Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
File: jBOLI8HTvcTBqTzpLed7PHyDWD8.mft (raw, json)
Hash identifier: 7DQtgaauv7Knom9FHbvaYT+MYrOSk+C/4rUSJil9Hng=
Subject key identifier: F5:29:F6:4E:0B:B0:F9:13:BA:E1:CD:82:38:30:CB:78:F4:7B:FB:46
Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Certificate serial: 01A17995A2AD18559B83A5EB0719D998A710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
Manifest number: 02DB
Signing time: Mon 26 Oct 2026 19:00:11 +0000
Manifest this update: Mon 26 Oct 2026 19:00:11 +0000
Manifest next update: Tue 27 Oct 2026 19:00:11 +0000
Files and hashes: 1: JeyyXekrP9-O0pqFzDG-ct1765w.roa (hash: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8=)
2: jBOLI8HTvcTBqTzpLed7PHyDWD8.crl (hash: NaUg5lp40c3Jn3SV1wLSri+ZUOwooL7pJtcOeIJmhW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:a2:ad:18:55:9b:83:a5:eb:07:19:d9:98:a7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Validity
Not Before: Oct 26 19:00:11 2026 GMT
Not After : Oct 27 19:00:11 2026 GMT
Subject: CN=f529f64e0bb0f913bae1cd823830cb78f47bfb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:d6:7e:cd:0c:02:a2:d2:95:af:c2:7a:00:
54:3e:a3:69:6a:93:65:00:e2:cb:5a:8b:ca:6a:c9:
0a:d3:6c:81:2a:a8:bd:50:f4:12:7f:9d:bc:d8:ac:
ad:30:70:ea:15:39:ad:f3:39:23:2a:a5:56:da:08:
0b:a9:b3:90:9e:50:41:e2:c7:eb:5b:f0:dd:95:e7:
5c:a4:2a:82:0c:5d:ce:e9:37:d9:55:e8:18:ce:a6:
5f:ce:8b:44:cb:f9:79:df:2d:e7:70:1e:e0:47:fb:
8b:79:f5:6c:1c:b3:b5:0f:66:e4:c0:2e:41:a3:f4:
84:e5:2e:67:20:39:cb:db:08:42:06:ec:fd:0c:88:
b0:84:60:a6:10:6b:8d:db:51:84:0d:ee:af:97:75:
84:15:f7:ed:1b:f9:a3:08:72:6a:70:98:f4:b8:80:
0d:54:63:7e:7e:19:2c:6a:62:4c:56:73:69:1c:df:
0d:ab:c8:18:fc:01:95:f6:42:5e:c1:6b:75:2a:51:
06:90:d1:cc:d8:f6:73:a9:2e:5d:f4:50:44:b5:14:
90:f8:75:48:d0:9b:66:1e:fe:cb:dc:5f:d1:c9:2d:
15:84:6a:ed:7e:36:bf:46:4f:30:69:bd:58:95:da:
fb:86:e3:94:65:c3:7a:23:2c:d0:e4:51:33:60:2c:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:F6:4E:0B:B0:F9:13:BA:E1:CD:82:38:30:CB:78:F4:7B:FB:46
X509v3 Authority Key Identifier:
keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:24:03:42:50:a3:cc:b7:70:a1:9a:51:89:0e:e3:d6:be:
b0:59:7e:b1:56:42:60:a9:20:79:1d:59:ad:91:8d:00:fe:d8:
c3:51:42:75:6d:e9:06:9f:08:a0:b2:21:29:6a:09:5c:fa:3e:
49:c2:a2:91:1c:54:16:a6:06:8a:10:5a:15:69:7a:3a:cf:a7:
97:77:94:52:f3:40:0c:86:5e:b5:3c:a3:ef:6c:ad:30:5f:c9:
d3:93:ba:0d:a7:74:8c:19:27:2e:58:16:41:91:72:e0:15:e2:
8f:3c:e1:ce:57:01:15:09:ca:88:8e:7e:da:3b:d7:ec:6b:af:
74:58:0a:e6:8e:0b:db:42:83:d7:93:ef:86:7d:98:1f:4f:0d:
d2:3b:39:d4:ef:07:d8:95:ab:53:6f:8f:6b:fa:ee:1f:34:36:
48:23:14:2a:59:8d:a6:91:28:73:69:2a:97:3d:2d:00:c2:89:
22:fa:88:aa:58:72:fa:a1:b7:78:4d:42:db:db:17:14:72:fe:
92:ad:d0:4f:33:84:bc:6b:e9:e4:b8:79:ae:6d:29:a2:4f:85:
d9:2c:65:6d:04:43:5a:38:00:50:39:22:8a:a3:f5:48:f5:69:
90:a1:be:60:1b:f6:d0:0d:0c:9f:d7:13:a8:f1:b9:64:37:6a:
a1:8f:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:05:54 2026 by rpki-client