Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
File: jBOLI8HTvcTBqTzpLed7PHyDWD8.mft (raw, json)
Hash identifier: JmxEC0Jc7UtJYFPKhHBZD4getkRMfsPF8oCkAjXYKQY=
Subject key identifier: 24:8F:72:A6:28:E1:7A:A8:46:1A:EE:28:14:FB:12:F3:F4:6C:BA:A1
Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Certificate serial: 019DCD18DED2D3E1693C5C6A47EC04D9F461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 04:00:52 +0000
Manifest this update: Mon 27 Apr 2026 04:00:52 +0000
Manifest next update: Tue 28 Apr 2026 04:00:52 +0000
Files and hashes: 1: JeyyXekrP9-O0pqFzDG-ct1765w.roa (hash: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8=)
2: jBOLI8HTvcTBqTzpLed7PHyDWD8.crl (hash: SKtLz0DnmvvKsF4LLNQ1JojKn09ys7Oks6cJEi9JfNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:de:d2:d3:e1:69:3c:5c:6a:47:ec:04:d9:f4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Validity
Not Before: Apr 27 04:00:52 2026 GMT
Not After : Apr 28 04:00:52 2026 GMT
Subject: CN=248f72a628e17aa8461aee2814fb12f3f46cbaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:41:5b:d7:73:6a:6b:c5:c9:92:2d:c4:24:
88:22:d9:06:d0:82:8c:da:54:b3:60:bf:67:2d:cd:
29:30:50:3d:83:99:4b:25:d3:4d:09:b2:ca:f2:5d:
ad:bf:7d:8c:32:78:ce:93:bf:68:08:e2:82:07:56:
ad:46:76:52:58:b3:66:d7:54:db:a0:48:27:d4:17:
9c:55:d0:58:3d:3a:0d:b6:5c:24:aa:c6:e2:06:1e:
b5:12:74:8f:4e:f2:d5:6a:63:1e:10:5a:38:b9:5e:
da:86:52:74:21:9d:50:dc:e4:3d:57:fb:88:6e:26:
f7:18:f3:5c:fe:2d:85:28:88:9a:4e:4a:fb:62:05:
6c:38:d1:72:c9:10:99:2c:ae:7d:a4:8c:bf:d2:bb:
9a:07:2a:a7:4c:30:61:61:3a:40:cd:9d:8d:ed:6e:
fe:f0:4b:5d:f9:4f:ed:f5:0c:6e:81:17:69:91:1d:
e7:82:39:9a:79:df:36:27:39:97:da:1e:3d:c3:b0:
7c:1f:d2:bf:3b:dd:ac:92:85:61:47:ce:80:bb:77:
08:e3:2f:fb:00:77:d0:19:be:07:85:ef:ec:72:2a:
00:e8:28:3b:9e:7e:d4:3b:e6:13:0e:9d:51:7e:f1:
77:08:81:ad:be:e8:7f:35:cd:87:cd:6e:49:39:45:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:72:A6:28:E1:7A:A8:46:1A:EE:28:14:FB:12:F3:F4:6C:BA:A1
X509v3 Authority Key Identifier:
keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bc:a0:c7:55:7f:3e:47:cb:cf:81:fe:18:9f:b3:1f:4f:a1:
ea:bc:51:7b:f2:14:d1:62:c4:76:76:07:fc:2e:39:75:e6:6b:
78:2e:f4:dd:6f:21:9c:75:9f:1f:ae:fa:d3:ca:56:4d:95:f1:
2c:97:ac:53:1d:b1:06:00:87:74:b2:24:20:0f:2f:3a:c4:d7:
b0:f4:87:e5:ee:e7:01:b1:37:57:f7:52:da:f0:fc:b4:08:55:
2c:6c:c3:19:78:b6:5a:c1:4d:6e:51:ed:a3:20:51:4f:af:97:
de:59:a5:76:92:9b:ba:d7:c7:a5:43:5b:c5:da:94:22:b2:e1:
49:e0:64:25:38:70:da:b3:5f:a6:87:56:15:82:73:73:82:61:
7e:22:95:99:44:3b:1b:be:be:2c:95:cd:13:0b:b1:2b:d5:21:
ea:ef:a4:b7:0a:48:0f:87:db:03:d3:dd:ef:22:b0:b7:15:17:
85:89:ed:9d:06:d3:36:9b:07:01:61:51:ea:a3:c5:1a:46:6e:
55:cf:9e:b2:46:75:e7:63:78:1f:ae:34:3a:7b:34:72:07:88:
02:19:4e:cf:11:9b:0e:5a:a3:2d:9a:dd:0f:08:17:b1:8b:82:
e6:ca:d6:1d:d9:79:ac:48:64:0a:f8:36:37:d3:94:0f:8a:a3:
51:fc:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:11 2026 by rpki-client