Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
File: jBOLI8HTvcTBqTzpLed7PHyDWD8.mft (raw, json)
Hash identifier: Flre+ciBkoKzi8CZR6eLJNx8aaoY74SGm8ajqlE8+z8=
Subject key identifier: FF:60:11:EA:29:BB:16:E3:A4:5F:9E:39:9D:1D:E2:04:EF:8B:09:F6
Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Certificate serial: 01A08C0CEE4ED875C6465E5EE71AF5D89024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 16:00:52 +0000
Manifest this update: Thu 10 Sep 2026 16:00:52 +0000
Manifest next update: Fri 11 Sep 2026 16:00:52 +0000
Files and hashes: 1: JeyyXekrP9-O0pqFzDG-ct1765w.roa (hash: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8=)
2: jBOLI8HTvcTBqTzpLed7PHyDWD8.crl (hash: 4zzccdTxevRybOeTPXkyjGDG6qLViLEVMvD+2r6fNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:ee:4e:d8:75:c6:46:5e:5e:e7:1a:f5:d8:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f
Validity
Not Before: Sep 10 16:00:52 2026 GMT
Not After : Sep 11 16:00:52 2026 GMT
Subject: CN=ff6011ea29bb16e3a45f9e399d1de204ef8b09f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:a3:72:ac:22:1c:9c:2c:36:be:96:5d:94:
57:8d:2b:bb:55:7b:d2:19:0c:c3:4c:c4:3e:f6:5e:
2a:27:57:c0:f4:6d:b4:9d:fd:62:48:43:16:be:4d:
db:dd:39:a0:fe:18:3c:8d:13:39:46:f3:2f:2d:58:
18:6e:30:5a:fa:45:8b:df:2e:2d:ff:68:f3:32:2d:
c6:89:07:b3:47:c4:45:16:f6:41:0a:c8:05:2f:22:
a1:f8:b5:f9:88:b3:fb:20:25:fd:18:70:72:96:29:
01:94:5a:48:f3:89:8b:82:14:4d:3c:68:31:03:57:
85:b3:03:ec:e0:2f:97:78:03:9a:f3:71:97:5d:97:
17:c3:f0:40:d9:14:32:29:44:41:40:b8:55:0a:49:
2e:4d:9c:ee:f2:bc:e1:b6:13:6e:67:10:37:0d:78:
05:ee:6e:9d:2e:f4:36:19:d7:18:c4:f9:cf:4c:9f:
35:d8:93:ac:6e:97:03:2f:47:83:d5:57:fe:9e:2b:
44:e2:fb:c1:19:71:c1:97:99:53:0c:36:7a:b0:33:
7f:65:69:46:5e:4b:b8:6f:00:70:52:4c:7b:83:22:
d6:24:db:d2:3f:e3:d4:ce:e2:de:20:0e:0c:fe:32:
2f:81:3b:e2:4c:4a:f4:a2:fc:9e:80:70:70:5d:29:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:11:EA:29:BB:16:E3:A4:5F:9E:39:9D:1D:E2:04:EF:8B:09:F6
X509v3 Authority Key Identifier:
keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:82:36:cd:b6:f1:db:0c:91:0c:44:46:70:b6:96:a7:34:4d:
a2:41:25:ca:ce:c3:86:fa:78:e5:3c:8a:82:75:21:0a:41:10:
84:98:6a:1e:bf:e5:4a:cb:87:54:31:32:5c:e5:ab:c6:03:40:
f9:1e:73:68:3b:ee:3e:99:c8:d3:b1:26:07:76:a1:f2:df:2a:
a1:fe:35:b0:c0:f0:d6:55:3b:e2:64:f2:b6:1f:d3:9d:fd:73:
c3:c9:f6:27:d7:7e:ad:30:36:6e:eb:5b:eb:dc:77:a1:e2:0a:
82:4b:d9:6c:5d:1e:dd:3d:e8:25:d8:b2:1b:19:70:52:54:b4:
44:bc:7c:3d:f6:3d:e4:ce:aa:17:b4:19:cf:32:6d:72:ec:5a:
8b:61:2d:4c:ba:d4:df:0a:64:c8:f6:b0:15:d5:da:f7:c9:64:
f6:bf:11:4d:2c:11:a1:ee:69:4a:00:3c:e2:eb:ee:6c:1a:54:
e2:d0:74:d5:4a:ce:a4:6b:bf:f6:ff:99:e9:65:c8:59:79:ce:
04:d8:f4:8f:9b:dc:e5:f3:cd:03:ee:49:0b:5e:8c:42:90:2a:
fb:0a:a0:88:2a:ea:bc:a6:a4:ba:4a:c7:df:a9:01:fc:4d:67:
48:fd:a7:8b:16:60:6e:37:7a:00:e3:f2:d5:40:0c:c3:1a:74:
bb:9f:7a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDO5O2HXGRl5e5xr12JAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTM4YjIzYzFkM2JkYzRjMWE5M2NlOTJkZTc3YjNjN2M4
MzU4M2YwHhcNMjYwOTEwMTYwMDUyWhcNMjYwOTExMTYwMDUyWjAzMTEwLwYDVQQD
EyhmZjYwMTFlYTI5YmIxNmUzYTQ1ZjllMzk5ZDFkZTIwNGVmOGIwOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlKjcqwiHJwsNr6WXZRXjSu7VXvS
GQzDTMQ+9l4qJ1fA9G20nf1iSEMWvk3b3Tmg/hg8jRM5RvMvLVgYbjBa+kWL3y4t
/2jzMi3GiQezR8RFFvZBCsgFLyKh+LX5iLP7ICX9GHBylikBlFpI84mLghRNPGgx
A1eFswPs4C+XeAOa83GXXZcXw/BA2RQyKURBQLhVCkkuTZzu8rzhthNuZxA3DXgF
7m6dLvQ2GdcYxPnPTJ812JOsbpcDL0eD1Vf+nitE4vvBGXHBl5lTDDZ6sDN/ZWlG
Xku4bwBwUkx7gyLWJNvSP+PUzuLeIA4M/jIvgTviTEr0ovyegHBwXSlAfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9gEeopuxbjpF+eOZ0d4gTviwn2MB8GA1UdIwQY
MBaAFIwTiyPB073Ewak86S3nezx8g1g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4Yzgt
ODM4MzA3YmU0ZmFhLzEvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4YzgtODM4MzA3YmU0ZmFh
LzEvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASII2zbbx
2wyRDERGcLaWpzRNokElys7Dhvp45TyKgnUhCkEQhJhqHr/lSsuHVDEyXOWrxgNA
+R5zaDvuPpnI07EmB3ah8t8qof41sMDw1lU74mTyth/Tnf1zw8n2J9d+rTA2butb
69x3oeIKgkvZbF0e3T3oJdiyGxlwUlS0RLx8PfY95M6qF7QZzzJtcuxai2EtTLrU
3wpkyPawFdXa98lk9r8RTSwRoe5pSgA84uvubBpU4tB01UrOpGu/9v+Z6WXIWXnO
BNj0j5vc5fPNA+5JC16MQpAq+wqgiCrqvKakukrH36kB/E1nSP2nixZgbjd6AOPy
1UAMwxp0u596/g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:14 2026 by rpki-client