Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: SMHLMMHGNO/em1ZLmHbgt9y7rEs5K0Q981Za3567thI=
Subject key identifier: A5:B6:7C:FC:1A:F7:FE:56:74:BD:44:28:C0:21:7C:C7:64:B6:6C:1C
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019DB16B3CD74525AD6D8F76105A9712AC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 1563
Signing time: Tue 21 Apr 2026 19:01:28 +0000
Manifest this update: Tue 21 Apr 2026 19:01:28 +0000
Manifest next update: Wed 22 Apr 2026 19:01:28 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: VpJpf2t7fBPFJRzF3udtGiRs8EQNBIcclZ83s7NNgY0=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:3c:d7:45:25:ad:6d:8f:76:10:5a:97:12:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Apr 21 19:01:28 2026 GMT
Not After : Apr 22 19:01:28 2026 GMT
Subject: CN=a5b67cfc1af7fe5674bd4428c0217cc764b66c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:38:e7:20:c0:38:f5:4f:8b:b3:16:25:e2:
8a:47:c0:c2:33:6c:bb:16:86:2a:35:e0:92:39:74:
e5:bb:ad:0a:74:3b:e1:da:91:05:db:a8:df:47:80:
4a:b7:d3:fb:f8:61:48:8f:54:78:72:6b:3c:aa:31:
55:e9:d3:6c:a3:57:46:62:b2:2c:a1:d5:a5:f9:64:
9a:56:fe:14:2a:e6:8f:1e:97:e9:e5:f4:fc:9b:a6:
a1:f2:00:05:73:81:24:d5:df:1e:58:cf:32:96:86:
12:d0:c8:ff:aa:ec:7b:e5:a8:d9:8a:84:7a:ba:9b:
f4:53:bc:38:d1:b4:f1:95:c8:59:fc:d7:69:70:bb:
34:42:38:f9:6b:15:cf:89:5e:aa:2b:b5:b5:47:86:
82:4f:00:61:53:ee:e0:bb:8e:7a:98:2c:e1:30:2a:
2c:93:bf:23:c4:c0:95:e5:38:12:62:29:d8:31:75:
55:5b:b4:3a:9d:07:7c:43:67:fb:57:5d:79:0b:ed:
64:10:ae:f7:01:91:b5:32:64:a5:1d:75:74:89:e5:
d8:83:04:98:33:ba:9d:d0:78:82:15:c9:d9:bb:5e:
36:6d:cd:9b:ef:7b:18:15:34:40:d3:4f:57:db:a4:
78:d7:af:28:9f:d6:0e:f0:32:bd:f6:74:d4:d9:d4:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:7C:FC:1A:F7:FE:56:74:BD:44:28:C0:21:7C:C7:64:B6:6C:1C
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1e:a4:47:93:b6:69:3a:25:e6:53:c2:7e:b0:50:d6:29:b6:
2c:42:89:04:d1:3a:70:74:89:5e:49:8c:f8:03:e9:1e:45:15:
f9:fe:14:71:4c:ea:01:3b:be:c8:71:e5:18:98:97:3f:29:de:
c7:99:8d:21:fd:26:5d:a4:b1:a6:2e:9d:a0:b3:3a:d6:d0:c2:
da:27:1c:3e:29:17:cd:85:c6:51:5b:7b:a9:5c:a7:0f:53:7c:
d2:aa:08:8e:64:cc:39:26:82:3f:e7:87:8b:02:1e:2b:24:0b:
b8:8a:f9:10:92:88:50:86:ca:27:13:f9:3d:80:6f:50:a6:a0:
48:f9:07:a5:70:b6:98:51:7a:38:d9:13:6f:db:75:29:17:92:
2f:9c:80:84:26:f3:a2:75:8f:0b:b2:f1:30:53:bd:9c:27:83:
19:94:35:95:5f:a9:55:d3:4c:f7:f9:f9:52:a8:7b:9e:e8:42:
58:20:c0:fc:7d:94:ed:2b:36:c5:52:f7:97:68:3e:1f:83:50:
73:a5:0e:26:02:96:84:fe:3f:d2:17:a2:ab:a7:81:ad:5a:ad:
71:31:b9:b9:c5:10:92:30:c8:50:11:fb:30:f9:15:2c:8f:74:
fa:7a:14:70:ec:14:93:4f:e9:d4:2a:78:47:c0:12:a5:9d:60:
92:cf:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:08:08 2026 by rpki-client