Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: +u9CGyQcX+CT5qXAH9ss8WfQ/s0CPI1B/6Vdugb9LqU=
Subject key identifier: 08:31:83:A9:50:FA:F4:8F:23:D3:B3:12:56:D5:B7:17:DC:33:B0:43
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019E2C281BE6CA4AD33055D236925F06225E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 14BB
Signing time: Fri 15 May 2026 15:01:26 +0000
Manifest this update: Fri 15 May 2026 15:01:26 +0000
Manifest next update: Sat 16 May 2026 15:01:26 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: cfNkikMlP29+bRxmRS/JQ669QbBWBm6pjgug/xAgoP4=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:28:1b:e6:ca:4a:d3:30:55:d2:36:92:5f:06:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: May 15 15:01:26 2026 GMT
Not After : May 16 15:01:26 2026 GMT
Subject: CN=083183a950faf48f23d3b31256d5b717dc33b043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:c8:52:18:e6:24:e2:81:40:75:9c:3b:c2:
c0:a1:d1:58:c1:fb:63:9b:cd:f9:a3:c2:64:54:30:
7c:e8:77:71:a4:c8:fb:82:41:e0:75:d5:f5:0e:ca:
67:32:ce:13:8c:94:0f:b8:3c:a7:84:24:3a:da:fb:
e5:9e:71:a5:27:fd:c4:81:4a:43:df:4e:3a:27:53:
5c:bf:c4:fa:d7:60:1d:cf:72:1d:34:b1:08:11:39:
29:66:42:b8:b5:0b:42:eb:15:b9:ff:6f:da:53:70:
ea:23:8d:5a:37:3a:1e:ae:b3:e3:66:91:1a:11:50:
c1:f0:11:46:38:0f:8a:27:5c:15:9c:74:7b:53:42:
e4:9d:c8:60:bd:bb:b2:6a:d4:cc:c2:77:30:3e:34:
49:02:ea:3c:fb:bf:8a:84:1b:32:3d:1e:50:08:b5:
54:34:17:bd:29:b2:e9:f8:36:77:7b:55:e5:d0:b8:
14:1c:6d:42:48:33:2b:c7:c0:ae:b8:52:24:1a:89:
ad:92:e3:bb:a1:ba:c9:83:04:7b:69:3d:71:44:c8:
db:7d:15:ec:49:e7:85:5a:57:bc:c4:9f:df:10:08:
d9:2d:68:da:0e:75:85:85:ab:30:03:c4:5a:22:17:
a5:19:52:32:4d:cd:bb:cd:cf:19:6f:ab:d8:9b:64:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:83:A9:50:FA:F4:8F:23:D3:B3:12:56:D5:B7:17:DC:33:B0:43
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:15:0a:29:e6:f5:cc:a0:04:8c:f2:83:96:2b:47:be:62:1d:
36:88:13:41:97:f5:42:0b:79:12:1b:3e:a5:8c:94:d5:64:da:
fa:97:6d:b8:11:77:7a:98:6b:fd:24:76:b9:a3:ef:b4:26:5e:
9a:96:8b:0a:25:a7:d5:46:45:b0:9e:71:7d:b4:99:9d:fa:9a:
c4:69:e4:06:d5:5e:23:b6:1a:85:34:85:14:75:5e:94:5b:0a:
8c:cf:06:86:dd:89:7d:f2:72:0f:69:87:7b:a3:be:5f:cf:68:
b9:c3:ae:9b:5d:42:87:a0:1e:7b:74:e7:72:ba:e8:33:e4:88:
02:b8:fa:c6:79:25:aa:c4:80:23:4c:13:21:e3:0b:8d:06:66:
0a:33:97:ce:77:a7:cb:3c:b5:3c:fa:ad:74:fc:03:69:40:cf:
b0:a0:45:07:66:0b:91:f7:d5:ab:cb:dd:38:81:93:1c:3c:6e:
f4:3c:88:07:43:39:0d:a8:4e:c7:3f:cb:13:91:6e:91:b2:84:
e4:d9:f9:d1:54:d6:7b:99:41:7b:9d:4a:e8:74:88:e7:e4:20:
59:4b:ed:64:25:72:1a:17:f2:85:bd:37:27:b4:16:66:21:3d:
5b:e8:57:52:13:9b:60:8b:80:47:89:6b:ce:0f:ae:da:13:40:
a0:fe:91:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:03:43 2026 by rpki-client