Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
File: jBOLI8HTvcTBqTzpLed7PHyDWD8.mft (raw, json)
Hash identifier: 5hJ51LPExgXvPqDI41Ns8Fb48NxG7UOTSO5yELOD5Tw=
Subject key identifier: F5:64:21:F2:D8:5F:26:E8:57:F8:DE:48:D2:A5:FE:9F:29:CB:C8:9F
Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Certificate serial: 01A0D75F81C9739F69634C71453F0DDC5666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
Manifest number: 0287
Signing time: Fri 25 Sep 2026 07:02:35 +0000
Manifest this update: Fri 25 Sep 2026 07:02:35 +0000
Manifest next update: Sat 26 Sep 2026 07:02:35 +0000
Files and hashes: 1: JeyyXekrP9-O0pqFzDG-ct1765w.roa (hash: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8=)
2: jBOLI8HTvcTBqTzpLed7PHyDWD8.crl (hash: 7K/TJHIKeTW3Uxv6NnNC3SKtszZr1/F7xDfMEPPei4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:81:c9:73:9f:69:63:4c:71:45:3f:0d:dc:56:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Validity
Not Before: Sep 25 07:02:35 2026 GMT
Not After : Sep 26 07:02:35 2026 GMT
Subject: CN=f56421f2d85f26e857f8de48d2a5fe9f29cbc89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:b3:55:6d:62:f6:b8:00:9f:32:7b:d5:da:
34:22:e2:ad:bc:b4:c8:2d:10:48:82:82:f6:33:e3:
af:ff:f2:79:40:c5:22:e9:f4:46:e6:4d:fb:93:d2:
a8:c5:4e:4b:08:11:bb:3f:23:23:8c:92:82:1f:ef:
a5:50:41:3a:4d:2f:5b:ce:2b:82:4d:1c:3e:9b:51:
de:af:83:1b:94:44:6f:93:71:a1:e6:16:83:9e:30:
02:97:59:30:f5:b5:71:ca:e4:8d:73:ae:59:61:ed:
9d:f3:01:3d:a1:9d:cd:11:0f:f3:e6:02:c9:e9:2f:
b7:12:7d:98:28:1d:70:65:8d:c9:29:4b:af:48:a5:
6e:0d:23:40:6f:d2:41:7d:02:5a:07:46:f4:03:a7:
32:f7:7f:fb:73:af:f1:07:91:a4:cd:9b:31:85:ea:
c3:e4:2e:f2:1f:f7:b4:8a:69:ca:97:39:a9:a4:c1:
dc:b1:a4:3a:45:84:0f:a1:72:3c:44:e0:61:cf:44:
4e:5b:9b:ca:8d:f4:f6:06:ea:26:06:d1:ad:54:d3:
52:5e:8f:10:c3:b2:21:92:ff:04:1d:0d:57:b0:bb:
3f:26:2e:84:60:38:a4:85:ac:d1:25:b3:68:cf:2b:
c4:3f:53:a9:b1:94:ea:d7:95:e6:cd:18:81:e6:25:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:21:F2:D8:5F:26:E8:57:F8:DE:48:D2:A5:FE:9F:29:CB:C8:9F
X509v3 Authority Key Identifier:
keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:ab:d5:28:6c:4f:06:63:e8:f6:87:05:2d:c7:b8:58:f7:
5c:5d:e6:03:21:1f:b8:24:9e:b8:a4:51:82:3c:35:02:6b:12:
e2:b7:0a:45:08:e9:ef:f8:4a:05:df:34:c2:e4:52:8e:85:79:
e0:0f:c1:ce:47:35:47:e5:ca:53:2f:f9:ff:ed:1a:5d:cd:12:
d8:8f:28:58:95:cd:8e:2a:a9:40:46:0e:1d:83:84:81:31:5d:
71:d0:29:e0:0a:37:7e:9c:09:15:01:d7:f1:e2:39:9b:ec:f0:
fe:0b:08:af:f8:14:4c:70:e8:ff:7b:d8:31:3d:95:49:7e:21:
be:6d:8f:9b:a6:df:33:f8:30:a4:10:53:49:d2:52:c9:1d:0e:
e1:ce:17:c0:b9:6a:cf:0b:45:cd:e0:53:92:6b:be:c6:91:be:
0b:18:2d:89:bb:ee:29:fc:08:1e:d6:50:32:be:ec:51:66:4a:
81:cd:8d:a7:6a:02:ba:1a:13:e9:a9:f8:7b:d2:a7:2c:1a:77:
95:51:ed:7a:99:57:53:6f:fd:21:fb:4e:95:c1:57:60:62:e6:
38:0b:db:39:7b:c7:d9:a9:93:49:2f:3d:4a:d0:27:b3:d0:0c:
da:fc:64:21:38:9a:9d:8c:b6:d6:c0:39:19:c5:d1:17:57:a4:
2f:89:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:17:27 2026 by rpki-client