Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: Gf4Cclk4Foxs71+wDrOXyRb011UKtRrhQ6kRhVXLqSc=
Subject key identifier: D9:84:E5:46:9F:F6:C1:A9:F0:23:25:E0:12:DA:08:DE:1C:5B:26:D5
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019E9B1805E5B154A7BDBAD5DEA935597242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 15DC
Signing time: Sat 06 Jun 2026 04:01:43 +0000
Manifest this update: Sat 06 Jun 2026 04:01:43 +0000
Manifest next update: Sun 07 Jun 2026 04:01:43 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: orpNMpb7a5n+m5WaidTcYgqrdok/v/bqJV1xI4LI5Xg=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:18:05:e5:b1:54:a7:bd:ba:d5:de:a9:35:59:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Jun 6 04:01:43 2026 GMT
Not After : Jun 7 04:01:43 2026 GMT
Subject: CN=d984e5469ff6c1a9f02325e012da08de1c5b26d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:ec:3b:88:9b:7c:85:24:7a:35:4c:5e:0f:
ba:7a:82:82:c9:69:d9:5e:5e:df:77:22:3c:d2:16:
0c:39:d3:37:a3:38:0e:58:58:5b:67:0b:b4:8a:23:
b1:a4:09:1c:37:bd:e6:fe:ff:9a:5b:3f:6b:13:5b:
75:ee:0a:3d:6b:52:6c:d1:0f:2e:70:dd:a3:45:1e:
8b:c3:9d:3f:29:f7:84:c3:33:b4:83:3b:a8:8e:5d:
41:d3:08:f3:5c:e4:35:9e:e5:90:e1:dd:82:fa:7f:
b1:0c:9f:b4:8e:2e:9d:ca:35:8c:28:45:84:31:11:
dd:32:d9:14:f7:66:04:35:7d:dc:08:ad:1a:fd:2d:
f4:f1:20:c2:f0:fd:36:10:32:36:02:77:db:58:d8:
86:18:3a:f1:7c:8a:cb:b0:90:ed:f3:7d:ad:68:2f:
ca:ec:0c:5c:d9:ae:97:26:95:15:dd:85:42:02:5d:
2d:74:1e:04:de:62:23:53:4f:7b:fb:ec:93:c4:04:
bd:3a:05:d6:c2:32:e6:dc:4e:44:fd:14:02:1c:20:
56:ce:20:e5:80:9b:15:fa:01:20:02:59:96:e2:b1:
9b:a6:29:e9:19:4d:18:d8:c1:a0:41:62:79:38:39:
be:c9:2b:b0:f5:45:21:8e:ce:0a:bb:3e:2e:32:f0:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:E5:46:9F:F6:C1:A9:F0:23:25:E0:12:DA:08:DE:1C:5B:26:D5
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b7:ea:a7:88:d0:25:05:9e:78:b5:3c:99:c6:80:74:65:e4:
05:18:95:67:31:0d:c1:f2:29:c8:9c:02:58:3c:aa:8a:e2:4a:
ae:0e:f0:bd:51:0a:ea:7d:e1:52:18:26:e9:4a:8e:c6:96:66:
60:28:8a:e3:af:2a:f4:2e:14:2f:ee:f2:a0:77:32:55:8a:2f:
72:59:a0:50:1a:58:5f:36:ac:ec:35:41:37:ca:d6:3e:09:a4:
b3:85:72:f6:9b:b8:e7:6b:39:14:73:f2:30:cf:3b:1e:f2:c1:
dc:9e:ac:68:5a:50:cd:df:78:f3:5f:7a:90:1c:d9:a1:4d:c3:
ed:d0:e9:fb:c5:f1:74:e8:33:50:ed:86:a3:a6:34:34:42:b6:
23:34:a7:1f:95:0f:e1:70:0e:f2:68:96:ec:d5:54:b2:08:bf:
82:64:16:17:ce:e8:9d:8c:c3:83:b5:c4:fc:92:26:ec:94:9a:
79:69:5d:90:95:48:51:eb:e5:79:fb:13:b8:65:8d:ac:d8:87:
a5:78:4d:b8:f5:bd:3c:36:32:e1:00:e0:f8:ff:13:c7:2b:dd:
51:c2:79:d2:bd:04:98:a6:45:30:62:e3:99:8e:0f:00:73:89:
02:14:b5:f4:43:67:1d:ec:cb:fe:34:6b:de:ca:4d:6a:12:6a:
2f:59:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:35 2026 by rpki-client