Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: G0ogWXEim9bR1fz2IWgMDnJZg9ERCRLoiwXg9dS+ODc=
Subject key identifier: 34:84:FA:23:40:98:52:66:BB:7F:E5:97:2B:A2:FF:26:98:EA:EE:12
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 01A0DC84D421DEFD9C5FC74E3C1ED6F3307D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 1707
Signing time: Sat 26 Sep 2026 07:01:27 +0000
Manifest this update: Sat 26 Sep 2026 07:01:27 +0000
Manifest next update: Sun 27 Sep 2026 07:01:27 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: FCFL7wIwQBheGJTlgtm3TB3v2TquVLSNlcI8qGjWjBI=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:d4:21:de:fd:9c:5f:c7:4e:3c:1e:d6:f3:30:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Sep 26 07:01:27 2026 GMT
Not After : Sep 27 07:01:27 2026 GMT
Subject: CN=3484fa2340985266bb7fe5972ba2ff2698eaee12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:25:29:06:ca:d0:09:6d:25:b6:d3:31:af:
af:71:99:2f:e0:b3:c4:07:4e:01:d2:52:37:25:4e:
90:72:c3:77:08:dc:6b:7c:97:83:38:74:10:e7:e9:
05:b3:86:76:a1:be:a4:61:2d:7b:66:ba:ca:3a:55:
20:dc:3d:22:ae:50:aa:68:74:6e:19:a8:08:59:7a:
b2:8c:67:7d:5b:87:f3:f6:fa:35:61:2b:0a:39:65:
d9:41:f4:2e:59:95:5a:f5:3e:11:3d:c2:9e:b3:b3:
06:77:40:ac:ab:71:cf:40:b0:08:e7:9f:7a:6e:1c:
d1:3a:60:67:fc:98:94:f8:14:8f:25:ab:e1:7c:a1:
5e:51:87:41:1a:0c:82:90:a2:c1:69:d2:14:fd:6a:
d9:fd:80:33:50:64:d8:6f:4a:b7:74:d2:c6:bc:6c:
ba:95:30:02:9e:c9:95:e8:26:3e:dd:69:c9:ff:c1:
c7:74:08:f6:84:5d:d9:66:37:2c:a4:bd:57:71:5d:
b0:db:12:f6:e4:a0:9a:d8:f4:01:c2:93:2d:48:74:
56:75:f0:2d:08:16:90:4c:c8:e3:a3:51:11:a3:59:
24:70:ce:c3:9b:2c:b1:ce:1d:ac:d4:51:ee:07:98:
6e:3c:df:5d:ea:13:e4:5d:c1:e7:c4:b8:32:fb:62:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:FA:23:40:98:52:66:BB:7F:E5:97:2B:A2:FF:26:98:EA:EE:12
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e4:a6:6b:a0:3f:41:9b:0f:5a:2a:a2:cb:f5:a4:06:7d:3a:
c2:e0:df:81:4c:a6:d9:a3:26:fc:78:24:9a:57:31:39:73:2c:
4a:e2:c6:2b:9d:5c:67:41:e0:c8:06:65:66:21:61:4c:6e:16:
01:a8:e5:bb:fd:0a:49:77:bd:88:2a:74:5b:71:d2:7a:d1:98:
b0:4e:d0:9b:b6:d4:54:27:f9:55:05:55:73:34:b9:da:35:7c:
f8:fc:5a:d6:09:fc:44:d6:2f:e3:0a:5f:45:82:cf:d9:06:8b:
9f:09:fc:fc:06:7f:6c:58:db:2f:0e:43:e9:75:f2:60:c7:b2:
89:9e:9f:9d:fa:d0:aa:1a:23:3d:5b:74:db:cb:e9:d7:93:5e:
60:cd:c1:07:04:90:b6:f7:b8:4a:17:23:cf:25:7d:96:af:dc:
64:96:89:0a:76:b3:00:ac:5d:83:44:82:76:ba:3c:62:26:f8:
86:15:de:69:88:c5:7f:a0:59:b5:94:ce:3d:4f:69:e4:9d:80:
37:23:90:4d:2e:18:3b:19:4b:ff:2b:d3:e9:6f:f1:c0:8f:49:
c4:db:00:53:7a:4e:2b:8d:0e:38:61:37:45:e3:df:33:a9:8b:
dd:c0:05:ff:ce:f6:78:1b:86:a3:8c:26:53:75:07:57:aa:46:
86:68:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:38:56 2026 by rpki-client