Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: UzWt/YhSf0fTHN1dy3I19d+n/2N3uiohhUx+awux2zk=
Subject key identifier: BB:76:DA:F2:39:E0:21:C7:03:30:7F:BF:12:8B:58:BC:ED:3A:C8:7F
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019D284DAD4B9A691CA859467EDB7CDE3B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 151C
Signing time: Thu 26 Mar 2026 04:01:12 +0000
Manifest this update: Thu 26 Mar 2026 04:01:12 +0000
Manifest next update: Fri 27 Mar 2026 04:01:12 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: fiUByRTdIwNkcN/QDC/BYQEjKf403ZFCP6FuPDOqTNI=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ad:4b:9a:69:1c:a8:59:46:7e:db:7c:de:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Mar 26 04:01:12 2026 GMT
Not After : Mar 27 04:01:12 2026 GMT
Subject: CN=bb76daf239e021c703307fbf128b58bced3ac87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:b9:49:d2:a0:7d:55:19:7a:67:63:cd:f9:
15:d9:4e:35:be:f5:53:ab:b5:c0:0c:66:14:73:52:
36:f6:bc:da:1e:53:da:ae:85:7f:1e:70:57:76:d7:
f8:32:f1:73:a1:06:c2:64:e2:2f:0d:2e:8a:15:99:
1f:9c:ca:68:2d:23:3d:47:ad:18:d3:84:fd:6c:e9:
6f:3c:6b:d8:fa:43:ef:46:a4:32:c4:0e:19:77:91:
d9:6d:a1:cc:a8:b6:47:21:b2:03:7a:11:41:d8:f6:
50:07:43:60:c1:89:60:a9:81:c2:7a:87:58:3b:25:
c5:26:56:43:02:d0:b9:1c:1c:21:8b:af:4e:d7:79:
80:eb:bf:23:b4:fc:aa:b9:65:6e:5a:68:ac:3f:fb:
af:dc:dc:83:01:fd:8a:94:55:6b:43:e4:d6:80:20:
ca:fa:c0:4d:34:73:d0:fb:fe:2a:db:3b:db:6a:66:
8e:90:d5:0a:b7:70:f4:a4:b2:59:d2:81:e2:c2:f2:
04:31:26:75:5a:13:af:50:81:9b:f2:bc:fc:2c:e7:
b3:74:1c:46:07:94:31:26:18:f0:68:5e:e6:08:24:
16:99:ff:12:46:48:97:93:73:42:32:ab:1f:92:25:
b7:84:21:c9:2e:4e:93:8f:47:e5:aa:ae:b3:e5:d7:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:DA:F2:39:E0:21:C7:03:30:7F:BF:12:8B:58:BC:ED:3A:C8:7F
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:53:ab:f1:f7:b9:dd:f6:f0:f2:be:e6:ee:53:21:33:36:d5:
05:12:84:b1:ff:21:f6:56:b8:cb:c5:34:af:93:9d:43:4f:20:
80:eb:9f:1b:c6:b0:f8:50:09:c1:65:62:66:61:02:66:c8:77:
c6:5d:d9:79:ea:0b:5d:f6:a2:ed:c9:4f:44:ef:7a:9d:dd:f6:
de:2e:a3:62:05:55:30:c4:56:e7:0f:ad:b8:fd:ba:dd:3e:7c:
53:c9:87:e8:c1:b2:38:c7:e7:fa:23:ce:6d:0d:97:0f:9b:ed:
08:c0:82:ff:53:a3:fd:2b:4c:2a:c1:7b:e9:d5:a8:78:70:9b:
b6:42:2f:dd:41:b3:3e:f1:9b:ea:51:a1:8e:6b:0d:16:53:d8:
44:e6:23:fb:43:00:ff:9d:f9:92:b0:a7:01:9d:ec:1b:7f:d5:
dd:b8:66:db:00:20:ed:e6:e4:bc:fc:3c:c7:d1:3a:08:28:ee:
31:ef:04:b8:31:96:e1:23:50:d0:03:3b:60:33:ab:b6:cb:45:
27:a6:7d:80:a6:7b:71:26:49:c4:8b:21:25:67:52:e2:9a:5e:
65:72:de:ed:06:6e:86:a9:e2:8c:62:72:14:2a:af:e3:e4:e9:
a4:a5:96:6d:8a:6b:c4:f5:a9:99:7e:ac:9f:39:eb:61:70:27:
39:c7:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:55 2026 by rpki-client