Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
File: jBOLI8HTvcTBqTzpLed7PHyDWD8.mft (raw, json)
Hash identifier: iPT0SJebEsrS/g7w80fn/M6d3bPDU5aS1fyeZlCjqQc=
Subject key identifier: 56:36:B2:6D:C7:89:CD:46:22:96:A6:4B:0E:76:A9:79:58:33:DE:75
Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Certificate serial: 019D2AE0B5327C0E1E5704824C24F216BE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 16:01:02 +0000
Manifest this update: Thu 26 Mar 2026 16:01:02 +0000
Manifest next update: Fri 27 Mar 2026 16:01:02 +0000
Files and hashes: 1: JeyyXekrP9-O0pqFzDG-ct1765w.roa (hash: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8=)
2: jBOLI8HTvcTBqTzpLed7PHyDWD8.crl (hash: 1ywRPeiSNN6B2ki4VdUfzUA4AqV7yZENd3gsTRLzuUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b5:32:7c:0e:1e:57:04:82:4c:24:f2:16:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Validity
Not Before: Mar 26 16:01:02 2026 GMT
Not After : Mar 27 16:01:02 2026 GMT
Subject: CN=5636b26dc789cd462296a64b0e76a9795833de75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:6e:f8:e2:5e:1d:f4:d6:a0:dd:6c:fb:4d:
94:cc:bc:58:e0:0d:9b:39:1f:bb:fc:18:fa:49:7e:
59:cf:e5:b7:da:7c:0f:29:3a:08:9c:98:10:cf:1e:
8d:81:9f:66:d5:2e:16:b5:d2:c1:4c:cb:2a:ea:09:
4d:5b:b7:a9:87:13:20:64:45:7b:d8:21:af:ec:dc:
23:17:cb:b4:58:86:6c:86:04:aa:4e:1f:d7:93:1b:
58:87:f8:6d:a1:0b:40:f6:f0:bc:a8:4e:ab:ce:74:
d7:1e:36:1b:84:45:7e:f1:19:26:94:1e:77:e7:2e:
c7:25:db:da:3e:ae:2b:3a:b6:87:ef:6d:13:fc:53:
97:96:50:be:fb:7f:e8:24:d4:93:a6:4b:4b:2f:62:
9b:a6:f4:5a:34:da:18:d1:8e:34:c9:46:de:2f:ed:
a2:e6:10:b4:e0:ca:36:f6:c0:48:7c:a5:84:07:d3:
ea:00:bc:33:cb:4e:45:e3:bc:14:54:3f:d5:fd:ec:
f5:50:54:84:bf:73:23:15:ae:e6:cb:e0:45:f4:aa:
ef:b3:52:c6:ec:6c:11:d7:4b:44:a7:8e:a1:b9:67:
9f:03:54:8b:61:60:05:c6:dc:3e:3c:d2:64:a3:83:
09:e0:59:cc:40:4c:22:cd:59:fc:cd:0a:95:09:f6:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:B2:6D:C7:89:CD:46:22:96:A6:4B:0E:76:A9:79:58:33:DE:75
X509v3 Authority Key Identifier:
keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:01:d0:65:e0:a3:58:fe:90:c9:a0:13:7d:64:fc:0e:1d:c4:
46:87:2f:94:04:f9:f8:98:76:a3:b5:fe:cf:35:5e:77:44:f2:
29:3f:04:a3:34:d7:a1:61:b7:27:c4:c0:8d:38:1f:bd:fa:6f:
d3:9c:99:34:a2:4c:8a:59:9f:af:d9:c7:9c:b7:89:ec:10:5f:
dc:13:ad:ee:3d:f8:63:91:24:fd:e2:87:c3:62:62:9e:4c:fe:
36:23:18:8a:e6:a8:f0:77:20:c3:71:0b:6f:7c:c6:8b:26:da:
a3:dc:cd:d3:20:0a:6e:33:ad:e4:c1:d6:b0:fb:a1:cb:c7:58:
8a:da:4a:a7:7f:b5:40:0e:24:23:e1:3b:10:2b:f4:f7:57:b4:
3f:3a:81:99:d8:70:fa:de:57:82:96:7e:91:f9:57:72:31:1d:
a0:3f:f0:ed:43:62:28:aa:2f:27:db:3b:08:ac:73:6b:61:8a:
0d:04:12:ca:de:96:b7:41:77:c9:5f:78:af:64:e8:78:dc:be:
dd:87:bd:6b:34:d6:5b:a0:bb:7c:f9:13:aa:d4:c8:b5:eb:1e:
48:20:8c:0f:f5:f5:e1:e4:eb:61:29:8d:9f:2a:73:8c:4f:85:
77:21:3a:bc:96:84:e3:4c:c7:1c:df:ca:1b:de:06:72:26:d1:
de:c6:6e:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4LUyfA4eVwSCTCTyFr4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTM4YjIzYzFkM2JkYzRjMWE5M2NlOTJkZTc3YjNjN2M4
MzU4M2YwHhcNMjYwMzI2MTYwMTAyWhcNMjYwMzI3MTYwMTAyWjAzMTEwLwYDVQQD
Eyg1NjM2YjI2ZGM3ODljZDQ2MjI5NmE2NGIwZTc2YTk3OTU4MzNkZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUZu+OJeHfTWoN1s+02UzLxY4A2b
OR+7/Bj6SX5Zz+W32nwPKToInJgQzx6NgZ9m1S4WtdLBTMsq6glNW7ephxMgZEV7
2CGv7NwjF8u0WIZshgSqTh/XkxtYh/htoQtA9vC8qE6rznTXHjYbhEV+8RkmlB53
5y7HJdvaPq4rOraH720T/FOXllC++3/oJNSTpktLL2KbpvRaNNoY0Y40yUbeL+2i
5hC04Mo29sBIfKWEB9PqALwzy05F47wUVD/V/ez1UFSEv3MjFa7my+BF9Krvs1LG
7GwR10tEp46huWefA1SLYWAFxtw+PNJko4MJ4FnMQEwizVn8zQqVCfbG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY2sm3Hic1GIpamSw52qXlYM951MB8GA1UdIwQY
MBaAFIwTiyPB073Ewak86S3nezx8g1g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4Yzgt
ODM4MzA3YmU0ZmFhLzEvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4YzgtODM4MzA3YmU0ZmFh
LzEvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgHQZeCj
WP6QyaATfWT8Dh3ERocvlAT5+Jh2o7X+zzVed0TyKT8EozTXoWG3J8TAjTgfvfpv
05yZNKJMilmfr9nHnLeJ7BBf3BOt7j34Y5Ek/eKHw2Jinkz+NiMYiuao8Hcgw3EL
b3zGiybao9zN0yAKbjOt5MHWsPuhy8dYitpKp3+1QA4kI+E7ECv091e0PzqBmdhw
+t5XgpZ+kflXcjEdoD/w7UNiKKovJ9s7CKxza2GKDQQSyt6Wt0F3yV94r2ToeNy+
3Ye9azTWW6C7fPkTqtTIteseSCCMD/X14eTrYSmNnypzjE+FdyE6vJaE40zHHN/K
G94GcibR3sZuaw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:18 2026 by rpki-client