:00:d3:82:65:81:c1:de:08:1d:ba:da:
63:cf:d2:f7:12:c7:96:29:45:8d:a4:22:79:87:d1:
76:e6:96:c2:71:90:fa:cb:48:3a:45:53:97:b7:4b:
3b:ba:8a:9d:23:6d:14:78:c3:61:10:47:6a:1b:f7:
f1:b8:77:0e:b7:34:94:9a:8a:e0:d0:6b:66:af:8e:
e1:17:05:81:10:af:8c:f1:12:b6:0e:7e:64:c3:a2:
32:b0:23:0e:89:3c:a8:6c:f6:9a:b8:6f:55:fd:19:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:3E:B4:CF:1B:62:56:D7:9B:F5:99:39:27:60:E6:ED:27:7E:30
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cc:5b:be:61:98:35:55:f9:3f:65:bc:aa:3d:ec:fd:22:01:
06:cd:08:85:30:0c:78:07:33:0a:ae:90:f9:9e:31:54:6a:79:
40:12:73:66:d0:f4:57:20:53:99:4e:dd:6a:d9:35:c5:7c:7d:
21:1e:37:79:64:d5:1a:6d:2b:5f:d2:81:47:ac:12:c6:00:de:
15:a1:48:d0:55:be:1d:2d:b7:21:7b:5e:5a:39:d7:ae:13:84:
90:3d:74:59:21:90:89:d6:68:a0:26:8f:a3:7d:a7:73:3a:c8:
78:bc:55:ca:6f:18:46:40:25:1b:8e:1c:88:b4:cf:01:05:32:
cb:91:ce:dd:6c:3f:0c:14:41:d6:d5:1d:3e:54:a4:91:2a:dd:
77:0e:3e:e1:e7:f0:58:a6:49:d5:5e:3c:c6:02:8c:5a:ed:84:
e9:5f:31:4b:fd:75:8b:08:5e:53:bc:9c:4b:17:b6:9d:ee:4e:
4b:eb:51:0b:b8:d5:3e:b4:9c:d4:f2:7b:f8:11:c8:98:9c:a9:
f9:e3:c8:f3:43:6b:c9:18:81:76:38:0f:58:40:43:ad:df:9c:
58:9e:0c:5b:df:82:76:a1:6a:11:f9:e9:88:47:a2:34:eb:c5:
b4:8d:b3:90:5c:0c:5b:f8:77:1f:67:b4:fa:4d:50:4b:4e:81:
d5:0d:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:25 2026 by rpki-client