Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: 1kbjXkw4nS4PAfMv76UTrSenhi9SQISCYLDP6YnhQzU=
Subject key identifier: DF:2A:75:15:23:64:4D:67:96:E6:A3:93:6F:BD:85:44:67:AB:C5:24
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019E1D9049220E99A13EFE6977B03ED9C95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 159B
Signing time: Tue 12 May 2026 19:00:55 +0000
Manifest this update: Tue 12 May 2026 19:00:55 +0000
Manifest next update: Wed 13 May 2026 19:00:55 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: CDTCeAHRag20G+Ckkm2B3EO4iQXRwfRc9ldEYx378ew=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:49:22:0e:99:a1:3e:fe:69:77:b0:3e:d9:c9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: May 12 19:00:55 2026 GMT
Not After : May 13 19:00:55 2026 GMT
Subject: CN=df2a751523644d6796e6a3936fbd854467abc524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:44:4a:ea:01:3d:ec:5c:95:91:f2:32:4e:
52:7b:77:f1:72:e1:25:eb:da:7f:57:1b:2d:b4:ad:
0c:9c:39:b4:d9:ec:c0:fc:da:89:15:95:93:ef:5e:
29:44:ae:a8:1e:71:cc:6f:cc:03:c8:46:94:68:ee:
4c:f7:49:07:b3:20:cf:db:c3:ce:b9:38:b5:9c:cc:
97:5d:ef:f2:48:e8:11:c9:e7:eb:31:57:c2:0f:f2:
77:e7:72:5a:e4:cf:4a:1a:cc:a9:d4:63:af:b0:9f:
96:a0:e1:69:b8:5a:9e:ce:58:ad:c4:ae:4f:62:d9:
d2:a9:ba:c6:6a:13:f6:76:35:da:f1:3d:a5:6c:00:
7d:7c:51:09:74:23:ca:2e:4b:36:83:07:e3:88:20:
ab:4d:e2:08:70:03:fe:b8:74:c8:ba:86:d0:b0:af:
4d:60:b5:bc:77:07:03:82:3f:70:2e:3f:da:f5:84:
a5:0e:51:72:51:37:6a:4a:40:be:06:37:dd:9d:ad:
29:c0:42:10:18:fd:3d:1b:85:af:05:a1:3b:ce:73:
a2:4b:a4:6a:3c:22:5c:98:81:1f:f2:42:1b:1c:fd:
d4:42:08:0c:23:99:9e:8b:47:67:4c:25:ee:dd:3c:
b7:09:23:13:8d:0a:dc:dc:fb:70:c7:1c:5b:2a:c7:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2A:75:15:23:64:4D:67:96:E6:A3:93:6F:BD:85:44:67:AB:C5:24
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:51:98:85:9b:83:01:80:5c:e3:60:72:1a:6a:38:e1:11:a1:
d3:26:f9:15:9c:42:cb:3f:6c:a7:ab:db:c5:06:7e:ad:88:c3:
b5:d7:95:97:e8:5a:70:38:fe:25:dd:c3:91:69:3a:08:5a:30:
83:40:9b:83:30:f1:07:97:8c:5d:a8:a3:7f:00:4b:24:44:b6:
ac:f1:3b:c0:65:40:d5:a8:81:29:e4:63:9d:0e:04:e5:40:da:
c0:ec:e7:50:e6:e7:f6:2b:b5:31:fa:dc:4f:b2:6c:de:2b:99:
9e:f0:af:7d:5b:5d:6f:61:52:6e:97:2d:b2:86:6e:dd:eb:84:
dd:1a:65:fe:4c:d6:f2:97:5b:28:d9:95:97:12:5b:bd:61:0d:
f5:b3:83:1e:21:47:48:f2:2e:68:03:3f:dc:45:a6:1f:73:82:
b7:20:f2:6c:52:7d:3d:96:ef:1b:66:26:6f:ab:04:60:41:70:
ef:65:be:86:e0:35:0e:f1:84:8c:d5:bc:6a:2a:cb:67:5d:17:
ef:f2:a7:73:72:24:c5:58:b3:d9:86:9f:79:c7:46:6a:62:33:
5b:9b:d3:ed:00:e3:e7:29:f6:59:a0:2d:d4:d9:ab:a0:f4:52:
79:9f:2b:a1:be:e2:eb:52:24:72:22:28:0e:91:cb:8d:38:8c:
7e:d1:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:12 2026 by rpki-client